Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft
File:                     AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json)
Hash identifier:          8WTpZ6NVxrjZGugHYofFE6sbsQ1yRzw4ocbkfDZSIvg=
Subject key identifier:   A0:14:9C:53:A5:E6:A4:B8:9B:0C:EB:85:C6:85:42:6A:BF:DD:97:AB
Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37
Certificate issuer:       /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237
Certificate serial:       107C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft
Manifest number:          106D
Signing time:             Tue 24 Mar 2026 17:16:18 +0000
Manifest this update:     Tue 24 Mar 2026 17:16:18 +0000
Manifest next update:     Tue 31 Mar 2026 17:16:18 +0000
Files and hashes:         1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: ooTZLWfk3EjKemX5UyOMgwJRLSMM9sEIb6e5ZN69ayo=)
                          2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: qFHFmRVCbMNHnJYtHdzfYVVLl0Q/VMUun8JPyz9/IMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl
                          rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4220 (0x107c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237
        Validity
            Not Before: Mar 24 17:16:18 2026 GMT
            Not After : Mar 31 17:16:18 2026 GMT
        Subject: CN=69c2c6e2-0c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:ca:d3:4e:94:a3:5c:71:fb:cf:53:7b:02:
                    c8:50:e1:06:96:29:71:c0:8f:49:32:85:6d:2b:cc:
                    44:7a:80:24:e0:f9:b3:72:ac:03:ec:86:c6:45:12:
                    60:e3:1d:be:21:80:51:cd:14:7b:db:ef:5d:45:61:
                    95:54:56:91:f5:d0:44:64:6b:ad:1b:18:2d:9c:ad:
                    7e:d2:83:c0:f1:d7:4d:1f:97:3f:b1:ac:9f:01:f0:
                    98:67:24:42:e5:5c:b7:d5:3c:f5:93:70:c0:05:9a:
                    d0:7d:49:95:28:13:a8:aa:71:3f:e1:6a:21:9a:82:
                    ef:3c:79:36:50:b7:15:0a:d8:15:05:2f:7d:9d:be:
                    e9:86:8b:71:0b:15:55:e4:f7:68:47:34:70:cf:ea:
                    9a:50:7b:fe:52:ba:37:31:82:da:0f:c1:3e:f3:25:
                    6b:2a:3f:14:2f:8e:d9:fe:78:95:93:de:dc:36:bd:
                    d0:cd:c2:45:4b:42:dd:12:e8:d8:a2:48:67:73:30:
                    aa:33:81:65:b4:4a:7a:ea:da:35:2b:1e:88:b1:9e:
                    17:8f:24:00:59:3f:2d:d4:93:47:8f:d5:e6:eb:43:
                    39:44:0e:8c:00:84:60:1c:ef:64:2c:cb:57:8b:33:
                    05:aa:2b:ca:e1:9a:d6:e0:ae:f7:b9:3c:8a:e4:bc:
                    7a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:14:9C:53:A5:E6:A4:B8:9B:0C:EB:85:C6:85:42:6A:BF:DD:97:AB
            X509v3 Authority Key Identifier:
                keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e9:fc:12:78:13:a9:41:3c:a0:f9:98:30:3e:ce:e8:f3:7d:
         0f:59:ad:dd:12:9c:5b:2e:4f:85:8a:c6:bb:6d:1b:9f:6f:9e:
         15:b5:7a:f6:f0:e3:fb:02:f8:4a:5e:3b:15:04:0d:94:97:59:
         c2:2e:72:5b:49:13:23:ea:c3:75:09:30:bc:89:f2:e9:72:26:
         db:c1:ca:c5:ae:f2:eb:de:2c:15:44:1e:09:96:37:3b:d5:ed:
         7b:0f:13:42:18:ac:77:66:18:61:db:b2:1f:79:04:b3:43:5a:
         6e:a1:95:a1:97:0d:d1:b1:71:7f:7d:cd:4a:0c:78:f4:99:02:
         a9:d1:0a:75:1b:7c:25:15:24:2c:f1:8b:d7:f2:ac:18:40:1c:
         79:19:e1:82:7e:31:02:4c:b8:76:e9:13:a5:5b:70:f5:da:eb:
         0a:78:90:6e:c9:61:26:4b:b7:ed:20:32:5f:95:44:7d:7c:1a:
         33:50:b8:39:09:47:46:74:f3:43:b0:60:51:ca:af:45:47:86:
         5a:53:6d:a3:f3:da:a0:03:f8:95:3f:a7:76:18:cc:eb:93:32:
         99:0a:c5:2e:4c:25:1d:80:f1:2d:c7:7a:30:28:7d:c8:69:1b:
         61:89:0c:b6:6b:41:ab:e5:22:0a:28:08:0a:8b:3a:92:bf:81:
         46:7d:9b:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU5RjcxMTAvBgNVBAUTKDAxNzBCMEUwRDA2RTMxNDczQ0FDMTY0RTRCMEI2RDIx
QkRGNEQyMzcwHhcNMjYwMzI0MTcxNjE4WhcNMjYwMzMxMTcxNjE4WjAYMRYwFAYD
VQQDEw02OWMyYzZlMi0wYzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuOXK006Uo1xx+89TewLIUOEGlilxwI9JMoVtK8xEeoAk4PmzcqwD7IbGRRJg
4x2+IYBRzRR72+9dRWGVVFaR9dBEZGutGxgtnK1+0oPA8ddNH5c/sayfAfCYZyRC
5Vy31Tz1k3DABZrQfUmVKBOoqnE/4WohmoLvPHk2ULcVCtgVBS99nb7photxCxVV
5PdoRzRwz+qaUHv+Uro3MYLaD8E+8yVrKj8UL47Z/niVk97cNr3QzcJFS0LdEujY
okhnczCqM4FltEp66to1Kx6IsZ4XjyQAWT8t1JNHj9Xm60M5RA6MAIRgHO9kLMtX
izMFqivK4ZrW4K73uTyK5Lx6mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKAUnFOl
5qS4mwzrhcaFQmq/3ZerMB8GA1UdIwQYMBaAFAFwsODQbjFHPKwWTksLbSG99NI3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNy8zNzlFQzc0MjU0
NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1VYzhyQlpPU3d0dEliMzAw
amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FYQ3c0TkJ1TVVjOHJCWk9Td3R0SWIzMDBqYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTlGNy8zNzlFQzc0MjU0NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1V
YzhyQlpPU3d0dEliMzAwamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATun8EngTqUE8oPmYMD7O6PN9D1mt3RKcWy5PhYrGu20bn2+eFbV69vDj+wL4
Sl47FQQNlJdZwi5yW0kTI+rDdQkwvIny6XIm28HKxa7y694sFUQeCZY3O9Xtew8T
Qhisd2YYYduyH3kEs0NabqGVoZcN0bFxf33NSgx49JkCqdEKdRt8JRUkLPGL1/Ks
GEAceRnhgn4xAky4dukTpVtw9drrCniQbslhJku37SAyX5VEfXwaM1C4OQlHRnTz
Q7BgUcqvRUeGWlNto/PaoAP4lT+ndhjM65MymQrFLkwlHYDxLcd6MCh9yGkbYYkM
tmtBq+UiCigICos6kr+BRn2b2Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:59 2026 by rpki-client