Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
File:                     AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json)
Hash identifier:          DUFOe04R82bUBiyBd0cfDioW6znl5CLKcC1bQuGTnEQ=
Subject key identifier:   7E:9F:91:B5:B2:6E:5B:38:C2:92:52:8B:ED:D2:8D:41:33:74:5D:FA
Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44
Certificate issuer:       /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
Manifest number:          0136
Signing time:             Mon 01 Jun 2026 06:14:42 +0000
Manifest this update:     Mon 01 Jun 2026 06:14:41 +0000
Manifest next update:     Mon 08 Jun 2026 06:14:41 +0000
Files and hashes:         1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: ZmpySqCmPRJmdyTTmHKnAq0eSygXABlN2wlVgh6EqJc=)
                          2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: YmKXPzEd/i2vL9lk0X6JhFLGyxL9//RGwrN43Nv93+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44
        Validity
            Not Before: Jun  1 06:14:41 2026 GMT
            Not After : Jun  8 06:14:41 2026 GMT
        Subject: CN=6a1d2351-0d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f6:4f:00:5d:86:3e:1e:da:b3:92:a2:c6:59:
                    dc:9b:3f:1f:8f:7a:c3:00:f2:6e:31:e5:a7:78:1f:
                    d7:18:6a:60:80:32:3c:e5:d6:5e:51:ee:3b:12:6f:
                    a5:d5:71:3a:95:68:6f:92:0a:22:84:ff:5e:64:d9:
                    1f:c3:ab:b7:04:6c:2a:6e:72:6c:d5:c8:8d:5e:58:
                    39:59:85:f9:73:b5:92:8d:a4:48:fd:b0:a1:f2:28:
                    b4:ce:04:11:57:0f:49:cb:c9:14:35:99:72:5a:c5:
                    f9:54:6c:cb:11:e2:04:da:51:69:a0:7a:ac:b2:94:
                    f0:1f:4b:31:de:7e:5b:c2:48:17:e0:61:cc:e0:61:
                    d6:a8:96:84:81:4e:e2:e1:da:5a:18:4b:fc:10:1f:
                    19:85:1b:e3:06:3d:33:99:bb:59:b5:13:bb:5e:87:
                    ce:e6:20:88:3e:50:b4:ff:1a:6e:0b:41:df:3d:b0:
                    d6:d4:63:87:18:eb:24:a4:11:65:18:b1:5f:c6:18:
                    98:b6:48:f2:a9:5f:46:9e:93:5a:32:b3:11:11:14:
                    ea:25:94:e6:39:db:cb:ed:cb:cc:0e:e8:6c:a8:eb:
                    18:f2:26:af:13:bf:25:d5:9d:9d:44:7f:e5:5a:31:
                    24:34:51:6c:a5:7b:e2:ff:ad:6d:2f:b9:c4:77:2a:
                    d3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9F:91:B5:B2:6E:5B:38:C2:92:52:8B:ED:D2:8D:41:33:74:5D:FA
            X509v3 Authority Key Identifier:
                keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:98:77:96:7e:95:8e:15:2f:9e:3e:ff:76:48:7d:26:04:78:
         d5:38:9a:56:96:e4:f5:f7:0c:df:15:71:2e:a0:56:4a:a4:af:
         c7:51:e8:e0:0c:cd:2f:40:ed:81:45:c8:3f:23:25:5b:26:58:
         06:b2:ba:9d:5f:48:8c:e7:7f:5a:32:4a:1d:bd:97:ec:5d:2f:
         a2:c4:c6:fe:89:db:e3:fe:79:a1:45:23:e6:68:d3:f8:7c:f7:
         02:50:1d:c2:0f:b1:4c:42:2b:8e:67:b8:4c:2a:a1:e9:ed:ab:
         5b:fc:47:eb:1e:a0:f1:cb:49:cf:9f:66:d5:e3:48:99:2e:21:
         d2:a1:a9:dd:71:8c:7d:5b:21:93:c5:f5:41:6e:cc:50:b3:82:
         de:30:79:a6:eb:fb:77:0d:8c:4b:cb:67:2c:2e:c7:6f:72:5e:
         07:d2:06:81:9b:0a:e5:9b:7d:a1:d6:8f:60:80:5b:af:b1:fb:
         62:7d:4c:69:5b:7a:af:06:6d:8a:18:85:a5:70:6e:c4:a1:4a:
         6e:9b:b8:91:72:68:47:cc:8c:35:aa:a4:d7:8d:25:73:b1:82:
         97:53:9c:f9:a2:f7:5b:7f:52:cd:50:0e:3a:b0:01:88:c9:09:
         9f:0e:70:ac:7c:81:f6:e6:39:11:55:7e:a5:dd:20:a2:a7:73:
         b2:5f:ac:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:48 2026 by rpki-client