Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft
File:                     axGMFY4LjZuYTs3ceLJEgC5HBUc.mft (raw, json)
Hash identifier:          v9Cqmb9MXms04IrcbtDXbIb18tf71tNP7owOPVEnM0E=
Subject key identifier:   52:A2:B3:E1:A7:5F:E8:34:3B:AF:62:06:5A:9C:AC:1C:3B:23:DB:6C
Authority key identifier: 6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47
Certificate issuer:       /CN=A91F1F2A/serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft
Manifest number:          97
Signing time:             Thu 23 Jul 2026 09:14:47 +0000
Manifest this update:     Thu 23 Jul 2026 09:14:47 +0000
Manifest next update:     Thu 30 Jul 2026 09:14:47 +0000
Files and hashes:         1: axGMFY4LjZuYTs3ceLJEgC5HBUc.crl (hash: 3e2gJ7QQit/UmURdXzz6uNQyCRn+cloB5fM3PVHqOSE=)
                          2: DE6BD6189F8F11F08976857BC4F9AE02.roa (hash: gEDKwshdmBsC3CB4+s8rKksc9ZXswjsTOQAKy74q070=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl
                          rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1F2A, serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547
        Validity
            Not Before: Jul 23 09:14:47 2026 GMT
            Not After : Jul 30 09:14:47 2026 GMT
        Subject: CN=6a61db87-ced1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:fb:fc:a5:1a:b2:11:48:5a:19:4b:56:aa:
                    7c:4b:b2:21:b5:9a:46:4b:4f:63:e6:b9:22:86:07:
                    59:18:17:3a:ac:9c:ee:f1:7c:d2:4b:ec:6f:93:1a:
                    af:1f:f9:61:78:d1:86:28:f3:08:d1:4a:34:ea:d6:
                    d6:8b:f7:ff:43:68:fd:a9:c3:ba:7b:e5:21:cc:fa:
                    70:b2:0d:15:d4:a5:8c:81:cc:1a:6f:5f:56:53:c9:
                    ac:22:28:59:3a:b1:d2:8a:aa:e7:80:8b:12:e3:3a:
                    6d:22:cb:ed:9a:30:a8:58:ce:93:0c:c1:51:d7:56:
                    33:08:9b:bf:93:61:57:2a:61:55:eb:ed:e3:75:3f:
                    4f:ca:60:9d:cd:14:bc:a4:a9:3d:5a:61:b7:3e:f9:
                    6c:6e:73:75:a2:f2:10:d0:dc:b7:58:d5:c5:cb:dc:
                    43:d1:ce:49:df:39:79:24:db:70:7c:c0:a2:3d:5c:
                    f9:bc:2a:64:c0:fb:39:0c:a8:9a:3e:f8:bc:d5:a0:
                    40:1b:38:39:62:3f:3d:00:3b:64:08:52:1d:9a:87:
                    0a:f2:b9:40:5b:4d:38:d9:38:fe:5f:c3:0c:71:32:
                    ee:a7:e4:c5:46:24:b3:e0:2f:65:91:11:77:f6:da:
                    9e:11:71:ab:7a:43:ef:22:60:49:22:e6:75:f3:ad:
                    10:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A2:B3:E1:A7:5F:E8:34:3B:AF:62:06:5A:9C:AC:1C:3B:23:DB:6C
            X509v3 Authority Key Identifier:
                keyid:6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:aa:56:97:0c:f4:b9:71:c7:b7:e0:a7:53:f9:fb:33:ea:d4:
         16:e4:96:15:6e:20:64:05:5e:d3:f4:68:be:67:97:23:7d:e1:
         0b:6d:b1:84:9a:bb:9a:0a:50:b7:98:25:37:f0:fe:61:2e:8a:
         bb:79:87:b9:ef:e5:e8:e9:f4:ce:b0:6f:c8:e2:b6:e2:4e:e8:
         2f:f1:94:b9:bf:4b:e9:ed:44:81:01:b4:9b:f5:2e:f7:5f:b3:
         69:23:f9:e8:c8:d7:f8:3c:ba:25:14:c7:d2:15:22:05:d1:94:
         42:35:91:db:42:0a:68:51:49:1c:da:b3:1c:ec:a4:03:4b:75:
         be:7d:21:fe:22:07:ba:4f:2b:50:fd:7b:ee:e2:e6:d2:19:03:
         53:51:89:63:b1:a3:9f:65:22:c8:23:49:95:2b:e8:a5:db:fb:
         01:7e:5f:58:d5:c8:75:d1:d5:14:89:32:1a:34:7b:bb:21:82:
         2e:29:38:a7:77:b5:f1:b9:14:67:b7:ba:28:5a:38:bd:3a:40:
         32:83:3a:32:8f:1a:44:e3:ea:0b:24:16:a1:9c:bb:21:c7:1d:
         ca:bc:4e:5d:9f:26:26:15:d9:d6:76:1f:b9:1c:75:75:4b:9e:
         3b:2c:63:f5:85:0e:1c:92:a0:ea:b6:df:14:9a:cf:b4:00:3d:
         3b:c7:25:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:31 2026 by rpki-client