Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
File:                     akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json)
Hash identifier:          0f4KIA+3/7dCKLqYxb2rKkxLFDqhyFPnpkP4QOpQ7f4=
Subject key identifier:   A5:BD:FA:59:B6:E0:1A:99:27:02:18:22:35:1C:2E:CF:C7:14:8D:BB
Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
Certificate issuer:       /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
Manifest number:          F5
Signing time:             Thu 29 Oct 2026 07:06:23 +0000
Manifest this update:     Thu 29 Oct 2026 07:06:23 +0000
Manifest next update:     Thu 05 Nov 2026 07:06:23 +0000
Files and hashes:         1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: naT102bx8vmQIhUe94xx6Nhitvmhuwad+eYbnOPg5T0=)
                          2: 2EC0243A89E011F1B81BDF965611F970.roa (hash: Nq+dCQHf90s4zW0PH0vEDjROrWf2N7+/pmtAxto3En8=)
                          3: 904FFA4A89E011F19D4A2A975611F970.roa (hash: DFAio1T3pAvkyo5GJuUxGnxD4vcze6AJnYJ5qLjBlVM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
                          rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 07:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
        Validity
            Not Before: Oct 29 07:06:23 2026 GMT
            Not After : Nov  5 07:06:23 2026 GMT
        Subject: CN=6ae2f06f-884d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:01:ee:a0:31:b9:33:91:56:58:c9:39:05:7f:
                    3f:97:44:ca:f5:8e:3e:40:47:81:c0:a3:67:6c:fd:
                    f4:d1:cc:63:15:f3:0f:db:b6:ce:c1:98:cd:71:b9:
                    e1:a7:ca:27:9e:2e:8f:cb:b7:85:b1:14:ac:02:3e:
                    c7:cc:db:5d:5d:81:d2:41:e3:f5:43:2a:a5:50:27:
                    11:6b:b9:de:8b:71:1c:aa:0b:79:0d:30:20:9c:91:
                    d0:c4:cf:a1:6e:5c:7c:9b:d4:4d:cb:91:d1:c5:15:
                    20:63:ab:a3:9a:62:a7:3d:d5:41:8a:ee:bf:e0:48:
                    c0:a2:07:db:ab:93:28:10:5c:88:73:02:9e:b4:52:
                    31:62:0e:5c:99:4d:15:11:c6:a0:f5:f8:4a:06:e6:
                    50:ca:cf:67:30:cb:b8:98:07:cb:04:39:26:05:17:
                    29:77:b0:83:5d:10:3e:79:89:3a:15:fa:a0:7e:dc:
                    88:7d:c6:5c:a6:d1:23:2d:65:d9:0d:cf:bd:20:13:
                    b6:ec:d8:4f:45:5d:dc:6f:9a:90:6e:c5:21:fc:a1:
                    d4:75:a9:61:db:8d:d9:d1:ea:89:10:3f:20:86:df:
                    66:41:16:ef:ad:7e:72:7d:80:e3:ba:42:3f:3d:4f:
                    c4:21:c4:e3:04:f6:c1:f3:2f:35:b5:16:64:eb:cf:
                    de:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BD:FA:59:B6:E0:1A:99:27:02:18:22:35:1C:2E:CF:C7:14:8D:BB
