Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
File:                     AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json)
Hash identifier:          u+pZSyr9bMlF/sEWspra6fi2urwhHwuvRgP0/8E+XOA=
Subject key identifier:   CC:ED:97:A0:0F:3A:E3:7D:5B:D5:E4:73:80:16:64:27:D0:F7:AC:95
Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44
Certificate issuer:       /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
Manifest number:          013B
Signing time:             Sat 13 Jun 2026 05:24:28 +0000
Manifest this update:     Sat 13 Jun 2026 05:24:27 +0000
Manifest next update:     Sat 20 Jun 2026 05:24:27 +0000
Files and hashes:         1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: N2GTu9ctau+XPsbXttNixM/uVllpt44glJ+aMg+GlNg=)
                          2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: YmKXPzEd/i2vL9lk0X6JhFLGyxL9//RGwrN43Nv93+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44
        Validity
            Not Before: Jun 13 05:24:27 2026 GMT
            Not After : Jun 20 05:24:27 2026 GMT
        Subject: CN=6a2ce98c-80eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7d:21:01:ab:97:bb:96:4f:a3:ae:da:d8:a4:
                    04:17:a3:77:96:d3:f4:dc:5e:8b:22:41:e4:0f:40:
                    b8:60:0b:d4:6d:c3:94:47:12:90:23:8c:8e:a9:53:
                    f6:36:57:70:88:bb:33:25:6f:4b:28:af:09:c6:01:
                    e4:08:39:1b:a3:89:fc:9d:a7:a6:11:09:c7:d7:ed:
                    70:17:bd:cf:56:73:3f:da:18:1e:6b:1d:a6:da:da:
                    cc:3e:c2:b7:5a:97:65:d3:78:9d:8f:40:15:b1:63:
                    72:15:1a:18:7b:18:ec:6f:af:cd:29:b7:07:a4:8d:
                    68:9d:e1:60:ad:bc:79:49:f9:1b:f3:45:c7:cc:2b:
                    1a:7b:4c:3a:31:ca:9b:bb:00:69:0a:62:4d:bc:c0:
                    4c:95:81:86:ac:84:6d:6d:a3:b3:e8:82:fc:ea:6c:
                    a1:68:12:eb:55:69:2f:c0:7d:9e:63:a1:88:c1:ab:
                    40:2c:51:4d:9e:c7:dc:fe:77:d8:62:49:95:84:ca:
                    db:a0:d1:99:fb:f6:17:34:68:1b:84:d5:d6:6d:7e:
                    19:7d:2d:3f:66:e3:c6:f1:5c:6a:d2:ee:49:67:e2:
                    f7:44:fc:84:d7:de:64:94:2c:73:8b:2c:85:fd:17:
                    b8:cc:07:ab:ab:0c:75:d0:57:5c:7f:0a:91:75:ac:
                    9b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:ED:97:A0:0F:3A:E3:7D:5B:D5:E4:73:80:16:64:27:D0:F7:AC:95
            X509v3 Authority Key Identifier:
                keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:b7:e7:05:9f:60:8a:9d:33:d3:db:6d:57:63:8c:e3:56:73:
         93:00:04:b1:50:0d:15:29:c4:1a:b5:44:2f:14:75:95:cb:a5:
         7c:47:96:6e:d5:fd:7e:68:64:d0:b9:d3:c8:d9:65:73:bc:71:
         3b:f3:ba:98:31:fe:2f:10:27:79:77:5b:90:f8:5b:a8:31:af:
         af:d8:49:80:f0:c6:a1:a3:93:84:dd:dd:41:7d:bc:9c:b9:92:
         7e:e3:c3:4e:f7:8b:f9:0c:0f:f3:93:6c:fb:09:83:a9:1d:eb:
         77:c7:8d:ec:1a:c6:6d:7a:f8:88:9a:d4:a0:91:47:23:0c:8b:
         8d:41:7f:9e:ef:1e:c4:5b:4c:a6:b9:2c:3d:96:8c:dd:f5:a1:
         5f:1c:7a:80:c8:c8:a7:eb:26:2a:10:28:2e:c5:7a:9a:66:f8:
         0a:e1:ab:04:b3:2a:c4:00:f9:3c:1c:15:80:81:d6:f8:13:d2:
         70:6d:08:05:dc:77:9e:01:f7:0e:aa:75:f1:33:b3:c2:04:20:
         46:42:5a:84:51:ed:00:35:26:33:ff:93:a2:ae:8e:46:de:05:
         c3:b5:8c:c4:00:6c:5e:b8:66:be:d1:e5:0c:df:d7:2b:c9:37:
         46:46:cf:12:ed:eb:88:a4:20:d3:94:63:d7:fd:51:77:8f:a1:
         77:48:4d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:40:15 2026 by rpki-client