Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
File:                     AXJLovQFMrfgjXIPTAlmQbShyMQ.mft (raw, json)
Hash identifier:          TqXgYIAeUD3TWznRFJnyyupUzdpaJrGRcwI7c5YSZ/0=
Subject key identifier:   6E:19:2B:34:73:72:42:DF:27:83:31:57:94:5C:23:3C:1C:59:32:C1
Authority key identifier: 01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4
Certificate issuer:       /CN=A9138271/serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4
Certificate serial:       057F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
Manifest number:          0578
Signing time:             Thu 26 Mar 2026 23:05:05 +0000
Manifest this update:     Thu 26 Mar 2026 23:05:04 +0000
Manifest next update:     Thu 02 Apr 2026 23:05:04 +0000
Files and hashes:         1: AXJLovQFMrfgjXIPTAlmQbShyMQ.crl (hash: X1jMFvqBNL8E08QyWbp7Tni5OFYyf41N2C6iApcWbhs=)
                          2: BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa (hash: YLl0P9jlwEhhHZ25T2nyiDfkAV9RXLStwFdD/BEgbUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl
                          rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407 (0x57f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138271, serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4
        Validity
            Not Before: Mar 26 23:05:04 2026 GMT
            Not After : Apr  2 23:05:04 2026 GMT
        Subject: CN=69c5bba1-b6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:02:52:b6:16:6e:08:43:55:75:a5:a0:a4:
                    d4:c2:70:f4:b6:65:38:fc:d0:10:f6:6f:58:f2:42:
                    24:68:96:91:65:87:9d:1c:17:9c:cf:6a:75:56:6f:
                    d8:f2:dc:61:0d:0c:33:cb:f8:35:43:e1:88:9e:1a:
                    d8:94:75:ad:e6:df:24:5c:d5:cf:97:02:8b:71:2d:
                    de:bb:2d:36:f5:c0:a0:24:45:53:60:23:5b:17:e9:
                    d8:35:5d:c2:f0:cf:ec:bb:26:56:55:ba:c7:b0:31:
                    4d:38:95:43:d0:d0:22:9a:9a:a3:6f:85:3f:e6:82:
                    63:22:61:1d:49:69:fd:2b:0e:74:4b:e1:11:ba:91:
                    a2:ec:f8:1a:58:29:4f:20:06:d6:f6:ef:81:e3:5a:
                    1b:f5:d7:9f:1b:19:74:f0:7b:4f:a5:74:b6:f3:b8:
                    f2:8d:15:48:26:fa:52:05:11:17:5f:21:c6:bd:ff:
                    df:10:98:62:ec:32:15:73:6f:8c:ba:e6:8b:d7:c7:
                    3f:85:3c:34:f8:35:59:a4:7d:19:e4:a2:ff:f1:94:
                    8f:6b:71:65:84:50:82:57:a5:cb:47:5f:9c:fe:ed:
                    ce:04:db:3c:24:bf:11:b9:fa:5e:4e:1f:de:cf:0e:
                    a9:9a:83:38:f4:6e:7a:51:2a:76:87:76:1d:b7:d7:
                    7b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:19:2B:34:73:72:42:DF:27:83:31:57:94:5C:23:3C:1C:59:32:C1
