Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
File:                     AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json)
Hash identifier:          K8mVWjnFSt/Id7FPD4FCsieRVF41XKx0Qr7kstQ81eE=
Subject key identifier:   5F:CF:BC:32:07:A8:A9:B4:41:3D:33:0E:DB:27:89:72:11:33:6C:32
Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44
Certificate issuer:       /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
Manifest number:          016F
Signing time:             Wed 23 Sep 2026 04:39:35 +0000
Manifest this update:     Wed 23 Sep 2026 04:39:34 +0000
Manifest next update:     Wed 30 Sep 2026 04:39:34 +0000
Files and hashes:         1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: NSQime/3rQgitg9eqxnYNT78BW03Fx1BOvTuGXZuVE0=)
                          2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: YmKXPzEd/i2vL9lk0X6JhFLGyxL9//RGwrN43Nv93+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44
        Validity
            Not Before: Sep 23 04:39:34 2026 GMT
            Not After : Sep 30 04:39:34 2026 GMT
        Subject: CN=6ab35807-d53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:ee:76:c8:ae:d5:0e:98:15:96:0f:7b:3b:
                    a0:ac:75:d7:b6:54:69:90:8a:0c:1f:ed:0f:50:21:
                    aa:57:57:4b:09:d4:1a:78:4e:50:e4:ed:61:2d:3b:
                    e7:ca:9a:ab:c2:af:03:7d:8e:a2:e9:89:cc:f3:b2:
                    da:35:ba:07:be:57:8e:95:72:e7:5f:35:f2:84:8c:
                    9e:62:74:75:08:ea:6c:72:e1:55:c4:f5:53:ac:27:
                    ac:eb:ca:bb:ae:33:40:3e:45:b9:d1:c5:8a:a9:30:
                    db:4f:89:15:3c:f4:cf:4a:82:48:b9:a7:76:77:da:
                    1f:20:91:e6:36:bc:15:9c:20:32:4a:d0:2c:c3:a9:
                    6c:5e:88:af:04:bf:be:84:8e:30:0a:19:87:2d:46:
                    1a:92:39:69:d3:e9:48:86:8c:51:bb:b9:fc:83:42:
                    01:f3:61:6f:78:7a:17:96:bb:35:72:7b:40:27:f3:
                    f2:fb:8b:a0:37:db:5a:d8:fa:f7:23:85:6c:c0:88:
                    66:69:a8:63:1d:42:7c:15:0b:61:fd:e2:a2:22:27:
                    6a:85:6a:0e:1b:8c:a1:15:94:d3:19:31:6b:fa:d7:
                    4b:54:00:96:eb:bc:07:e7:25:01:c2:57:7f:68:2c:
                    a6:66:df:bc:ab:a7:e5:c0:84:a7:5c:77:d9:1e:53:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CF:BC:32:07:A8:A9:B4:41:3D:33:0E:DB:27:89:72:11:33:6C:32
            X509v3 Authority Key Identifier:
                keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:75:ea:31:fa:74:b7:a2:24:a9:fb:08:15:98:51:18:49:c0:
         10:2a:ec:24:71:d2:36:26:c1:74:98:9e:52:25:8f:ff:18:2d:
         19:32:fe:08:a7:75:b6:36:0a:ea:d1:e6:ee:b5:a5:1e:11:23:
         3e:6e:7d:9d:af:94:32:e1:b1:e5:89:96:fe:6d:39:5f:1a:74:
         45:0c:3a:9a:07:65:32:8e:82:7c:3b:0f:93:6f:2d:93:8c:fd:
         19:89:52:17:1e:51:53:99:1c:83:94:85:73:d3:ff:a7:1d:21:
         8d:3b:64:ea:3d:ea:82:fc:29:1d:b1:7e:7a:a9:c6:bb:31:c1:
         3b:71:cd:d0:48:13:46:04:87:83:32:ab:9c:50:4d:ef:65:b4:
         2a:a3:d3:d4:c9:35:2a:50:a4:13:0a:2e:25:4a:42:a7:7f:33:
         9d:95:08:59:08:51:92:25:13:4b:12:c0:d8:d7:e8:8e:36:7f:
         16:0e:c0:52:49:da:52:cf:a9:48:4f:0c:ac:8f:30:2b:0e:b4:
         f3:dc:b9:93:9e:29:2e:2d:7b:a6:cd:95:c4:0a:07:88:37:aa:
         a4:4f:f1:d2:4d:4b:2d:44:39:ce:15:ef:49:e6:12:eb:8b:4c:
         34:8d:86:63:0a:2e:6f:36:2c:7d:65:40:1a:1a:1f:24:d6:32:
         ee:24:9f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:42:51 2026 by rpki-client