Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
File:                     AxycJuW6sbAa8YoLsblwq1dzRWs.mft (raw, json)
Hash identifier:          pETdEbFs1g+o45fv9n+/jK+Kli/nd+6sQhV5hxB34LQ=
Subject key identifier:   4D:7D:45:0E:51:35:53:F7:EA:74:A5:15:06:A0:04:04:3F:91:11:73
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Certificate issuer:       /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial:       073C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
Manifest number:          06EF
Signing time:             Thu 10 Sep 2026 22:20:26 +0000
Manifest this update:     Thu 10 Sep 2026 22:20:26 +0000
Manifest next update:     Thu 17 Sep 2026 22:20:26 +0000
Files and hashes:         1: AxycJuW6sbAa8YoLsblwq1dzRWs.crl (hash: Dgb44OZa4Seiu5KTxsI37fqHcI/6i97lPMFRUu3EM48=)
                          2: E88EE726E93611EF9E3FF729C4F9AE02.roa (hash: OIMoYuOlDFIxnQLjJwwfFn81y6oP24XgHKLcwV1zvZk=)
                          3: F2CF477E50C711EF8B03E673C4F9AE02.roa (hash: TqJzuidUjyyQb1G7wiFhjyqX67oOjt0bf49SD3Yyr2c=)
                          4: 37DF315640B111F0B139F22BC4F9AE02.roa (hash: g+Gj7U1+efQL3hqCetjfGn6GeGSvm7QivUZN+eVJ75c=)
                          5: 3B428CDA8AE011EF90B73462C4F9AE02.roa (hash: gxgtsWBnEAP6vapnZK0uqNLpyymktd5A/5L7ecDmBUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
                          rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 22:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1852 (0x73c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
        Validity
            Not Before: Sep 10 22:20:26 2026 GMT
            Not After : Sep 17 22:20:26 2026 GMT
        Subject: CN=6aa32d2a-fb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bc:70:9e:01:ce:e6:c1:e4:e4:a2:37:43:9c:
                    41:d3:54:75:bb:58:1c:af:53:f5:1e:40:59:80:a5:
                    2f:f8:cc:f3:64:0f:37:15:ce:9d:50:87:8a:2d:8a:
                    2b:c3:da:c1:0d:17:d8:48:14:2f:78:53:64:f8:3e:
                    08:c7:e7:11:72:bb:c0:c2:e7:f1:c5:57:ea:61:57:
                    20:d2:a2:31:05:29:72:aa:32:b4:76:6a:57:fb:00:
                    f7:4e:33:d8:ed:60:5d:3c:fe:29:6d:d0:9d:f2:a1:
                    e8:cd:23:45:3e:12:7c:78:77:1c:af:e8:ab:ba:ae:
                    b4:3d:8e:f1:fc:75:b5:5e:71:f4:d1:fa:81:92:97:
                    71:d0:31:7d:fd:82:e5:aa:83:ef:a3:d2:5f:78:be:
                    39:07:51:2e:fc:35:97:cb:0d:bb:3d:e6:0e:77:b5:
                    c0:09:aa:f1:5a:4b:92:20:eb:e6:fc:c3:15:29:ba:
                    47:1e:15:27:3e:af:4d:ed:69:9d:b4:3d:39:10:f5:
                    76:98:56:ee:a6:59:5a:55:a1:16:2c:3f:36:b1:d9:
                    9c:d8:a7:c3:8f:ea:7b:c6:36:a4:03:db:c6:7f:f2:
                    89:c8:eb:bd:7f:57:ea:e9:a7:45:a1:46:64:29:96:
                    ce:56:9e:f5:3a:09:f9:8d:79:3e:f6:8a:d8:f6:d0:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7D:45:0E:51:35:53:F7:EA:74:A5:15:06:A0:04:04:3F:91:11:73
            X509v3 Authority Key Identifier:
                keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e5:cf:0b:4a:21:bc:12:92:07:4f:99:fd:5e:be:9f:cf:be:
         77:64:d2:aa:47:96:b6:83:0c:d0:d4:0a:14:07:d6:24:ae:83:
         7f:16:99:e8:f2:c4:e8:69:b1:65:45:2c:07:23:7e:e6:cf:21:
         19:c0:ce:a4:8a:97:a6:6b:d6:ce:0c:da:85:91:c9:a2:36:58:
         d6:dc:7b:c1:bd:ac:2f:ab:a8:b7:bb:94:92:5e:0f:00:6c:aa:
         50:4c:ee:7f:24:80:1a:95:d3:8b:a1:6b:b6:d0:f0:f9:f1:04:
         c1:72:e6:c4:3e:bf:f9:4e:4d:1f:1a:ff:06:14:a2:56:c5:08:
         4e:d0:de:fe:3c:38:ed:e0:aa:ce:ce:af:6b:fe:f5:b6:00:82:
         c5:9c:87:52:14:23:e1:b2:16:37:7f:a9:7e:b5:81:18:1e:28:
         9c:12:47:b0:8e:75:ac:c5:07:41:02:9e:a5:75:c4:83:a7:e2:
         c1:97:2f:ee:7e:90:a1:46:38:e4:08:2f:11:88:0d:d4:90:b3:
         22:4f:d6:73:79:90:18:06:0c:d3:e5:41:12:5d:a9:cb:11:e9:
         32:70:a1:54:ad:d3:8f:d2:6a:d5:a9:e8:ec:6b:3b:a5:7d:cb:
         28:13:87:67:71:c7:13:8f:24:20:8d:f0:74:19:c1:ae:27:cb:
         47:86:fe:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC
NTc3MzQ1NkIwHhcNMjYwOTEwMjIyMDI2WhcNMjYwOTE3MjIyMDI2WjAYMRYwFAYD
VQQDEw02YWEzMmQyYS1mYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA17xwngHO5sHk5KI3Q5xB01R1u1gcr1P1HkBZgKUv+MzzZA83Fc6dUIeKLYor
w9rBDRfYSBQveFNk+D4Ix+cRcrvAwufxxVfqYVcg0qIxBSlyqjK0dmpX+wD3TjPY
7WBdPP4pbdCd8qHozSNFPhJ8eHccr+iruq60PY7x/HW1XnH00fqBkpdx0DF9/YLl
qoPvo9JfeL45B1Eu/DWXyw27PeYOd7XACarxWkuSIOvm/MMVKbpHHhUnPq9N7Wmd
tD05EPV2mFbupllaVaEWLD82sdmc2KfDj+p7xjakA9vGf/KJyOu9f1fq6adFoUZk
KZbOVp71Ogn5jXk+9orY9tDhGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE19RQ5R
NVP36nSlFQagBAQ/kRFzMB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4
RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDhEOS81NDgzQkZCNkM4RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNi
QWE4WW9Mc2Jsd3ExZHpSV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACeXPC0ohvBKSB0+Z/V6+n8++d2TSqkeWtoMM0NQKFAfWJK6DfxaZ6PLE6Gmx
ZUUsByN+5s8hGcDOpIqXpmvWzgzahZHJojZY1tx7wb2sL6uot7uUkl4PAGyqUEzu
fySAGpXTi6FrttDw+fEEwXLmxD6/+U5NHxr/BhSiVsUITtDe/jw47eCqzs6va/71
tgCCxZyHUhQj4bIWN3+pfrWBGB4onBJHsI51rMUHQQKepXXEg6fiwZcv7n6QoUY4
5AgvEYgN1JCzIk/Wc3mQGAYM0+VBEl2pyxHpMnChVK3Tj9Jq1ano7Gs7pX3LKBOH
Z3HHE48kII3wdBnBrifLR4b+xQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 08:24:45 2026 by rpki-client