            X509v3 Authority Key Identifier:
                keyid:01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:37:5f:f1:3e:da:aa:1a:01:5b:aa:5b:8f:52:89:71:3a:cc:
         e4:d8:80:69:7d:16:4b:9c:5c:80:78:89:80:14:d6:74:f1:0f:
         43:28:c0:77:cb:f8:91:f5:34:07:f3:d2:26:0c:4a:74:b2:5b:
         16:71:29:10:5b:7f:13:6c:60:d8:2c:07:37:50:b9:e6:9e:bb:
         23:5a:5d:f0:de:cc:d1:77:61:7c:3b:c8:4b:00:7f:d8:81:3a:
         6e:e1:70:ea:48:fc:81:23:d9:9a:c7:f1:35:7f:46:6f:4f:e2:
         cb:e4:5d:9f:96:7e:7a:ff:c5:08:2d:08:90:35:be:82:ed:e5:
         19:dc:fc:9b:04:20:6a:e7:92:54:46:de:ce:b3:97:4f:55:c2:
         29:d4:70:49:ae:7f:c6:5e:28:a8:5b:27:30:74:02:7a:2f:cc:
         16:51:16:b1:20:da:88:b6:0d:9a:a7:90:7b:77:71:cb:0a:b8:
         d9:3f:2c:54:6c:2f:93:e9:c4:67:94:19:4d:7b:cf:bd:45:be:
         05:5f:d1:ba:00:a5:d1:17:76:bb:97:0c:9d:64:68:f6:a2:e9:
         fa:9d:5c:a1:87:db:2c:9c:90:67:66:2f:62:d7:ec:fc:4c:fe:
         81:04:b2:66:18:23:74:91:1c:63:c6:4a:60:95:50:91:77:70:
         c7:37:64:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgyNzExMTAvBgNVBAUTKDAxNzI0QkEyRjQwNTMyQjdFMDhENzIwRjRDMDk2NjQx
QjRBMUM4QzQwHhcNMjYwMzI2MjMwNTA0WhcNMjYwNDAyMjMwNTA0WjAYMRYwFAYD
VQQDEw02OWM1YmJhMS1iNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtXYCUrYWbghDVXWloKTUwnD0tmU4/NAQ9m9Y8kIkaJaRZYedHBecz2p1Vm/Y
8txhDQwzy/g1Q+GInhrYlHWt5t8kXNXPlwKLcS3euy029cCgJEVTYCNbF+nYNV3C
8M/suyZWVbrHsDFNOJVD0NAimpqjb4U/5oJjImEdSWn9Kw50S+ERupGi7PgaWClP
IAbW9u+B41ob9defGxl08HtPpXS287jyjRVIJvpSBREXXyHGvf/fEJhi7DIVc2+M
uuaL18c/hTw0+DVZpH0Z5KL/8ZSPa3FlhFCCV6XLR1+c/u3OBNs8JL8RufpeTh/e
zw6pmoM49G56USp2h3Ydt9d7tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4ZKzRz
ckLfJ4MxV5RcIzwcWTLBMB8GA1UdIwQYMBaAFAFyS6L0BTK34I1yD0wJZkG0ocjE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODI3MS84MUY5RTJEMDFD
NDQxMUVDOUIyRTZBNUZDNEY5QUUwMi9BWEpMb3ZRRk1yZmdqWElQVEFsbVFiU2h5
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FYSkxvdlFGTXJmZ2pYSVBUQWxtUWJTaHlNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODI3MS84MUY5RTJEMDFDNDQxMUVDOUIyRTZBNUZDNEY5QUUwMi9BWEpMb3ZRRk1y
ZmdqWElQVEFsbVFiU2h5TVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVDdf8T7aqhoBW6pbj1KJcTrM5NiAaX0WS5xcgHiJgBTWdPEPQyjAd8v4kfU0
B/PSJgxKdLJbFnEpEFt/E2xg2CwHN1C55p67I1pd8N7M0XdhfDvISwB/2IE6buFw
6kj8gSPZmsfxNX9Gb0/iy+Rdn5Z+ev/FCC0IkDW+gu3lGdz8mwQgaueSVEbezrOX
T1XCKdRwSa5/xl4oqFsnMHQCei/MFlEWsSDaiLYNmqeQe3dxywq42T8sVGwvk+nE
Z5QZTXvPvUW+BV/RugCl0Rd2u5cMnWRo9qLp+p1coYfbLJyQZ2YvYtfs/Ez+gQSy
ZhgjdJEcY8ZKYJVQkXdwxzdkzA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:25 2026 by rpki-client