Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft
File:                     akWKsPxWKCkzGD1GgFG_xQeRFjI.mft (raw, json)
Hash identifier:          5ph5VWEKy9Y3px+S0HAn2nT0nvIW8W2I3k7KyXug51E=
Subject key identifier:   CE:F0:1B:50:93:EE:7E:1D:E8:F6:C3:C6:72:1A:42:42:13:B7:79:F7
Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32
Certificate issuer:       /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft
Manifest number:          017C
Signing time:             Fri 09 Oct 2026 05:21:56 +0000
Manifest this update:     Fri 09 Oct 2026 05:21:55 +0000
Manifest next update:     Fri 16 Oct 2026 05:21:55 +0000
Files and hashes:         1: akWKsPxWKCkzGD1GgFG_xQeRFjI.crl (hash: IuL6Q08TDg4MYXsNxTzx4XhsVpvMMwQee+dMw0mQlEc=)
                          2: C14680A887BF11EF8804736AC4F9AE02.roa (hash: B/TNuMgaTyUyb58Wxh1ho+MvyCpcFyIGCmgXiDCc6KA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl
                          rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 05:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCA92, serialNumber=6A458AB0FC56282933183D468051BFC507911632
        Validity
            Not Before: Oct  9 05:21:55 2026 GMT
            Not After : Oct 16 05:21:55 2026 GMT
        Subject: CN=6ac879f4-cefc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:ea:c0:50:09:ea:0e:23:af:0f:2b:d1:99:
                    7c:39:18:43:f5:ea:f0:c1:26:5b:39:27:3a:2d:e6:
                    40:5d:9d:76:21:b3:f1:0d:34:68:23:77:31:e8:8e:
                    6c:d1:66:c4:6b:3e:24:ce:30:a1:4c:cc:d1:df:ac:
                    fd:54:4d:c9:c1:a9:b8:d7:67:5f:6f:06:54:21:70:
                    a7:63:2f:d3:9d:27:bb:c0:a3:57:48:80:87:32:17:
                    d7:b5:48:4a:75:87:d7:bd:78:5b:cb:1d:02:89:d3:
                    d8:7f:fa:0a:f8:fd:83:f4:0e:f2:47:1c:74:84:46:
                    20:c7:b6:19:9d:c8:6a:7a:c2:88:7a:b0:34:69:a6:
                    f4:79:54:61:86:0a:98:d9:cb:96:d9:13:db:55:af:
                    f9:bb:9f:2f:5a:cf:46:1a:d4:27:e6:fd:f0:d0:74:
                    cb:13:ab:27:18:32:36:29:e3:b8:64:1a:bd:5b:2c:
                    5c:2f:37:4c:e6:65:82:1a:fb:02:ae:9c:71:97:2e:
                    5a:12:ac:11:23:16:0a:ce:18:b3:de:19:0e:bc:19:
                    91:ce:cb:d0:70:69:11:3e:dc:1d:89:39:b7:99:86:
                    bf:b2:80:0c:b0:20:d8:22:fb:65:4a:b9:6f:cf:20:
                    57:80:cb:4d:28:c3:43:0c:0f:03:d5:d4:1b:8d:db:
                    6b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F0:1B:50:93:EE:7E:1D:E8:F6:C3:C6:72:1A:42:42:13:B7:79:F7
            X509v3 Authority Key Identifier:
                keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:05:28:71:8b:fd:93:24:5e:b9:9b:c7:0f:64:1d:e1:69:18:
         87:ca:60:8a:51:ef:db:0d:d8:8c:f6:bf:1d:5f:78:9f:a2:d3:
         cf:3a:8a:d8:b8:67:53:67:8b:0a:77:3e:2e:cf:ef:c5:2b:71:
         1a:3c:f8:ec:13:55:b5:99:44:9d:21:06:5a:88:e1:7f:c8:f1:
         6d:35:54:d5:90:de:50:b7:6f:18:37:23:03:11:26:35:01:db:
         c1:01:d8:30:f1:5e:7e:05:29:78:a3:4d:fb:e9:c4:82:b4:34:
         44:03:c5:c7:24:61:23:fa:f2:57:5c:d5:4c:22:d8:0d:ba:d4:
         87:88:50:92:be:1d:93:7c:c5:6e:47:c7:25:58:b9:b8:92:94:
         81:4a:16:58:44:9f:d9:bc:a2:e0:4c:e1:13:48:8d:af:03:e7:
         ff:0b:dc:bd:52:a5:18:0d:91:9f:b6:0c:82:ff:98:3e:12:65:
         b2:23:ee:dc:76:f1:cf:1b:92:7d:6f:e2:0d:22:48:36:ab:ee:
         74:9f:ca:bd:a4:ad:db:b8:f8:79:47:95:b9:55:d0:2e:37:cd:
         a1:e4:ca:6b:8f:c5:e8:26:74:90:2f:63:46:e3:2a:4d:c1:4d:
         f4:80:ee:89:7c:17:c6:11:6a:68:d2:35:dd:b4:b5:29:9c:b7:
         79:3e:a2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 10:06:10 2026 by rpki-client