Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
File:                     AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft (raw, json)
Hash identifier:          HwT8VBTnhdfFnFFTSEUGpLkbtLmS+5Em97503j1D+Fk=
Subject key identifier:   B5:ED:6A:85:C8:48:E3:13:7A:BD:DF:B5:E7:E3:18:B6:08:5E:FF:49
Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27
Certificate issuer:       /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27
Certificate serial:       034F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
Manifest number:          0349
Signing time:             Sat 13 Jun 2026 00:59:31 +0000
Manifest this update:     Sat 13 Jun 2026 00:59:31 +0000
Manifest next update:     Sat 20 Jun 2026 00:59:31 +0000
Files and hashes:         1: AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl (hash: bsScRFjq1D2HY6HjMyph93VYYBcNdo7i/GwymRaIUJE=)
                          2: CBD4FE1208B611EDACE57065C4F9AE02.roa (hash: 9y7l5xDl3TqzqRPu7NQw/yrhqKT6b0rd979dT8z29Lw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl
                          rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847 (0x34f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5CB1, serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27
        Validity
            Not Before: Jun 13 00:59:31 2026 GMT
            Not After : Jun 20 00:59:31 2026 GMT
        Subject: CN=6a2cab73-0ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:e4:c5:3d:db:f7:53:7b:20:81:41:ab:80:
                    3a:4d:cf:e7:cd:de:8e:8c:f3:d3:72:11:dd:fb:4c:
                    1e:46:db:5e:56:a3:8a:be:b0:b7:20:49:ef:e9:5e:
                    e3:8a:04:ea:b6:13:48:72:35:94:11:00:fe:7a:d5:
                    55:06:51:9c:00:0e:9a:7d:37:b4:12:19:ba:20:91:
                    db:3d:3b:bc:19:d8:0c:f7:99:a8:76:38:dc:6a:39:
                    f2:d1:ef:ca:73:6f:58:00:e3:af:fa:8a:eb:0e:4c:
                    0a:e3:9d:2f:fd:ae:a7:00:ab:ed:90:ec:87:12:ce:
                    39:ac:cd:85:66:bb:00:cc:96:f5:c8:37:d4:1c:c0:
                    32:8d:07:4c:ee:f1:23:cb:88:3b:c1:ed:7d:f4:c6:
                    3d:cb:7e:c9:56:7f:45:19:97:15:01:02:da:76:e2:
                    1d:ad:f6:d8:91:61:43:13:5d:a5:06:2d:6f:76:1a:
                    b3:88:1b:d5:df:68:42:80:0d:e7:ec:d0:18:23:6d:
                    a2:18:60:63:79:84:06:86:e1:2e:cb:ef:13:03:d1:
                    de:99:bc:fa:84:e1:98:61:7d:91:aa:b3:1d:37:a0:
                    8e:80:55:c9:a7:98:07:1d:bb:68:f0:8b:53:ec:42:
                    83:c2:b4:9a:e9:81:f0:3d:33:c5:6d:0c:94:79:90:
                    d7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:ED:6A:85:C8:48:E3:13:7A:BD:DF:B5:E7:E3:18:B6:08:5E:FF:49
            X509v3 Authority Key Identifier:
                keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:4c:ef:70:9c:8b:13:ec:b1:f4:5d:bc:30:bc:ed:2c:8a:2c:
         1a:2e:da:e1:f6:77:09:ba:65:f7:97:4c:40:0a:4d:10:4e:c3:
         e1:cf:1f:a5:a5:74:c6:86:20:a7:96:d4:c9:eb:53:0d:44:ae:
         a1:e3:7b:17:e6:36:2f:2d:c6:d1:d6:2d:e5:e0:fd:82:2b:be:
         37:a3:f8:0e:97:54:2f:50:6a:24:53:5c:e1:0a:53:c0:c8:13:
         3c:94:cb:39:5b:c4:50:83:d5:7b:a3:30:97:77:63:e9:a7:64:
         b9:0e:bc:e9:ee:04:f0:5d:2d:88:0b:91:30:27:96:28:f5:90:
         31:62:93:5b:5e:bd:70:e7:f7:f5:f9:6c:09:65:3f:7f:c1:92:
         7b:6e:ad:00:20:60:62:22:5c:6d:89:85:c2:ee:b3:0c:0f:1c:
         ef:e2:21:66:ee:6f:02:5d:57:aa:a3:c8:48:0e:33:20:18:18:
         09:54:7a:94:9d:b7:e7:07:74:f7:c0:e2:b0:7d:9b:39:7a:2b:
         64:62:eb:f3:b4:a4:2c:91:98:4a:9a:35:3a:85:2d:13:4b:c7:
         63:be:61:f4:95:3c:39:37:3d:83:53:72:b7:f3:14:a2:1c:35:
         0e:4e:c2:78:ae:71:f6:22:8a:ee:02:8a:2f:c6:e9:d8:e9:01:
         2e:2f:c3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:20:45 2026 by rpki-client