Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
File:                     akoHTuW-fzuoULO6IUKWtlsaLa0.mft (raw, json)
Hash identifier:          /a+fsJ3rR5Y6Pcc1jnGCZDRFMWiOcgoxdifRFfMnisk=
Subject key identifier:   66:DD:BC:27:CE:09:7F:0E:FE:69:96:C9:17:0D:31:53:B0:75:14:A3
Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD
Certificate issuer:       /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD
Certificate serial:       0910
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
Manifest number:          08F2
Signing time:             Mon 02 Mar 2026 02:48:43 +0000
Manifest this update:     Mon 02 Mar 2026 02:48:42 +0000
Manifest next update:     Mon 09 Mar 2026 02:48:42 +0000
Files and hashes:         1: akoHTuW-fzuoULO6IUKWtlsaLa0.crl (hash: 44bX95us5q2nb+hDbp7J3vht5NKToQHbVyPMNZ60jMQ=)
                          2: B37A1AB4E1A811EFBC05A21AC4F9AE02.roa (hash: t+5uJvRrVXhLw2DURKhhkCoiHWok6wqsQkKl/VMTg/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl
                          rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2320 (0x910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141A6A, serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD
        Validity
            Not Before: Mar  2 02:48:42 2026 GMT
            Not After : Mar  9 02:48:42 2026 GMT
        Subject: CN=69a4fa8a-02f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:1c:b4:0c:d0:89:af:f4:c3:e9:1c:db:7e:
                    cd:8c:2a:b4:dd:01:80:ea:0c:6b:69:de:5f:35:72:
                    54:42:9a:73:2c:f7:14:74:fb:cf:a2:a8:ba:a8:76:
                    d9:49:7e:51:f1:f0:f0:2f:03:06:e5:e9:b9:25:ed:
                    9f:18:a6:30:57:55:b6:00:07:e6:00:3d:f6:2d:76:
                    1d:86:3d:40:b8:5a:5c:4e:2e:c2:cd:5b:0f:0b:19:
                    75:ec:94:03:c4:82:8f:19:01:c1:64:04:54:52:a4:
                    ac:fb:4d:13:c9:6c:9c:d2:77:48:47:c5:f3:c9:53:
                    51:62:c8:ba:e9:88:a8:bb:fc:57:d7:98:63:51:f4:
                    1f:d0:3b:f6:e9:33:97:68:22:d9:eb:6b:94:7f:d7:
                    71:30:05:32:15:a0:2e:e6:d2:ec:97:59:82:ad:fe:
                    ff:65:d2:ca:27:87:ed:9d:bb:4c:38:e8:f6:11:76:
                    1a:cc:28:f7:c1:46:63:2f:c4:c7:19:2a:a2:94:09:
                    d0:dd:f5:7f:5e:e6:43:90:5c:ac:05:ed:6e:36:0d:
                    e4:30:ff:dd:da:97:22:ac:35:4f:ef:fd:86:6c:fc:
                    c9:6e:f9:0b:77:e3:5f:d5:33:7d:84:55:79:f7:0c:
                    24:f3:af:d7:0c:33:e5:d9:26:43:65:89:af:d6:d9:
                    51:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DD:BC:27:CE:09:7F:0E:FE:69:96:C9:17:0D:31:53:B0:75:14:A3
            X509v3 Authority Key Identifier:
                keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:78:56:24:49:4a:83:4d:6a:29:4c:7b:8b:26:57:41:d7:a6:
         59:af:20:56:96:13:69:50:1a:5d:a7:29:96:a0:83:3b:0a:be:
         76:91:92:8a:36:9d:55:1c:44:f8:0c:cc:18:44:53:e6:c8:85:
         f8:79:a0:1e:73:85:ae:48:8e:8d:e7:52:76:69:c6:40:07:bd:
         40:84:c3:19:99:ed:0a:d6:39:58:51:15:46:a4:6f:57:73:aa:
         95:5f:8d:2f:7f:6b:08:a4:76:ec:48:fe:dd:64:9b:24:87:07:
         33:91:f7:96:37:2f:54:e2:b3:06:83:8a:a2:f3:c5:fb:8f:d7:
         ee:0a:ec:fb:5e:e8:d6:21:68:fb:cc:b3:24:28:a1:5a:dd:77:
         ae:ed:8f:36:cd:76:a8:d2:b8:22:35:f8:e8:72:8b:61:ac:67:
         e4:ca:4b:22:03:8c:07:b1:35:15:c4:b8:f9:f7:9c:39:7e:fd:
         4a:8e:ad:ae:c2:0e:7d:b7:28:76:d2:7b:05:53:78:d0:80:b9:
         dd:bb:c4:a8:42:fa:0a:46:05:d3:24:3e:93:be:1c:e3:4b:a8:
         35:bc:58:1f:b7:f2:b6:2f:30:5f:f7:5a:33:22:c4:69:b8:33:
         35:e9:25:48:15:5b:72:1d:90:b5:27:a6:59:76:c2:f1:f3:eb:
         06:17:a9:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDFBNkExMTAvBgNVBAUTKDZBNEEwNzRFRTVCRTdGM0JBODUwQjNCQTIxNDI5NkI2
NUIxQTJEQUQwHhcNMjYwMzAyMDI0ODQyWhcNMjYwMzA5MDI0ODQyWjAYMRYwFAYD
VQQDEw02OWE0ZmE4YS0wMmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvnUctAzQia/0w+kc237NjCq03QGA6gxrad5fNXJUQppzLPcUdPvPoqi6qHbZ
SX5R8fDwLwMG5em5Je2fGKYwV1W2AAfmAD32LXYdhj1AuFpcTi7CzVsPCxl17JQD
xIKPGQHBZARUUqSs+00TyWyc0ndIR8XzyVNRYsi66Yiou/xX15hjUfQf0Dv26TOX
aCLZ62uUf9dxMAUyFaAu5tLsl1mCrf7/ZdLKJ4ftnbtMOOj2EXYazCj3wUZjL8TH
GSqilAnQ3fV/XuZDkFysBe1uNg3kMP/d2pcirDVP7/2GbPzJbvkLd+Nf1TN9hFV5
9wwk86/XDDPl2SZDZYmv1tlRBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGbdvCfO
CX8O/mmWyRcNMVOwdRSjMB8GA1UdIwQYMBaAFGpKB07lvn87qFCzuiFClrZbGi2t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUE2QS82MkJFMEFDNkNF
OUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6dW9VTE82SVVLV3Rsc2FM
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Frb0hUdVctZnp1b1VMTzZJVUtXdGxzYUxhMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MUE2QS82MkJFMEFDNkNFOUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6
dW9VTE82SVVLV3Rsc2FMYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACHhWJElKg01qKUx7iyZXQdemWa8gVpYTaVAaXacplqCDOwq+dpGSijadVRxE
+AzMGERT5siF+HmgHnOFrkiOjedSdmnGQAe9QITDGZntCtY5WFEVRqRvV3OqlV+N
L39rCKR27Ej+3WSbJIcHM5H3ljcvVOKzBoOKovPF+4/X7grs+17o1iFo+8yzJCih
Wt13ru2PNs12qNK4IjX46HKLYaxn5MpLIgOMB7E1FcS4+fecOX79So6trsIOfbco
dtJ7BVN40IC53bvEqEL6CkYF0yQ+k74c40uoNbxYH7fyti8wX/daMyLEabgzNekl
SBVbch2QtSemWXbC8fPrBhep2Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:15:46 2026 by rpki-client