Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
File:                     akoHTuW-fzuoULO6IUKWtlsaLa0.mft (raw, json)
Hash identifier:          nNvGC2X1AmvfV2IHpzogCRuL6LOwMucpqZdM/sVpHvQ=
Subject key identifier:   5B:01:D3:C6:01:B0:34:EE:2C:2D:A8:6B:77:F2:9F:EB:8A:95:07:5A
Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD
Certificate issuer:       /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD
Certificate serial:       097C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
Manifest number:          095B
Signing time:             Thu 10 Sep 2026 20:08:42 +0000
Manifest this update:     Thu 10 Sep 2026 20:08:42 +0000
Manifest next update:     Thu 17 Sep 2026 20:08:42 +0000
Files and hashes:         1: akoHTuW-fzuoULO6IUKWtlsaLa0.crl (hash: ZZRH0O0eGK1lsalkWAlqm7ZwW8jx5it/hHM5amO6lag=)
                          2: B37A1AB4E1A811EFBC05A21AC4F9AE02.roa (hash: fOkHDjQM9pRqISkvpZQ8S365Az+2AzqVDFtPpjKkpxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl
                          rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 20:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2428 (0x97c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141A6A, serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD
        Validity
            Not Before: Sep 10 20:08:42 2026 GMT
            Not After : Sep 17 20:08:42 2026 GMT
        Subject: CN=6aa30e4a-02c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:d5:5a:6b:a1:2e:12:4b:0a:f7:3d:68:e0:
                    6e:11:ac:17:e5:b5:30:ad:b3:4b:f4:c9:f7:d8:6b:
                    1c:e3:6f:1d:de:2e:2d:21:5f:e6:1a:4a:67:c8:c1:
                    ca:ac:fe:b3:d2:23:ba:13:9c:74:aa:27:7d:1a:89:
                    aa:a8:ba:ca:ed:d1:f3:9a:4f:36:8b:e0:ed:61:34:
                    29:55:11:9e:61:19:4a:9e:75:3e:c0:5a:54:57:d2:
                    1b:3d:35:8c:34:cb:46:e5:a3:46:83:59:e9:c3:9c:
                    ff:53:01:88:5d:70:46:b6:b9:c7:4c:86:75:e3:e5:
                    97:49:38:60:e1:fa:a5:b3:f6:8e:de:b0:15:92:24:
                    33:7f:40:df:7c:a2:55:4d:cc:5c:7c:af:ea:49:d1:
                    cf:86:e1:53:7e:50:37:75:7a:85:71:f6:1f:ca:06:
                    fd:c8:da:95:78:2d:db:d2:9a:8b:49:16:a8:7d:35:
                    58:ae:48:1e:a3:bf:ca:62:d6:61:fe:3e:4d:ae:63:
                    9e:b1:9a:f5:23:5b:13:05:4b:1e:d5:e9:c7:1f:a4:
                    e7:64:50:26:61:0e:ec:11:9c:90:25:44:d3:53:82:
                    0b:87:af:ec:91:63:3d:d2:cc:7a:68:89:3e:f2:8a:
                    82:c8:a8:0a:f1:05:62:13:3d:de:7d:cb:54:38:d2:
                    c8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:01:D3:C6:01:B0:34:EE:2C:2D:A8:6B:77:F2:9F:EB:8A:95:07:5A
            X509v3 Authority Key Identifier:
                keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ef:b6:3e:76:08:ec:40:37:6a:88:88:89:a4:f5:c5:8c:3b:
         c1:7a:fc:cd:6a:e9:60:28:5f:41:82:d0:24:26:ec:be:6b:9b:
         d1:ff:40:eb:bf:9a:89:2d:fd:42:a2:5d:88:3d:79:6f:48:7e:
         e4:4b:33:76:04:30:03:f7:14:29:24:94:85:0c:55:9e:58:cb:
         dd:d1:55:08:da:a1:76:ab:7a:c1:d2:ee:51:a8:1f:a0:f0:55:
         54:fd:c8:87:ce:71:41:e0:a2:4c:2b:58:d2:0a:c4:81:27:0a:
         cf:0a:c4:d9:eb:c3:f0:2d:16:ef:dc:68:10:6b:75:b4:de:62:
         d7:4d:e0:9f:c5:8b:9b:77:1c:74:8c:c7:42:c8:0c:ff:1a:40:
         76:f3:fc:f7:a8:a8:44:6f:b0:3e:97:9c:cd:1c:02:d3:66:26:
         3c:02:1e:d6:e8:d4:08:4f:85:f2:e9:20:87:b5:49:a5:46:28:
         2f:e4:8e:07:80:25:c4:84:54:a5:8c:f4:33:f9:75:bf:4c:c8:
         43:a1:9e:c6:8e:68:93:80:30:73:76:17:d3:46:45:7f:89:b8:
         13:d9:97:14:e3:37:d5:5b:92:fe:c2:b5:bb:52:57:1a:22:d7:
         0e:99:ba:be:90:54:51:a2:71:d7:4e:61:6d:af:7a:e7:b9:8c:
         e5:03:ac:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDFBNkExMTAvBgNVBAUTKDZBNEEwNzRFRTVCRTdGM0JBODUwQjNCQTIxNDI5NkI2
NUIxQTJEQUQwHhcNMjYwOTEwMjAwODQyWhcNMjYwOTE3MjAwODQyWjAYMRYwFAYD
VQQDEw02YWEzMGU0YS0wMmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAykDVWmuhLhJLCvc9aOBuEawX5bUwrbNL9Mn32Gsc428d3i4tIV/mGkpnyMHK
rP6z0iO6E5x0qid9GomqqLrK7dHzmk82i+DtYTQpVRGeYRlKnnU+wFpUV9IbPTWM
NMtG5aNGg1npw5z/UwGIXXBGtrnHTIZ14+WXSThg4fqls/aO3rAVkiQzf0DffKJV
TcxcfK/qSdHPhuFTflA3dXqFcfYfygb9yNqVeC3b0pqLSRaofTVYrkgeo7/KYtZh
/j5NrmOesZr1I1sTBUse1enHH6TnZFAmYQ7sEZyQJUTTU4ILh6/skWM90sx6aIk+
8oqCyKgK8QViEz3efctUONLIdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFsB08YB
sDTuLC2oa3fyn+uKlQdaMB8GA1UdIwQYMBaAFGpKB07lvn87qFCzuiFClrZbGi2t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUE2QS82MkJFMEFDNkNF
OUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6dW9VTE82SVVLV3Rsc2FM
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Frb0hUdVctZnp1b1VMTzZJVUtXdGxzYUxhMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MUE2QS82MkJFMEFDNkNFOUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6
dW9VTE82SVVLV3Rsc2FMYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFu+2PnYI7EA3aoiIiaT1xYw7wXr8zWrpYChfQYLQJCbsvmub0f9A67+aiS39
QqJdiD15b0h+5EszdgQwA/cUKSSUhQxVnljL3dFVCNqhdqt6wdLuUagfoPBVVP3I
h85xQeCiTCtY0grEgScKzwrE2evD8C0W79xoEGt1tN5i103gn8WLm3ccdIzHQsgM
/xpAdvP896ioRG+wPpeczRwC02YmPAIe1ujUCE+F8ukgh7VJpUYoL+SOB4AlxIRU
pYz0M/l1v0zIQ6Gexo5ok4Awc3YX00ZFf4m4E9mXFOM31VuS/sK1u1JXGiLXDpm6
vpBUUaJx105hba9657mM5QOsKg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:57:10 2026 by rpki-client