Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
File:                     akoHTuW-fzuoULO6IUKWtlsaLa0.mft (raw, json)
Hash identifier:          Qs0077Ai9q2XkdwPEujTFrqO5EpWaAd5AnPTc2Tw8TM=
Subject key identifier:   54:2F:D6:88:71:DD:30:10:EC:1A:B2:30:DC:7D:49:1A:F3:C4:B1:9B
Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD
Certificate issuer:       /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD
Certificate serial:       0994
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
Manifest number:          0973
Signing time:             Wed 28 Oct 2026 20:21:00 +0000
Manifest this update:     Wed 28 Oct 2026 20:20:59 +0000
Manifest next update:     Wed 04 Nov 2026 20:20:59 +0000
Files and hashes:         1: akoHTuW-fzuoULO6IUKWtlsaLa0.crl (hash: WYcUC4FsNUTCcsODVTt/TvXDL7szY0YtHsN1t/36biI=)
                          2: B37A1AB4E1A811EFBC05A21AC4F9AE02.roa (hash: fOkHDjQM9pRqISkvpZQ8S365Az+2AzqVDFtPpjKkpxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl
                          rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 20:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2452 (0x994)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141A6A, serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD
        Validity
            Not Before: Oct 28 20:20:59 2026 GMT
            Not After : Nov  4 20:20:59 2026 GMT
        Subject: CN=6ae2592c-db90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:ae:3f:4b:4a:88:3e:72:d0:b5:32:ce:07:
                    7b:d8:42:30:8e:d0:3e:81:fd:8c:77:1d:a5:91:39:
                    46:5d:fd:5f:3e:87:21:68:a0:7d:79:96:e4:76:bb:
                    d5:56:c5:50:fa:db:bf:5f:7a:5a:41:f5:3a:14:2b:
                    ff:6c:54:d1:cb:a5:bc:eb:cb:fb:45:3e:c8:60:b4:
                    c0:8a:89:e2:ec:0e:54:a7:b6:82:d5:10:27:a6:fb:
                    9c:02:40:45:61:38:a5:cf:e7:27:03:74:fb:1e:21:
                    cf:89:47:b7:98:dd:29:25:44:11:54:b6:d5:fd:9f:
                    5a:f0:f0:f8:15:7d:b3:cb:9a:7f:5b:85:31:80:64:
                    f3:41:42:e1:ee:86:47:f6:6c:57:93:40:02:86:4c:
                    10:ec:b7:7f:7f:c7:19:1c:92:9b:77:4c:0b:1a:25:
                    0e:52:8e:6e:7f:86:d6:7b:26:26:68:b4:d8:be:b2:
                    0d:59:e2:f5:b7:7c:45:b2:cb:0e:f4:db:9d:b0:5d:
                    11:ac:6e:42:be:f7:a4:45:ef:01:bd:56:c7:7c:9c:
                    4d:bd:f4:95:5b:a0:aa:49:15:37:37:ef:32:a4:d4:
                    b4:c2:d4:f9:e3:18:bc:a8:44:75:b6:2a:06:e4:61:
                    ef:e1:05:3c:3b:60:7e:b5:5f:aa:16:11:57:ec:ae:
                    27:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2F:D6:88:71:DD:30:10:EC:1A:B2:30:DC:7D:49:1A:F3:C4:B1:9B
            X509v3 Authority Key Identifier:
                keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9c:67:bc:53:e7:ed:76:92:a9:00:ff:04:52:32:5c:84:bd:
         e0:f6:c1:ba:a8:cb:d5:8b:61:c8:5c:f0:51:f3:f5:aa:16:74:
         63:de:0c:17:a5:c7:0d:4d:3e:ed:a0:2d:23:2f:0f:47:64:d6:
         a7:b8:dc:aa:e1:d3:b0:1b:c5:6c:6f:a4:ac:08:6b:c3:2d:bf:
         e9:04:0b:44:98:4b:29:55:40:a1:d1:75:df:2b:6b:4a:92:66:
         33:3d:9a:fc:7a:d2:1c:09:59:56:69:26:ed:60:9a:c2:f1:ba:
         33:df:90:39:b8:28:48:f4:7e:f8:2f:fe:b1:5e:68:f6:9b:54:
         52:07:4f:13:d1:cf:ee:c0:4d:cd:84:13:bc:86:ab:4d:19:c7:
         8a:29:fc:7e:2a:a9:ba:71:63:1b:fb:f2:65:71:e3:cb:eb:48:
         2b:47:42:82:f2:56:25:d4:aa:88:26:dc:56:8a:e6:82:8d:32:
         14:af:53:26:82:3d:5d:ae:3f:27:b6:bf:e0:e6:2a:18:74:cc:
         ae:ba:62:9f:b5:f5:7b:38:52:8d:3c:72:9d:38:94:e6:ff:69:
         9b:c4:ed:c1:fe:b8:b7:5a:64:a2:20:cc:87:23:27:bb:84:a0:
         bc:d8:31:17:17:c5:14:7a:a3:e4:2d:20:8a:ab:18:7e:8d:e7:
         ee:58:ff:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 23:05:08 2026 by rpki-client