Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
File:                     akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json)
Hash identifier:          ftCNgdtKMOwim9Pnr2qNhHUpFS3jJW7dc/PKkh3zwPU=
Subject key identifier:   9B:20:09:FF:97:45:A2:2A:AB:E8:17:F7:54:FB:B4:FA:5F:AD:00:0C
Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
Certificate issuer:       /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
Manifest number:          E5
Signing time:             Sun 27 Sep 2026 07:05:03 +0000
Manifest this update:     Sun 27 Sep 2026 07:05:02 +0000
Manifest next update:     Sun 04 Oct 2026 07:05:02 +0000
Files and hashes:         1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: uCbRZ2BF8BJgP812pHYau3TdPJATOk550Q0jrtTYbQ0=)
                          2: 2EC0243A89E011F1B81BDF965611F970.roa (hash: Nq+dCQHf90s4zW0PH0vEDjROrWf2N7+/pmtAxto3En8=)
                          3: 904FFA4A89E011F19D4A2A975611F970.roa (hash: DFAio1T3pAvkyo5GJuUxGnxD4vcze6AJnYJ5qLjBlVM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
                          rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
        Validity
            Not Before: Sep 27 07:05:02 2026 GMT
            Not After : Oct  4 07:05:02 2026 GMT
        Subject: CN=6ab8c01f-fae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:1a:7f:a9:aa:d5:d5:cc:90:74:fb:de:99:
                    6b:69:85:71:4e:b5:2a:5a:0b:6f:9b:df:87:84:c0:
                    af:32:27:f0:ba:d4:d3:b2:00:84:b3:e8:9b:2a:a5:
                    e9:a2:49:88:58:89:b1:78:b0:d8:4b:90:69:50:01:
                    96:98:83:ba:b0:f1:48:44:38:f6:48:c0:8a:d2:0f:
                    57:4c:47:99:93:05:8c:4a:52:4f:f3:e2:82:13:69:
                    09:7c:48:42:3f:e0:f5:b5:fc:af:a3:73:f8:b2:28:
                    67:f2:be:b9:21:2f:dc:6c:76:9f:ef:3c:dd:34:6a:
                    9d:85:f4:d4:85:31:8c:ec:9e:b0:6d:97:d1:48:4e:
                    24:d1:8c:27:99:ec:70:e8:1a:71:25:38:11:a6:8a:
                    7d:56:1a:08:36:f4:92:41:31:91:27:b9:bf:79:f2:
                    15:9a:07:ca:ab:b6:fb:b2:b4:d9:f3:e2:d0:93:57:
                    cb:df:9c:67:ea:e1:ab:8e:9c:33:75:5d:62:8c:64:
                    b3:a1:34:c3:5a:93:5b:ec:58:09:f6:ec:7a:65:1f:
                    fe:a2:a8:6e:52:5c:64:d8:37:d8:db:52:3e:a2:99:
                    c9:a9:60:ed:77:78:c5:49:83:99:5c:1b:a2:40:26:
                    51:2e:cb:66:70:a2:34:e5:c5:f4:4e:3c:4e:87:55:
                    26:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:20:09:FF:97:45:A2:2A:AB:E8:17:F7:54:FB:B4:FA:5F:AD:00:0C
            X509v3 Authority Key Identifier:
                keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:53:de:f5:a3:63:49:a4:93:e8:a2:55:10:72:1a:7a:18:cc:
         1a:ca:4a:5e:02:5d:07:e6:d7:81:9a:dd:e8:b1:7b:9b:fe:a2:
         13:b5:3a:dd:96:e0:8f:f1:ae:63:f8:82:41:ed:09:b4:cc:8d:
         22:09:80:6d:f8:73:1d:ca:21:c1:93:d3:88:26:1e:0f:09:39:
         4d:c2:ba:7a:57:6a:41:70:52:0f:4b:6e:25:f7:70:35:2e:5c:
         13:7e:cd:67:99:3c:fd:b1:64:28:87:e7:b8:ba:7d:bd:f3:ea:
         49:76:bf:e1:1d:fa:1e:76:54:aa:a8:ac:64:bc:77:f3:c2:f0:
         ed:b1:ed:a1:85:14:b3:99:88:9e:35:c2:0b:38:85:5a:ce:4d:
         c3:86:c8:7a:11:92:a7:e3:5d:52:c4:45:d1:63:a4:ec:a7:15:
         8f:97:93:b5:1a:bc:e6:43:40:7c:9d:cd:75:a5:89:48:4b:ab:
         96:10:19:77:49:33:4a:33:84:51:fb:17:17:a7:18:07:ef:a8:
         de:8e:1f:66:02:c1:b5:41:0f:20:57:bd:61:9f:2d:e4:e0:df:
         14:31:e8:d5:4e:df:b9:53:4f:ce:97:b6:84:76:d8:8a:82:55:
         57:4a:3a:fe:8a:79:81:cd:cb:e3:52:27:8e:c0:49:0e:9c:93:
         0e:f5:20:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:39:19 2026 by rpki-client