Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft
File:                     AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json)
Hash identifier:          VV3xeeOSgr42UoaDmRhE3RmGXr05+wXqd2fxM8lCrnE=
Subject key identifier:   D0:3D:BC:8E:C2:33:AA:6D:67:C3:81:C3:B3:80:11:2C:00:93:49:85
Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4
Certificate issuer:       /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4
Certificate serial:       043A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft
Manifest number:          0433
Signing time:             Thu 17 Sep 2026 00:12:33 +0000
Manifest this update:     Thu 17 Sep 2026 00:12:32 +0000
Manifest next update:     Thu 24 Sep 2026 00:12:32 +0000
Files and hashes:         1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: GoorOerf+GFHMuq9Ap42eOn1bT2K+TE21dNQJdDfh84=)
                          2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: psNUn0KVy8LcXg75lwX0oEYThtl+Fy/xxsSylBXFzFo=)
                          3: 2678DE4275A011F1A0FDA4E35BA30FBC.roa (hash: HO4c9apAU+SF4J/bcSAIOWLgnk4/jkKppRJxjoUD8Lw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 00:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082 (0x43a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF0B6, serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4
        Validity
            Not Before: Sep 17 00:12:32 2026 GMT
            Not After : Sep 24 00:12:32 2026 GMT
        Subject: CN=6aab3070-0eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:50:fa:60:68:e6:84:2e:bf:05:57:ad:50:7a:
                    e6:96:e4:b2:13:45:19:11:7b:e9:00:11:34:37:eb:
                    66:28:ff:3a:b4:31:14:d0:9b:68:60:e5:1d:1b:3a:
                    31:d3:cb:12:41:5e:15:83:78:33:7c:d7:3d:13:16:
                    4d:dc:07:0e:66:2a:53:1f:ee:e3:8d:a9:d0:65:80:
                    7c:e4:43:54:6d:5d:62:95:ad:54:9d:9b:9e:36:c8:
                    9e:67:2f:34:7d:e0:89:65:44:44:3a:b2:13:b4:bc:
                    c4:95:48:65:9c:85:a8:4d:f2:84:9c:a5:aa:7b:60:
                    66:73:54:65:ab:c1:99:db:10:89:70:e2:df:5a:10:
                    6c:7a:4d:3d:ac:b6:82:51:63:63:ed:db:22:d9:3f:
                    54:6e:16:06:eb:45:06:11:c9:42:cc:2f:73:b1:ea:
                    c0:c0:91:b0:e1:de:78:d6:9c:e8:19:e9:0f:15:e4:
                    86:06:eb:c4:05:70:f8:c0:7e:43:87:80:4d:43:34:
                    62:c8:b8:61:6d:9a:30:b1:5e:88:af:49:ff:ac:93:
                    e2:a3:54:5f:ca:1d:63:3a:df:02:98:d1:13:a2:93:
                    08:9a:01:48:bf:4f:e7:9f:bb:19:67:a5:05:cb:e9:
                    d6:ce:90:91:d4:48:2f:2d:12:f9:78:75:40:d6:a0:
                    3d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3D:BC:8E:C2:33:AA:6D:67:C3:81:C3:B3:80:11:2C:00:93:49:85
            X509v3 Authority Key Identifier:
                keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:65:33:b5:98:41:e4:bd:e6:9e:0d:78:04:06:f5:cf:68:4e:
         d8:f8:04:a2:c6:49:09:c5:b8:2f:0c:a9:bd:2b:f8:5c:65:e8:
         1d:fa:54:91:f7:46:23:3e:7a:9b:cc:03:69:18:f2:c9:5c:85:
         4d:9a:ac:f2:b1:89:b4:6a:4d:6d:26:bb:d2:9d:be:24:1d:f1:
         3f:b8:9c:f0:17:0c:fd:1b:70:ee:5f:55:c8:ff:d6:0a:aa:31:
         b6:fb:57:6f:b1:69:a9:b7:7c:79:25:34:9b:1d:97:c4:c0:ed:
         5e:dc:bc:59:df:78:57:95:79:13:05:96:2d:41:f7:59:e8:29:
         9c:bc:fc:cd:80:74:ba:18:f9:96:a9:e7:82:2e:f7:35:de:ed:
         9e:e1:9e:03:8e:79:a3:c6:4c:3a:93:b9:14:25:61:82:e2:e0:
         bc:1c:37:9a:44:2a:0e:e5:86:e5:ad:ca:01:c3:0e:9f:a9:b8:
         ae:f5:7d:b5:68:10:0f:a8:d9:8f:5d:7f:10:40:64:67:16:e4:
         0c:5e:ca:e2:6b:b6:a0:22:cc:66:ec:69:6d:4b:e3:89:33:e8:
         c4:ff:ce:2d:50:46:64:65:7d:24:3e:a1:9a:84:75:6b:9f:79:
         d5:fd:17:2f:69:f8:3e:0c:7a:b3:d2:a3:0c:48:c6:76:05:83:
         f5:5e:b2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:12:18 2026 by rpki-client