            X509v3 Authority Key Identifier:
                keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:06:d3:aa:e3:b3:15:fe:53:e6:2e:ec:0f:a6:eb:26:31:56:
         16:f4:74:82:7f:1d:81:30:ca:13:d3:a7:23:e5:d4:e8:9f:22:
         9d:3e:80:13:04:77:3d:dc:5a:ad:02:db:87:79:f3:c8:4b:98:
         93:db:6e:8d:ec:c2:cd:68:f7:84:1d:23:1d:13:de:37:c7:94:
         71:57:ab:f2:dd:fc:6a:43:9d:62:91:9b:15:41:61:e9:b4:cb:
         24:ad:34:0d:b6:67:5d:a9:7c:c9:ac:13:2e:d6:b4:60:e1:af:
         ba:72:eb:70:02:bb:05:1c:e1:c6:e2:42:e1:6b:4e:8a:ff:af:
         a6:2c:83:0a:34:df:12:c1:6d:05:ae:94:e7:31:59:64:e8:45:
         f7:23:d9:4f:79:57:97:47:34:30:d6:fe:f9:94:50:15:0f:46:
         0a:b6:52:b9:eb:bd:5a:8d:1f:5b:d2:44:29:4b:36:3b:ab:01:
         94:49:b6:ab:e8:64:5d:b0:0f:58:dc:27:36:8d:36:55:52:61:
         df:d5:76:fc:21:16:d1:0a:75:47:6e:19:f7:64:d3:45:74:bd:
         bf:b6:f6:b9:43:78:19:78:6e:16:48:e1:94:0c:a3:6d:1c:e9:
         7f:77:24:60:f2:53:04:88:ab:ab:71:45:3e:12:16:f6:a1:6f:
         aa:27:37:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdFRjIxMTAvBgNVBAUTKDZBNDk3RUVENUY0RkUyQzE1MTY0REQyRDA3RkM0REQ1
MkJDRTg5MjEwHhcNMjYxMDI5MDcwNjIzWhcNMjYxMTA1MDcwNjIzWjAYMRYwFAYD
VQQDEw02YWUyZjA2Zi04ODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0gHuoDG5M5FWWMk5BX8/l0TK9Y4+QEeBwKNnbP300cxjFfMP27bOwZjNcbnh
p8onni6Py7eFsRSsAj7HzNtdXYHSQeP1QyqlUCcRa7nei3Ecqgt5DTAgnJHQxM+h
blx8m9RNy5HRxRUgY6ujmmKnPdVBiu6/4EjAogfbq5MoEFyIcwKetFIxYg5cmU0V
Ecag9fhKBuZQys9nMMu4mAfLBDkmBRcpd7CDXRA+eYk6FfqgftyIfcZcptEjLWXZ
Dc+9IBO27NhPRV3cb5qQbsUh/KHUdalh243Z0eqJED8ght9mQRbvrX5yfYDjukI/
PU/EIcTjBPbB8y81tRZk68/eZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKW9+lm2
4BqZJwIYIjUcLs/HFI27MB8GA1UdIwQYMBaAFGpJfu1fT+LBUWTdLQf8TdUrzokh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0VGMi82QUZCRTQ0QzYz
ODExMUYwQTMzRDIzNjRDNEY5QUUwMi9ha2wtN1Y5UDRzRlJaTjB0Ql94TjFTdk9p
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FrbC03VjlQNHNGUlpOMHRCX3hOMVN2T2lTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0VGMi82QUZCRTQ0QzYzODExMUYwQTMzRDIzNjRDNEY5QUUwMi9ha2wtN1Y5UDRz
RlJaTjB0Ql94TjFTdk9pU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmQbTquOzFf5T5i7sD6brJjFWFvR0gn8dgTDKE9OnI+XU6J8inT6AEwR3Pdxa
rQLbh3nzyEuYk9tujezCzWj3hB0jHRPeN8eUcVer8t38akOdYpGbFUFh6bTLJK00
DbZnXal8yawTLta0YOGvunLrcAK7BRzhxuJC4WtOiv+vpiyDCjTfEsFtBa6U5zFZ
ZOhF9yPZT3lXl0c0MNb++ZRQFQ9GCrZSueu9Wo0fW9JEKUs2O6sBlEm2q+hkXbAP
WNwnNo02VVJh39V2/CEW0Qp1R24Z92TTRXS9v7b2uUN4GXhuFkjhlAyjbRzpf3ck
YPJTBIirq3FFPhIW9qFvqic3QA==
-----END CERTIFICATE-----
Generated at Thu Oct 29 16:02:38 2026 by rpki-client