Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
File:                     akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json)
Hash identifier:          WeGxa2IEaqPSpIZ2tDpMTi+loEuHacKE5CyWo/h4MNQ=
Subject key identifier:   2E:73:4C:61:3E:AA:17:27:B4:4E:B2:30:EC:FD:9C:DB:3E:9D:9D:B6
Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
Certificate issuer:       /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Certificate serial:       E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
Manifest number:          DC
Signing time:             Wed 09 Sep 2026 07:04:52 +0000
Manifest this update:     Wed 09 Sep 2026 07:04:51 +0000
Manifest next update:     Wed 16 Sep 2026 07:04:51 +0000
Files and hashes:         1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: lwaXKybKVC5haUe0dMQS9g02zpqWchgW29iGSGEnKdA=)
                          2: 904FFA4A89E011F19D4A2A975611F970.roa (hash: DFAio1T3pAvkyo5GJuUxGnxD4vcze6AJnYJ5qLjBlVM=)
                          3: 2EC0243A89E011F1B81BDF965611F970.roa (hash: Nq+dCQHf90s4zW0PH0vEDjROrWf2N7+/pmtAxto3En8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
                          rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 07:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
        Validity
            Not Before: Sep  9 07:04:51 2026 GMT
            Not After : Sep 16 07:04:51 2026 GMT
        Subject: CN=6aa10514-cd05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:3a:18:c4:4e:29:e4:25:f4:d2:05:a0:ce:
                    d5:a2:b3:9a:72:75:7a:cc:63:5f:3b:f2:f7:93:36:
                    5a:dc:f3:34:2d:fe:80:fd:61:03:29:2c:56:11:dc:
                    be:70:f3:24:90:6b:90:ac:68:32:90:fe:fb:25:2a:
                    e1:7b:38:9a:13:d8:8b:9c:ef:c0:e7:bf:ec:1e:02:
                    59:82:b3:1c:e5:88:aa:49:09:c8:55:a4:d8:4d:14:
                    95:f8:0c:d5:da:18:65:42:a9:df:fe:48:43:84:19:
                    fa:10:1e:49:8f:43:6c:6b:a3:5b:a0:1e:d3:3a:14:
                    57:4a:41:5e:07:dd:b2:95:81:8c:b9:64:10:9c:7c:
                    4f:ae:ee:34:27:89:de:0b:79:64:57:cf:66:cd:ac:
                    ec:91:a8:06:fe:08:58:21:af:42:2e:a2:42:9b:7e:
                    83:6a:ca:34:bd:7b:3d:a6:00:e1:c2:71:b7:d8:43:
                    4d:99:73:6a:2b:44:fe:b1:96:26:20:22:47:06:b7:
                    71:b5:b3:fa:01:58:66:ca:2c:ab:7f:8c:f6:af:68:
                    09:6f:91:9a:d8:c8:97:fe:20:d7:3f:56:10:1b:df:
                    d4:e4:27:34:2a:19:e7:14:e2:c0:d3:9b:83:be:20:
                    10:e8:93:4c:54:ba:9d:4b:23:13:25:05:95:bb:7c:
                    10:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:73:4C:61:3E:AA:17:27:B4:4E:B2:30:EC:FD:9C:DB:3E:9D:9D:B6
            X509v3 Authority Key Identifier:
                keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:f6:ef:87:39:b2:69:0b:96:37:8b:7b:45:79:be:44:3a:45:
         60:5c:15:2d:6a:e1:2c:88:d2:94:1e:fc:6c:8d:4e:10:97:1b:
         f8:4a:4a:36:fa:39:d6:c2:7d:36:2e:78:2c:fd:80:cd:4c:80:
         92:1e:f1:1f:ee:7a:46:1c:6d:d8:d2:b8:c4:83:00:1d:69:2b:
         ed:62:40:93:18:5f:b7:d8:78:b6:36:86:10:6b:71:76:e9:a4:
         23:87:24:13:1c:ef:aa:e2:3c:27:4b:24:d5:6c:39:93:c5:c9:
         73:9e:73:5c:4d:3e:90:67:fc:d5:bb:c8:ca:74:e8:b8:05:1d:
         b4:f2:63:ee:b3:fd:a2:79:2a:22:27:93:ca:1b:30:f4:ca:b9:
         54:9a:f2:86:69:8e:e7:b1:fb:14:25:6d:f1:91:f7:20:fc:33:
         44:65:78:24:1e:8b:a8:81:45:ac:4f:44:87:2b:d7:05:96:3d:
         2b:38:72:f3:02:1f:e8:a1:49:ee:51:e1:9e:c3:d8:31:e6:09:
         ff:88:62:24:d9:79:8d:85:50:62:b9:bc:96:05:91:2a:cf:64:
         35:76:11:a5:58:e9:94:44:dd:93:51:99:bf:82:ab:3b:04:35:
         2a:10:e1:e7:33:a0:19:21:ea:41:df:92:dc:66:5b:dd:d5:3b:
         8a:fc:82:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:16:48 2026 by rpki-client