Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
File:                     AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft (raw, json)
Hash identifier:          tmPLa10typ9W3dcgE0VA/lCFpbeaAV5ebb4EKR9JDzM=
Subject key identifier:   F2:80:7A:EE:49:E3:55:9C:48:A1:56:F2:AF:7E:02:02:E1:BF:F1:35
Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27
Certificate issuer:       /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27
Certificate serial:       0326
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
Manifest number:          0320
Signing time:             Wed 25 Mar 2026 00:45:25 +0000
Manifest this update:     Wed 25 Mar 2026 00:45:25 +0000
Manifest next update:     Wed 01 Apr 2026 00:45:25 +0000
Files and hashes:         1: AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl (hash: W/CUGlsWepXk67w+cITZ+U7aT97IVCwd9KrVCp2VznU=)
                          2: CBD4FE1208B611EDACE57065C4F9AE02.roa (hash: 9y7l5xDl3TqzqRPu7NQw/yrhqKT6b0rd979dT8z29Lw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl
                          rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:45:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 806 (0x326)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5CB1, serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27
        Validity
            Not Before: Mar 25 00:45:25 2026 GMT
            Not After : Apr  1 00:45:25 2026 GMT
        Subject: CN=69c33025-7ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d0:b5:1d:cc:e3:b3:8b:65:72:17:3c:f1:7b:
                    4e:37:7a:30:c7:99:03:31:31:d3:8f:e6:57:eb:57:
                    0a:39:2e:63:09:72:8a:9e:4f:62:be:a7:a9:05:66:
                    a4:06:53:58:45:b9:c0:df:fe:d8:93:40:79:96:79:
                    6c:c7:a1:ac:a3:94:32:23:ec:1e:cc:75:07:47:96:
                    95:1b:ac:f5:6a:47:51:7c:6e:b3:ed:a2:89:18:15:
                    1f:f8:72:98:af:64:a8:27:91:79:f4:12:57:2d:21:
                    6d:70:9d:89:74:65:f7:7c:e4:08:1f:b3:98:19:31:
                    ab:ed:53:5d:3a:bd:1c:2b:60:94:7e:7e:ee:86:2e:
                    fd:29:14:97:b6:11:d4:0a:9d:20:c3:08:f9:b8:ce:
                    3c:d9:f7:e0:cd:a3:2f:aa:d0:70:91:14:d6:c7:6f:
                    8d:42:ca:d0:31:e2:48:2e:68:34:d3:39:2b:50:aa:
                    9d:4f:c7:94:0c:31:39:e0:5a:39:07:d5:56:fc:77:
                    c4:28:d2:0e:fb:55:45:e2:c4:d9:33:b1:7c:96:29:
                    56:30:62:fc:9b:62:51:9c:2d:3e:6f:fc:c8:7d:a9:
                    2c:b3:51:15:6e:1c:9a:ec:25:84:a9:60:33:2a:d9:
                    06:d4:bd:44:67:90:e5:2c:ba:25:82:43:f7:59:0e:
                    0d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:80:7A:EE:49:E3:55:9C:48:A1:56:F2:AF:7E:02:02:E1:BF:F1:35
            X509v3 Authority Key Identifier:
                keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:25:48:34:e1:a3:eb:96:d4:8c:3a:5b:fb:94:97:95:fd:bd:
         1f:e3:bc:b7:4d:04:b2:d2:d1:ec:cf:30:48:ae:f7:c6:bc:f1:
         b2:fa:49:63:91:ac:56:86:d7:22:4f:37:57:fc:82:f6:db:2b:
         62:ac:1a:16:59:11:bc:d5:f2:f4:7c:f6:81:ac:bc:17:59:bf:
         46:f0:bd:ec:40:c6:28:ec:28:48:86:31:83:d9:4a:dd:93:b1:
         e7:86:87:8a:a8:c6:25:00:5d:96:34:11:de:ee:e3:38:29:d0:
         57:f2:e4:0e:8d:c0:10:03:f5:b4:de:53:33:77:17:5e:d6:56:
         66:da:e9:99:a8:63:5b:6a:48:8f:f9:92:a1:e8:b5:ac:eb:f8:
         99:e0:78:e2:81:c1:57:48:6a:ad:4f:11:17:66:0c:76:41:42:
         01:52:75:73:48:51:13:d1:dc:d3:7d:c1:08:48:28:32:bb:de:
         ff:84:38:01:4f:a1:e3:b5:da:86:d1:6b:de:f0:be:ea:7e:fc:
         8d:7a:eb:b2:85:be:d1:44:f8:c3:6d:53:1b:33:41:8d:4d:f2:
         b9:b2:50:b8:2c:e7:29:17:1d:c6:4f:d1:99:30:ed:e3:4e:00:
         a6:ab:3c:db:58:74:96:f7:d3:a5:0d:cf:9d:cf:c1:8d:97:b6:
         2b:e1:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:03 2026 by rpki-client