Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
File:                     AxycJuW6sbAa8YoLsblwq1dzRWs.mft (raw, json)
Hash identifier:          4i+6UY8wJzBu8I2IKMJOqM3U6IzippnBSPDOT4zpRrI=
Subject key identifier:   DE:83:BA:04:CD:B7:C2:6E:69:98:4D:6A:87:31:05:6F:F7:1D:32:2A
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Certificate issuer:       /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial:       06F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
Manifest number:          06A9
Signing time:             Sun 26 Apr 2026 22:35:06 +0000
Manifest this update:     Sun 26 Apr 2026 22:35:05 +0000
Manifest next update:     Sun 03 May 2026 22:35:05 +0000
Files and hashes:         1: AxycJuW6sbAa8YoLsblwq1dzRWs.crl (hash: tNPwZiJ8M6dT7uREPjvg7jasy0P4NcqB3JrLRT6A1Yo=)
                          2: E88EE726E93611EF9E3FF729C4F9AE02.roa (hash: OIMoYuOlDFIxnQLjJwwfFn81y6oP24XgHKLcwV1zvZk=)
                          3: 37DF315640B111F0B139F22BC4F9AE02.roa (hash: g+Gj7U1+efQL3hqCetjfGn6GeGSvm7QivUZN+eVJ75c=)
                          4: 3B428CDA8AE011EF90B73462C4F9AE02.roa (hash: gxgtsWBnEAP6vapnZK0uqNLpyymktd5A/5L7ecDmBUQ=)
                          5: F2CF477E50C711EF8B03E673C4F9AE02.roa (hash: TqJzuidUjyyQb1G7wiFhjyqX67oOjt0bf49SD3Yyr2c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
                          rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 22:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782 (0x6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
        Validity
            Not Before: Apr 26 22:35:05 2026 GMT
            Not After : May  3 22:35:05 2026 GMT
        Subject: CN=69ee931a-ade9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ad:89:b1:80:c5:53:f3:27:64:cc:95:35:cb:
                    bc:5f:87:f8:b6:c7:91:ef:ff:aa:72:bc:10:12:85:
                    74:b4:e6:95:18:87:65:13:16:4b:72:7e:e8:4a:93:
                    1d:aa:3a:5a:14:14:a5:a8:35:0f:e8:85:55:2b:e9:
                    f3:1f:5c:a2:da:bd:36:7b:40:d1:8e:3a:7f:e4:8e:
                    28:cd:55:9b:69:98:c5:de:46:bf:77:68:67:16:2c:
                    21:f6:8a:88:c2:84:4f:20:57:9d:da:d8:0f:e6:2a:
                    c1:ae:17:58:f4:d9:77:d3:cf:35:4b:ca:db:a5:3a:
                    2d:33:7e:17:bd:eb:28:43:e9:a7:e3:f2:c8:ee:4e:
                    18:07:7a:6d:0d:c5:d6:e5:4c:79:13:82:d6:17:51:
                    71:58:57:29:87:14:74:67:95:63:1e:5c:7d:67:b1:
                    a5:e5:ea:e5:66:3a:33:34:00:bc:07:98:05:b4:bb:
                    8c:a8:1e:88:89:1c:b2:89:bd:cb:56:82:c6:ee:ba:
                    28:e3:23:95:f8:c5:4a:b5:d1:5d:80:c3:e2:78:35:
