Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft
File:                     ax_z7YHR7aC43YxdpE5A-css0q8.mft (raw, json)
Hash identifier:          ZKRkQP3FCHqh42pN7sf4rH+Kon/kZ9lBZvjxA5k9foA=
Subject key identifier:   2F:B6:3B:86:F2:FC:77:A4:DB:74:4A:E2:D7:13:3D:B7:41:2B:A1:0B
Authority key identifier: 6B:1F:F3:ED:81:D1:ED:A0:B8:DD:8C:5D:A4:4E:40:F9:CB:2C:D2:AF
Certificate issuer:       /CN=A9175C96/serialNumber=6B1FF3ED81D1EDA0B8DD8C5DA44E40F9CB2CD2AF
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft
Manifest number:          37
Signing time:             Wed 07 Oct 2026 09:13:13 +0000
Manifest this update:     Wed 07 Oct 2026 09:13:12 +0000
Manifest next update:     Wed 14 Oct 2026 09:13:12 +0000
Files and hashes:         1: ax_z7YHR7aC43YxdpE5A-css0q8.crl (hash: PtDrIZJffwvb68KSwh9qX79djVS3nKbgdGgLzrT6t1I=)
                          2: F9F4A9C6710511F1AB87369C65A30FBC.roa (hash: vF7yzq71bKd9/EBHrcKUsFw6zWZiI9lEWL6wZYfxLto=)
                          3: CC84D0BA710511F1A8E0DB7B65A30FBC.roa (hash: W/k3tTym2pPqddOTOs65rSq65DSs2mHOJ53vJkYkUlI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.crl
                          rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175C96, serialNumber=6B1FF3ED81D1EDA0B8DD8C5DA44E40F9CB2CD2AF
        Validity
            Not Before: Oct  7 09:13:12 2026 GMT
            Not After : Oct 14 09:13:12 2026 GMT
        Subject: CN=6ac60d29-3b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:34:a4:29:98:aa:ab:10:b4:34:19:69:34:30:
                    a5:bc:43:4a:c4:73:3d:9e:41:bc:f8:a8:6f:a4:6b:
                    68:af:d4:d8:28:ad:9d:5a:6f:1b:36:40:ba:14:c2:
                    ca:ae:85:7e:9d:36:2d:0e:f6:13:e1:3a:bb:c4:68:
                    96:2c:40:f4:ef:1b:97:b3:3d:7d:77:01:1d:9c:d0:
                    a8:65:b5:f7:bb:64:09:4a:39:22:86:f8:7d:2d:33:
                    9f:bc:39:a0:96:03:8b:4b:82:dd:32:1d:3e:6d:3e:
                    f1:87:7a:73:e1:66:34:df:53:a1:55:04:29:a4:8b:
                    2d:be:18:87:3b:cc:15:3b:2a:ff:d1:c6:c3:6e:32:
                    a9:85:cb:73:39:c7:d7:9a:fc:62:ae:ba:11:04:67:
                    fb:77:dd:6f:41:c5:66:28:71:a7:a5:c7:c6:f0:7c:
                    10:07:09:12:c1:85:b2:d2:bd:db:9d:ee:78:16:5c:
                    26:ae:d0:2b:cb:24:12:bd:33:fa:2d:71:e7:b2:3c:
                    9b:3d:36:17:b7:bc:e1:7e:1a:a4:ae:bf:44:34:b3:
                    9e:62:4f:f7:20:89:7f:67:46:9a:e3:aa:a6:f6:32:
                    99:1c:90:b8:51:66:39:74:11:d0:da:37:b3:1e:f9:
                    d2:de:1b:09:05:fb:ac:d0:f2:4f:43:57:41:93:6e:
                    0c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B6:3B:86:F2:FC:77:A4:DB:74:4A:E2:D7:13:3D:B7:41:2B:A1:0B
            X509v3 Authority Key Identifier:
                keyid:6B:1F:F3:ED:81:D1:ED:A0:B8:DD:8C:5D:A4:4E:40:F9:CB:2C:D2:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ax_z7YHR7aC43YxdpE5A-css0q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175C96/71A72E2C710511F188C0061E65A30FBC/ax_z7YHR7aC43YxdpE5A-css0q8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:15:a2:6a:21:27:8f:cf:95:b7:34:46:15:51:e3:3d:f9:40:
         c7:13:03:f8:ca:cf:80:7c:4e:17:e5:b7:d3:af:c8:0c:4e:47:
         0f:cb:c0:a3:8d:f7:c0:89:1a:76:7c:c9:a4:73:9e:3c:8b:98:
         d3:f3:cf:44:95:68:7f:7f:fb:ed:2f:6a:d5:dc:2f:91:ef:7a:
         0a:62:90:12:ca:a8:9a:0c:0c:a7:e7:c9:16:8a:fb:52:8f:6f:
         e9:bf:d7:bc:83:df:f7:91:8c:23:10:e0:f0:01:23:68:fa:97:
         bd:83:32:8e:5a:ad:2d:8f:ae:1e:6b:1b:a5:63:cd:09:99:cf:
         ac:34:ab:a3:03:29:f7:ca:d2:ba:63:c7:e3:b5:e6:74:c0:f7:
         3c:a8:40:c4:1a:3e:ee:75:2d:8a:a3:19:c2:0a:78:94:33:7a:
         6b:f7:11:e5:10:50:7c:e4:12:b4:34:e6:1b:ee:ee:a7:53:01:
         3f:e0:ee:35:44:fd:83:f7:9b:80:a9:58:f3:36:18:95:30:d4:
         58:9b:9e:44:2e:7a:82:48:31:ce:3d:1d:50:61:5b:44:90:3a:
         d6:95:fd:56:00:eb:64:36:f8:2c:fb:cb:0a:d3:b9:ee:d5:c0:
         da:f2:cd:84:b2:48:e8:bd:e5:53:06:60:d6:72:92:d1:6c:23:
         e1:70:52:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:07:32 2026 by rpki-client