Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
File:                     AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json)
Hash identifier:          tspYzvPcjdR6qajKY7w6l29nllBGOR07X60qu8Xo0a0=
Subject key identifier:   DD:91:CA:B3:ED:4D:61:DE:11:01:26:61:A2:C3:E1:5D:33:91:5A:6C
Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
Certificate issuer:       /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Certificate serial:       02F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
Manifest number:          02DB
Signing time:             Sat 03 Oct 2026 01:49:17 +0000
Manifest this update:     Sat 03 Oct 2026 01:49:17 +0000
Manifest next update:     Sat 10 Oct 2026 01:49:17 +0000
Files and hashes:         1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: SPIV5KDkxv8t1EdnLo8xR+IBUinuLV0RegOqksInEa4=)
                          2: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: 6uwKNJvEHKpPiCqmXc5jxVWJ0Ysu4SZXJVBzZPWGq0k=)
                          3: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: CpnchC9OahhdANlSfhFvVdfnSg3biYPUOpoScQBe9aw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
                          rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 01:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759 (0x2f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
        Validity
            Not Before: Oct  3 01:49:17 2026 GMT
            Not After : Oct 10 01:49:17 2026 GMT
        Subject: CN=6ac05f1d-802a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:ed:a4:b9:1a:16:21:49:6e:04:e5:7d:9e:
                    a7:c6:2f:77:e0:75:79:1d:38:af:e3:77:eb:62:bc:
                    ad:8e:c3:b8:bf:c7:4a:66:54:d3:f4:5f:d2:99:82:
                    fd:55:e7:26:09:98:9f:e8:a2:22:78:20:94:61:81:
                    5b:07:1c:c1:5b:89:ce:81:82:33:fb:5f:c6:77:c9:
                    44:19:1c:a3:84:22:e9:0c:89:40:67:27:df:55:2f:
                    79:9a:21:96:3f:74:3d:d6:8a:c9:09:fa:9b:cc:42:
                    f1:81:37:13:2f:4e:97:48:58:03:43:c1:aa:c0:11:
                    72:e5:27:ca:fc:5f:ed:30:93:5f:7e:f9:0c:7d:e2:
                    e6:e4:9a:93:44:b9:1c:f7:dd:b9:65:b4:78:3c:f9:
                    5b:76:0e:1d:35:c7:8b:8e:89:c0:14:a8:a2:31:10:
                    fe:e6:02:87:65:5e:03:ec:60:b1:3b:c8:f2:53:d0:
                    1d:83:eb:0f:30:ac:07:c7:0c:39:d5:47:1d:6e:25:
                    a3:0b:c1:b4:e1:91:09:8e:73:db:ef:25:98:2c:a3:
                    6c:fa:6c:0d:13:f3:15:4c:77:a7:4b:64:c9:f8:a1:
                    7c:1d:be:d8:63:f1:e8:20:e4:ba:35:dc:ab:79:6f:
                    5c:9c:1c:65:f8:4d:09:46:05:b1:de:0c:76:6a:74:
                    dd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:91:CA:B3:ED:4D:61:DE:11:01:26:61:A2:C3:E1:5D:33:91:5A:6C
            X509v3 Authority Key Identifier:
                keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:eb:34:f4:53:a6:61:eb:3a:73:c6:6b:dc:fa:fa:59:9b:ef:
         b7:1e:4e:f9:8d:4d:65:87:90:35:cd:3a:c7:4b:09:b3:f8:31:
         45:67:14:89:db:b9:5a:e5:1a:57:89:68:c2:84:ba:a7:f8:30:
         1d:8d:b3:b3:0b:1d:28:a0:b6:c2:4a:00:6d:0b:18:af:83:d9:
         f5:cd:48:e4:84:c6:bf:39:b4:3f:7b:25:d3:7e:94:87:c9:fd:
         a4:2a:ed:d8:3d:1b:16:46:b1:92:80:70:7b:32:fb:cd:f3:38:
         f7:33:81:6a:cd:f1:01:69:b9:1f:eb:27:3e:72:5a:a5:39:e3:
         b3:d2:76:d6:80:08:c6:36:ef:e6:5a:1c:c9:47:10:34:86:86:
         34:ee:ad:c1:41:32:35:8b:f1:36:25:57:a4:0d:f8:f5:55:39:
         53:ee:11:e9:13:2d:2f:a4:c0:d7:2e:f4:24:95:e3:e1:5d:f4:
         d1:c0:6b:69:4c:e8:8a:d2:3b:5e:ac:bd:4e:bc:49:3a:63:c3:
         9f:1b:ae:31:6a:ea:be:27:c6:9e:7e:c4:39:54:bf:77:dc:73:
         e8:c0:1e:7d:d2:e9:c8:3e:33:50:4a:bb:6f:af:d6:b4:9a:aa:
         91:34:bb:da:6e:25:bf:ae:37:32:66:07:00:83:2e:ce:8e:14:
         de:39:78:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:53:51 2026 by rpki-client