                    09:f4:e7:7e:c1:9b:93:d2:cf:f7:d8:35:af:47:12:
                    3e:83:fc:e1:30:4e:5d:ed:4f:d5:62:94:e4:1f:92:
                    51:9b:23:6d:5f:24:52:df:ec:ab:19:27:75:2c:4d:
                    7e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:83:BA:04:CD:B7:C2:6E:69:98:4D:6A:87:31:05:6F:F7:1D:32:2A
            X509v3 Authority Key Identifier:
                keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a0:3f:81:6e:9d:d8:0c:36:1f:04:d8:b5:34:52:a6:f9:3b:
         e4:40:db:ec:7e:f8:73:9e:9c:6e:4f:90:e5:23:20:5b:c9:77:
         f3:ba:0c:9c:2c:20:0c:02:8b:65:5a:4b:13:c6:02:b2:0d:f3:
         13:ad:3e:33:12:07:5a:39:87:c9:1a:2a:56:e1:5d:94:77:61:
         9b:a9:60:20:a8:1d:a8:10:cb:2c:a5:e1:0d:88:f5:57:c6:68:
         72:9c:67:82:5f:03:fe:a7:36:88:65:9d:15:79:c6:b3:8f:f8:
         c1:b2:0f:8c:ec:f6:3d:47:0f:5a:88:91:a0:ae:85:4b:87:64:
         f1:6d:a0:fc:fa:d2:88:65:18:80:d2:10:e4:2a:ac:55:5a:ad:
         84:ea:d2:b5:6a:2d:20:b4:b6:30:db:06:76:a4:45:d8:90:8e:
         4b:cf:c5:8f:f7:1b:42:be:2e:b7:85:ad:1b:9f:b1:c3:36:cb:
         2f:aa:03:60:30:12:f3:b2:bf:4b:3a:60:58:9e:6d:43:05:31:
         20:db:d7:b9:92:af:a2:69:96:be:04:d1:34:ca:8f:ce:a1:31:
         17:e7:22:48:36:0d:7e:52:5f:cb:c4:2d:14:66:6f:0c:8b:8c:
         78:e8:33:80:82:3e:19:59:d1:e1:01:7d:cb:16:d2:3b:ce:05:
         2c:03:a0:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC
NTc3MzQ1NkIwHhcNMjYwNDI2MjIzNTA1WhcNMjYwNTAzMjIzNTA1WjAYMRYwFAYD
VQQDEw02OWVlOTMxYS1hZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAja2JsYDFU/MnZMyVNcu8X4f4tseR7/+qcrwQEoV0tOaVGIdlExZLcn7oSpMd
qjpaFBSlqDUP6IVVK+nzH1yi2r02e0DRjjp/5I4ozVWbaZjF3ka/d2hnFiwh9oqI
woRPIFed2tgP5irBrhdY9Nl30881S8rbpTotM34XvesoQ+mn4/LI7k4YB3ptDcXW
5Ux5E4LWF1FxWFcphxR0Z5VjHlx9Z7Gl5erlZjozNAC8B5gFtLuMqB6IiRyyib3L
VoLG7roo4yOV+MVKtdFdgMPieDUJ9Od+wZuT0s/32DWvRxI+g/zhME5d7U/VYpTk
H5JRmyNtXyRS3+yrGSd1LE1+rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6DugTN
t8JuaZhNaocxBW/3HTIqMB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4
RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDhEOS81NDgzQkZCNkM4RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNi
QWE4WW9Mc2Jsd3ExZHpSV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW6A/gW6d2Aw2HwTYtTRSpvk75EDb7H74c56cbk+Q5SMgW8l387oMnCwgDAKL
ZVpLE8YCsg3zE60+MxIHWjmHyRoqVuFdlHdhm6lgIKgdqBDLLKXhDYj1V8Zocpxn
gl8D/qc2iGWdFXnGs4/4wbIPjOz2PUcPWoiRoK6FS4dk8W2g/PrSiGUYgNIQ5Cqs
VVqthOrStWotILS2MNsGdqRF2JCOS8/Fj/cbQr4ut4WtG5+xwzbLL6oDYDAS87K/
SzpgWJ5tQwUxINvXuZKvommWvgTRNMqPzqExF+ciSDYNflJfy8QtFGZvDIuMeOgz
gII+GVnR4QF9yxbSO84FLAOgLA==
-----END CERTIFICATE-----
Generated at Tue Apr 28 02:08:47 2026 by rpki-client