Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
File:                     x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json)
Hash identifier:          qquLxBqdEwDyXATnHb5nC/3HxpxOqIDPyD5uqP/AMBM=
Subject key identifier:   BB:65:CB:8C:D4:5A:F5:61:94:FD:F0:28:8D:03:71:F7:63:58:77:BC
Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9
Certificate issuer:       /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9
Certificate serial:       05DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
Manifest number:          05C6
Signing time:             Wed 20 May 2026 23:08:40 +0000
Manifest this update:     Wed 20 May 2026 23:08:40 +0000
Manifest next update:     Wed 27 May 2026 23:08:40 +0000
Files and hashes:         1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: /gzzc/pcwMNREsDowUL4ta9Wriv+7A2wIggKqoAjAMU=)
                          2: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: dobqjje96t2ByzCuxv07GsjoPcXnK+I6oVC5xcVUx1A=)
                          3: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: vYjOUFbhsWomhdQCGDNjFRiRUNZnILccQOyVMSYu5mk=)
                          4: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: RAri4R9i13T7tcPaRZBEdOQRsJoO98ROLRiMbR2yLR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl
                          rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1501 (0x5dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9
        Validity
            Not Before: May 20 23:08:40 2026 GMT
            Not After : May 27 23:08:40 2026 GMT
        Subject: CN=6a0e3ef8-3f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:27:e4:13:a8:5f:59:48:e9:70:d9:2f:71:3f:
                    3b:47:70:f4:69:29:97:26:fe:29:a2:94:4b:a8:ec:
                    b8:e3:3e:4b:ae:5a:c9:21:92:dd:5a:f1:59:78:50:
                    ff:65:38:bf:0f:8a:ad:33:7c:d3:a2:48:19:f7:96:
                    94:d2:e3:34:63:00:4f:b0:79:ed:24:43:1a:42:10:
                    03:d8:00:78:20:1f:0b:83:08:b3:0b:62:16:71:b2:
                    6d:ca:52:32:92:0d:83:12:13:db:45:d9:67:c6:ab:
                    f5:bb:db:f8:95:8a:a1:71:32:06:07:55:aa:2c:4f:
                    54:1e:f4:ab:91:b5:23:47:c2:34:f8:07:aa:76:a3:
                    e7:e0:01:aa:0d:af:2c:ff:a2:6d:d6:7e:28:9c:20:
                    ce:f0:1e:15:85:df:01:1c:0f:d8:e8:7b:e0:40:e6:
                    74:93:77:b6:94:bf:94:8c:7b:0d:f3:75:e0:0d:86:
                    dd:2c:37:f3:7d:af:3b:16:86:7d:db:b8:5d:50:a1:
                    2b:2a:f1:63:22:ff:e8:dc:ee:88:86:7c:03:ff:f3:
                    50:65:05:c7:a8:0b:a7:1f:fd:55:75:29:02:c1:26:
                    52:89:5b:dc:d2:dd:57:4b:cd:51:e7:35:c7:87:dd:
                    09:ec:8c:b4:36:a5:b2:d5:61:92:72:4c:79:94:76:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:65:CB:8C:D4:5A:F5:61:94:FD:F0:28:8D:03:71:F7:63:58:77:BC
            X509v3 Authority Key Identifier:
                keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:75:1d:11:e6:18:17:8e:d7:ef:db:63:60:2d:26:8a:07:9f:
         6c:cf:3d:e3:8d:19:60:5d:57:e4:5f:59:e8:2d:07:f7:18:a2:
         1e:c8:d6:e2:dc:89:52:af:98:e1:a4:31:24:42:47:4e:cc:94:
         70:9c:3d:87:99:e0:53:f4:bc:0b:db:59:28:58:ca:02:20:0b:
         a1:42:1e:eb:61:46:b9:4c:85:0f:a9:1b:2e:c0:ae:e9:47:cd:
         2c:ae:0f:7d:42:de:7b:da:d0:7b:cb:1b:65:32:09:95:82:c3:
         9a:5e:ea:49:29:af:28:58:d8:86:28:32:60:39:d9:1d:a7:04:
         af:d4:d8:20:92:87:22:4b:05:89:27:26:18:61:50:1b:c3:ea:
         91:1f:e9:b2:59:fc:76:19:5c:bc:d5:e0:60:7c:9a:5b:9e:dd:
         b2:47:0c:73:58:d4:fa:29:d0:fc:01:e6:76:af:b9:e9:33:2f:
         3a:a5:c9:b4:2d:7c:a6:e3:25:33:6a:60:7f:04:d1:9e:fa:96:
         8f:8c:7f:5a:20:2e:49:75:15:af:0e:eb:30:7f:f6:a4:44:a5:
         fd:4c:7a:25:05:e6:8b:ac:c6:cc:20:32:62:3a:ce:98:1b:d8:
         ae:e8:a6:a5:d8:bc:e9:bf:ef:2b:84:4f:35:c0:66:ea:9e:c2:
         77:25:c7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:12:16 2026 by rpki-client