Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
File:                     AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json)
Hash identifier:          9XCeRH2Dk7q8xyTUyHpNpPP4zpOwSfL2oDq4Fh9GRlk=
Subject key identifier:   01:73:EA:F4:7D:45:2F:8E:AE:F5:B4:44:FE:A0:6E:27:E6:52:74:6C
Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44
Certificate issuer:       /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
Manifest number:          0105
Signing time:             Sun 01 Mar 2026 07:07:57 +0000
Manifest this update:     Sun 01 Mar 2026 07:07:57 +0000
Manifest next update:     Sun 08 Mar 2026 07:07:57 +0000
Files and hashes:         1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: jirOGVYggl7f8eTS+Rd1W6BjxXQsHzwMTN8uygZEsC0=)
                          2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: svxCNz/PtUeVtTEkfJI0UGnsP9Tbd78MIluuCyhiaVA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44
        Validity
            Not Before: Mar  1 07:07:57 2026 GMT
            Not After : Mar  8 07:07:57 2026 GMT
        Subject: CN=69a3e5cd-12f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e6:ce:f0:31:85:55:5a:c7:ef:5f:75:3f:c9:
                    bf:4c:a1:2c:33:0e:f0:ca:52:b3:ac:5c:6f:39:7a:
                    ef:b6:0d:c6:8a:b8:55:f4:1b:bb:7b:59:62:54:41:
                    df:65:1b:b1:f0:af:7f:8c:88:07:b2:62:ee:40:25:
                    74:ae:d0:8e:b4:2b:5c:53:c1:6a:8a:e3:9e:0b:b0:
                    54:5e:0c:5d:7f:a4:f0:22:be:a6:83:40:b3:77:42:
                    45:10:d0:5e:a4:89:b9:54:8d:f3:d7:4a:22:56:80:
                    ee:ac:54:1c:78:78:0c:e5:28:5c:9f:d7:8e:e1:3f:
                    a2:fd:d2:ff:de:82:5f:b0:7c:00:f3:c1:35:72:fe:
                    68:ee:3d:df:d6:8e:35:fb:31:0b:5f:1f:b9:38:87:
                    7b:ec:09:2e:05:60:d8:e1:5a:37:4f:4e:48:ef:10:
                    11:d5:b0:df:b4:b1:37:15:e3:f2:4e:28:db:9d:9c:
                    3d:e2:25:bb:b7:78:62:f0:0a:c3:ca:0e:95:6e:7f:
                    1f:ac:f2:e0:52:98:d9:64:07:c8:8d:34:ab:81:12:
                    a4:5e:da:c1:c0:6d:c7:ba:e2:da:ee:59:70:04:50:
                    b0:b6:81:93:8b:b9:55:74:6a:d1:3a:3b:95:27:c3:
                    59:79:97:fe:bd:0c:20:19:6c:e2:d8:cc:c8:f4:2a:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:73:EA:F4:7D:45:2F:8E:AE:F5:B4:44:FE:A0:6E:27:E6:52:74:6C
            X509v3 Authority Key Identifier:
                keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:14:e5:92:ec:3a:ca:ad:bf:ac:30:ef:5f:17:7b:f9:46:1c:
         2b:3e:62:4e:b3:eb:41:ad:ce:aa:00:78:bb:2c:1a:0f:95:01:
         38:59:58:40:09:a8:32:e5:6a:4e:8a:19:9c:2d:33:9b:4f:87:
         96:73:f3:14:e8:28:b2:49:bd:ea:42:34:da:4d:d2:70:1d:9c:
         67:27:e3:02:60:39:49:a0:d0:82:4e:cf:d3:14:5b:0b:50:d6:
         46:cb:e5:98:81:ff:07:d2:5b:70:a3:a9:63:61:30:e4:87:a2:
         63:d6:97:a9:82:da:02:fe:74:f3:07:3e:d1:77:ce:00:5d:f9:
         d3:93:26:1e:b4:23:f1:49:30:25:9b:b2:bc:56:e2:5f:ab:dd:
         81:3f:99:3a:2f:e4:ec:37:86:b7:18:12:bd:81:0a:9e:96:d8:
         d5:13:87:e6:d1:01:e4:b9:d4:31:62:c0:f8:4c:ad:fb:f3:40:
         a8:5a:95:6c:67:23:8a:b9:08:82:ce:04:da:6b:7d:ff:91:75:
         41:d8:bb:4c:1d:87:ad:5f:f7:fb:29:66:af:34:98:19:d7:6f:
         08:f1:33:f0:97:5d:24:4f:2e:cc:f0:d5:31:67:35:8d:8f:6e:
         24:55:b2:ee:81:3b:10:59:3f:40:57:5a:34:f8:c9:77:dc:52:
         2f:cd:de:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:18 2026 by rpki-client