Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft
File:                     axGMFY4LjZuYTs3ceLJEgC5HBUc.mft (raw, json)
Hash identifier:          pgTRiJb6jzpR1aGTrhZhh+wuojvxm1z5xWiHEgFo1Ig=
Subject key identifier:   E6:97:D1:30:7A:FA:E5:5D:25:51:A8:8B:5F:9E:79:C1:6B:3F:0F:CA
Authority key identifier: 6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47
Certificate issuer:       /CN=A91F1F2A/serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft
Manifest number:          BF
Signing time:             Mon 05 Oct 2026 07:19:16 +0000
Manifest this update:     Mon 05 Oct 2026 07:19:15 +0000
Manifest next update:     Mon 12 Oct 2026 07:19:15 +0000
Files and hashes:         1: axGMFY4LjZuYTs3ceLJEgC5HBUc.crl (hash: XxBPl9Euj1UrY5RyRCUnEip07om8MEWKaxxnwBxwJ4k=)
                          2: DE6BD6189F8F11F08976857BC4F9AE02.roa (hash: R9Cjca0yrjz4mXYuAv7e7OJK+xPNsF9BaN/IzXegbVA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl
                          rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1F2A, serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547
        Validity
            Not Before: Oct  5 07:19:15 2026 GMT
            Not After : Oct 12 07:19:15 2026 GMT
        Subject: CN=6ac34f73-33c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:0f:4d:b6:3e:5d:6d:d6:dd:d2:25:fe:d0:
                    95:d0:a5:59:6a:dc:ca:2b:ce:1e:21:bd:3f:fb:25:
                    80:13:97:ec:e5:2d:58:c4:10:60:98:2d:9f:6e:10:
                    41:b9:1e:b6:d8:ad:9a:e0:0f:ba:a5:12:c0:5c:20:
                    42:08:87:f6:2d:23:e0:60:f2:aa:fd:82:67:6c:74:
                    c4:8b:00:1b:09:59:33:0c:47:6d:be:37:77:64:30:
                    84:e2:72:c2:37:a6:07:90:e1:a9:56:d5:d8:19:0c:
                    a6:6c:6b:72:e5:72:c0:9a:4c:68:9b:d1:56:b0:05:
                    a6:65:11:6c:e0:d6:51:f2:c2:b0:c1:ee:af:f4:e4:
                    61:ba:c5:20:ff:10:0a:e3:15:7f:d5:ac:c3:d2:98:
                    fe:1f:4c:a5:cc:b4:34:cc:e1:cb:99:79:c9:90:f2:
                    cf:89:e5:40:00:b1:1d:3b:e9:89:92:df:0a:fa:9a:
                    e1:89:1b:91:6a:dd:95:19:24:6e:54:9c:3c:6a:3b:
                    f7:d7:4b:6f:03:6f:1f:d4:d3:24:ef:50:ec:d6:40:
                    af:be:6d:62:c5:57:ee:cb:7b:b3:96:e1:53:06:da:
                    65:0f:e4:2c:9e:d6:cc:9e:1d:26:2b:ff:bb:f2:16:
                    23:de:05:72:03:0e:aa:02:e3:86:b4:71:a6:26:04:
                    dc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:97:D1:30:7A:FA:E5:5D:25:51:A8:8B:5F:9E:79:C1:6B:3F:0F:CA
            X509v3 Authority Key Identifier:
                keyid:6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d6:94:9e:2e:53:29:67:4e:4e:fc:5f:eb:c8:56:c4:af:2f:
         ea:23:df:a3:cb:63:d3:89:c8:a0:3e:47:4a:ce:84:92:92:4b:
         f1:9e:b6:b3:f8:6d:4e:02:ad:68:66:9d:f0:83:8e:d9:9c:75:
         58:1c:96:4c:7e:3f:43:0f:57:8f:03:c9:c8:c1:d3:6e:b7:72:
         42:ed:57:56:c3:6b:b0:a2:57:dc:77:6d:29:02:29:bb:55:20:
         50:56:54:4a:25:83:d7:e6:ef:6d:91:d6:0c:a8:18:79:8d:a6:
         40:d4:a5:96:ea:33:3d:8b:66:b6:76:54:20:93:4d:d5:6a:15:
         aa:7e:e5:b5:c6:a4:c4:08:10:6a:d3:56:fd:f9:86:d7:8d:17:
         9b:9c:50:c7:d6:3c:b6:b1:2d:05:f6:10:29:9a:b0:27:19:18:
         ca:95:0a:ec:19:04:81:33:0d:c8:e5:fd:7a:7b:c9:14:39:01:
         84:39:3f:e5:46:12:61:36:75:a5:57:d3:a3:8d:f8:79:1e:b6:
         41:36:42:9f:19:ab:5a:3a:c9:c7:d1:70:a3:a5:bb:34:50:d7:
         97:18:51:3f:bb:79:6b:8b:23:8d:da:b5:42:13:e7:6d:2d:25:
         7e:21:0c:a8:1b:1b:32:dc:43:2d:23:cf:ee:6e:9d:7e:4f:d7:
         ee:a3:b9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:58:39 2026 by rpki-client