Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
File:                     AxycJuW6sbAa8YoLsblwq1dzRWs.mft (raw, json)
Hash identifier:          q+EDlhONE/p8L2P+o5I1mXY19L7br0RmbKv9Vkd/AwA=
Subject key identifier:   5C:33:E2:AA:FB:B1:5A:8D:E5:0D:0E:5B:66:19:00:2E:4E:7B:46:B5
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Certificate issuer:       /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial:       06F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
Manifest number:          06A4
Signing time:             Thu 16 Apr 2026 22:34:39 +0000
Manifest this update:     Thu 16 Apr 2026 22:34:38 +0000
Manifest next update:     Thu 23 Apr 2026 22:34:38 +0000
Files and hashes:         1: AxycJuW6sbAa8YoLsblwq1dzRWs.crl (hash: ipEa1HnoD4emC1YsWPqjEQr4uWO6r/bAj1nMZinskAU=)
                          2: E88EE726E93611EF9E3FF729C4F9AE02.roa (hash: OIMoYuOlDFIxnQLjJwwfFn81y6oP24XgHKLcwV1zvZk=)
                          3: 37DF315640B111F0B139F22BC4F9AE02.roa (hash: g+Gj7U1+efQL3hqCetjfGn6GeGSvm7QivUZN+eVJ75c=)
                          4: 3B428CDA8AE011EF90B73462C4F9AE02.roa (hash: gxgtsWBnEAP6vapnZK0uqNLpyymktd5A/5L7ecDmBUQ=)
                          5: F2CF477E50C711EF8B03E673C4F9AE02.roa (hash: TqJzuidUjyyQb1G7wiFhjyqX67oOjt0bf49SD3Yyr2c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
                          rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1777 (0x6f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
        Validity
            Not Before: Apr 16 22:34:38 2026 GMT
            Not After : Apr 23 22:34:38 2026 GMT
        Subject: CN=69e163fe-37f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b7:af:f2:9e:8a:7d:d5:b2:dc:ed:51:a6:e4:
                    ad:2f:50:fd:7b:c1:d3:ee:ae:45:9c:e1:a7:12:7f:
                    a5:59:6f:25:5d:ec:c7:87:af:c9:87:3a:9d:93:e8:
                    1a:99:7a:5f:52:83:73:23:3d:4a:86:11:3c:99:ef:
                    31:4a:69:5f:47:6d:be:f8:7a:f9:98:71:4c:c0:70:
                    ba:5f:82:0d:02:83:ca:38:ba:36:0a:4c:2b:59:d2:
                    35:fc:19:d3:53:00:bd:13:e4:7f:b4:f9:c7:fd:ef:
                    49:5a:d2:c5:dd:fd:f0:09:0c:a8:48:05:1f:53:59:
                    fa:68:64:a5:10:d8:ce:fd:31:4c:ac:1a:7c:f6:3b:
                    42:1a:c5:60:ee:a0:14:a7:ca:22:1f:24:75:a1:fb:
                    ca:d6:2f:ca:f5:96:d8:35:7f:e8:59:cb:98:38:b5:
                    d9:ff:69:b3:42:eb:d2:9a:77:14:ac:10:56:44:a6:
                    30:14:e7:80:27:d3:f9:c7:b6:01:26:1c:43:e3:88:
                    89:ba:7e:e3:c4:c3:04:f3:6d:f4:25:be:9d:45:78:
                    5a:76:a2:38:3f:36:f7:c4:b4:e6:bc:ff:cb:38:8c:
                    bd:61:d9:6f:3d:11:39:5d:ac:62:ed:9e:d4:38:8d:
                    0a:5a:ff:9e:a3:1d:7b:ff:83:ce:55:c1:4c:0a:26:
                    09:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:33:E2:AA:FB:B1:5A:8D:E5:0D:0E:5B:66:19:00:2E:4E:7B:46:B5
            X509v3 Authority Key Identifier:
                keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5e:f6:5f:21:ac:7a:d9:ef:87:6d:fd:c0:48:9a:5c:51:3c:
         29:e5:7c:03:57:b8:c3:3d:e1:ad:b1:40:1f:01:33:e5:ad:23:
         f3:b3:6d:ed:53:81:5c:19:c3:4b:53:e3:ac:be:ba:54:ee:16:
         b3:ae:19:43:6e:80:b0:cb:3a:38:e0:59:1a:c2:96:9e:58:f2:
         75:cb:28:9d:09:a5:6e:67:bc:97:a2:9d:51:ab:d4:8a:cd:b7:
         ee:c2:a4:14:30:55:8c:14:8e:4d:65:84:ad:0b:1d:0d:2c:82:
         6a:f9:f4:38:63:19:7f:98:e0:65:69:0d:ba:00:76:1e:44:4b:
         d7:74:f6:cd:3d:b2:1d:61:20:8f:71:6e:22:18:d1:40:db:c2:
         27:67:ad:ac:62:fa:74:81:2b:a2:a2:40:a2:fc:7d:24:36:eb:
         fa:40:2a:af:43:0c:63:fa:85:0e:35:d3:e1:6e:a2:01:2e:7e:
         56:98:b4:99:7b:a5:f0:2c:af:c1:26:5a:c2:fc:91:21:a9:a3:
         31:22:aa:67:1e:95:06:f5:ac:e2:d0:cf:7b:d6:39:1c:e5:ee:
         1b:2c:1c:d5:d9:25:b1:04:6f:dc:99:a9:f9:87:92:12:d1:7f:
         96:34:36:38:fc:0f:a7:28:53:75:26:ba:51:72:02:9b:d0:c9:
         5e:5f:66:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:06 2026 by rpki-client