Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
File:                     akoHTuW-fzuoULO6IUKWtlsaLa0.mft (raw, json)
Hash identifier:          OU7TFiVMcG9Yx6oEqArjUr/QFVBbLfEGYhDRUrC1eWQ=
Subject key identifier:   3E:61:0E:1B:18:2D:A4:E4:4E:9C:4B:F2:33:57:71:D6:92:3A:90:EE
Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD
Certificate issuer:       /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD
Certificate serial:       0961
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
Manifest number:          0941
Signing time:             Sun 26 Jul 2026 20:49:09 +0000
Manifest this update:     Sun 26 Jul 2026 20:49:09 +0000
Manifest next update:     Sun 02 Aug 2026 20:49:09 +0000
Files and hashes:         1: akoHTuW-fzuoULO6IUKWtlsaLa0.crl (hash: PKyo70y9DOg5No3wOCIYauVzDLug71kYI4wqb3e+mb0=)
                          2: B37A1AB4E1A811EFBC05A21AC4F9AE02.roa (hash: SpuS0e+sM5PsHPKj4v1GClPQzp3GN/3qD476+vEdeyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl
                          rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2401 (0x961)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141A6A, serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD
        Validity
            Not Before: Jul 26 20:49:09 2026 GMT
            Not After : Aug  2 20:49:09 2026 GMT
        Subject: CN=6a6672c5-3a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:f8:d1:2a:74:5a:a6:71:85:36:d8:26:24:
                    02:e5:3c:ed:25:12:ea:f1:b9:c9:88:ea:0c:62:9d:
                    bc:2b:84:c7:56:21:cc:ab:ec:49:d4:ec:d5:8c:6c:
                    9f:45:18:a9:60:1d:c6:83:06:a8:12:ae:6d:3f:35:
                    31:67:8b:05:14:c1:e1:b2:83:d6:c1:4f:58:e6:8d:
                    6e:f4:84:93:96:46:f1:43:27:19:91:ac:d1:f3:05:
                    0a:69:9d:1c:73:b4:08:6e:d5:88:46:1b:b9:91:66:
                    c7:8e:30:c9:ea:00:d0:e8:48:14:06:1c:05:ef:1a:
                    5f:ba:fe:84:47:9d:4d:49:d8:cf:bf:67:bf:e6:20:
                    15:45:f3:ca:71:46:e9:bb:f0:b1:76:6c:79:8e:dc:
                    be:51:57:7d:8e:7f:b0:ae:b7:ec:8a:2f:52:06:aa:
                    66:5f:f3:e0:71:bf:ab:3c:13:0d:65:e0:d6:38:23:
                    4c:22:56:3e:92:da:64:76:06:62:8b:4c:a2:5c:3a:
                    99:51:ac:5f:f4:4c:46:fb:e3:72:81:54:4a:33:49:
                    3c:ea:2c:fb:db:df:79:2f:88:1c:5c:5f:3e:84:67:
                    2c:87:8e:a4:f6:bd:89:1a:c4:df:96:eb:41:d2:2c:
                    4a:95:08:a3:a1:f9:44:d5:13:35:a1:2b:1d:31:5a:
                    95:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:61:0E:1B:18:2D:A4:E4:4E:9C:4B:F2:33:57:71:D6:92:3A:90:EE
            X509v3 Authority Key Identifier:
                keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:23:67:60:29:db:f6:9b:3c:16:b5:33:06:80:65:34:27:82:
         a6:ae:30:23:c0:2f:0b:cd:6c:ac:31:78:a8:4e:fa:e1:60:4c:
         dd:7c:e3:f3:af:1f:9f:3f:57:ef:60:b5:26:60:31:3c:33:f3:
         71:37:04:02:5e:67:fe:d0:26:27:5c:cc:14:f2:30:2a:cc:e3:
         55:cc:4a:84:9d:a2:45:33:30:2e:25:58:05:63:72:a4:ec:f4:
         98:29:d2:92:b9:20:b0:59:53:ef:1c:b3:b5:f7:dc:54:7e:31:
         a1:8e:0f:33:66:8f:d5:5b:5e:01:44:67:b7:36:75:a9:e5:ff:
         b0:9d:fa:1d:a2:d9:35:ec:f4:92:79:62:97:5f:6c:37:c4:d5:
         8d:d3:fd:ee:3e:bb:07:d9:3d:91:0d:7c:ae:8b:a4:e7:5c:8d:
         0b:c9:5e:f0:2b:6c:3c:99:7d:9b:56:40:d6:c7:df:c3:d2:cb:
         cf:ab:f4:14:97:3e:90:28:a6:ed:43:d6:cc:30:88:15:96:11:
         8c:12:c7:02:d0:97:a0:41:e6:e3:5f:56:e5:b7:cd:83:e9:13:
         d5:a9:66:48:5f:54:b4:50:cf:d0:2e:ac:ca:d4:2c:f9:2a:ca:
         d0:a5:31:04:73:64:d3:d5:78:b8:c4:28:91:e6:fa:bf:b0:23:
         e6:e8:f3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 06:22:40 2026 by rpki-client