Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft
File:                     AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json)
Hash identifier:          rfBwVq+77+yzfyXf0+OFvZj1E4pUwNeNzU/KlZcwqko=
Subject key identifier:   32:E3:13:98:B0:20:3C:F6:1D:F8:33:42:B2:BD:23:C9:A5:14:38:2D
Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37
Certificate issuer:       /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237
Certificate serial:       1095
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft
Manifest number:          1086
Signing time:             Tue 12 May 2026 17:23:47 +0000
Manifest this update:     Tue 12 May 2026 17:23:46 +0000
Manifest next update:     Tue 19 May 2026 17:23:46 +0000
Files and hashes:         1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: z3690BFjwXW4kYDWzPFruEqGeXDR9juZVWX0dR1QHqA=)
                          2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: qFHFmRVCbMNHnJYtHdzfYVVLl0Q/VMUun8JPyz9/IMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl
                          rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4245 (0x1095)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237
        Validity
            Not Before: May 12 17:23:46 2026 GMT
            Not After : May 19 17:23:46 2026 GMT
        Subject: CN=6a036222-a156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:32:85:4b:8d:b2:68:ca:c3:61:cb:2a:8e:7b:
                    81:c6:9b:ab:c4:e4:65:e2:17:43:c3:dd:6a:84:13:
                    e6:2f:66:d2:cf:d8:ed:ab:97:80:f4:01:68:2e:16:
                    13:a2:5e:6d:f6:10:46:74:8c:d4:6d:c4:0a:4c:70:
                    58:82:89:dd:6a:4c:7a:e7:19:9d:78:d6:b0:af:85:
                    fc:14:34:c3:5e:5d:6c:20:90:9e:0e:74:59:70:47:
                    2f:cc:dd:26:20:dd:34:47:f4:52:52:38:03:6d:06:
                    d7:74:cf:9c:88:f3:fc:08:c3:a8:83:46:8f:92:c6:
                    b0:f3:34:e6:68:bd:94:8c:e9:e7:19:ef:ba:07:a6:
                    3c:52:4b:61:e1:be:10:0c:89:54:a0:4a:14:2f:64:
                    df:59:56:79:bd:28:9e:52:72:a7:26:89:d0:c1:79:
                    00:db:73:4e:0f:65:38:0b:33:93:97:7b:93:73:8d:
                    fd:c6:9e:32:57:13:62:75:82:ef:c6:ee:dd:d1:e0:
                    f9:f9:48:67:af:8f:f7:25:11:0a:23:3e:44:37:19:
                    01:95:74:1c:50:a2:b4:c3:be:7a:cf:20:10:10:87:
                    88:02:cd:97:e7:fc:94:d0:01:20:9e:53:8e:d7:74:
                    40:02:11:06:cf:c2:fd:19:3f:bc:27:87:39:4e:51:
                    48:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E3:13:98:B0:20:3C:F6:1D:F8:33:42:B2:BD:23:C9:A5:14:38:2D
            X509v3 Authority Key Identifier:
                keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:d9:ce:8d:2f:9f:c9:d9:d2:1c:b1:a1:7f:92:91:bc:7d:2d:
         11:cd:ef:ee:11:1c:fd:de:99:5a:88:f3:e0:b1:d5:8d:67:08:
         40:fe:15:ff:c6:f7:0e:76:3f:43:d9:f7:5d:17:8d:15:a6:46:
         95:87:b8:64:c4:a1:f2:4a:6c:d5:c7:03:bb:e0:d5:e1:68:fe:
         c8:f7:bf:16:c4:68:fb:f9:5e:c9:4f:30:e4:27:fc:2a:f8:ea:
         38:0f:c5:da:5d:86:28:e4:c1:67:f4:dc:78:59:c5:05:4f:8c:
         ca:ab:5f:55:cf:47:2d:e1:43:bf:47:42:8d:0f:38:dc:4d:38:
         60:5c:47:7c:a3:d1:c4:01:f3:ee:04:fc:ac:47:a8:4e:6c:ef:
         fb:b2:4b:d8:19:5d:c9:ff:e8:e5:9a:b5:df:2a:fb:c3:3e:76:
         fa:0c:c6:84:55:70:45:eb:35:79:75:23:12:56:ab:a8:47:2c:
         5d:73:fc:97:9d:3f:64:f8:07:87:58:db:9f:78:42:36:57:f8:
         0a:e2:a4:bb:36:87:e5:8c:64:07:1c:79:01:7f:cd:cc:45:88:
         e9:c6:c5:d2:bf:f5:5e:c2:0b:9c:6f:87:26:7a:2f:08:2c:dd:
         70:e4:1e:ec:f1:38:16:e9:28:d5:3d:3d:c6:f9:dc:93:a8:15:
         c6:47:5b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:20:12 2026 by rpki-client