Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
File:                     AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json)
Hash identifier:          WzwyRoge9fqTREzxSt1WpMr+WnHUmKGVKeyToPfrmdU=
Subject key identifier:   97:16:BB:5A:03:7D:D5:FC:89:6D:E4:16:DA:24:6C:7E:CD:D0:30:76
Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33
Certificate issuer:       /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833
Certificate serial:       022E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
Manifest number:          0220
Signing time:             Mon 27 Jul 2026 04:28:37 +0000
Manifest this update:     Mon 27 Jul 2026 04:28:36 +0000
Manifest next update:     Mon 03 Aug 2026 04:28:36 +0000
Files and hashes:         1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: JsOxdYs1bMgcUOj35DazAj2C1O/K0ndcOxNG0qEo6BE=)
                          2: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: c3Idvp5I6BGzVLk5m0JH2EeG/G7DC+/0AfafmTFhP5U=)
                          3: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: g7/beSnQDmTq2ey2xjXqWwakjmuPtANr1j+4Lu9F/xY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl
                          rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833
        Validity
            Not Before: Jul 27 04:28:36 2026 GMT
            Not After : Aug  3 04:28:36 2026 GMT
        Subject: CN=6a66de74-6243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:93:be:fc:f5:b8:84:36:91:16:06:f9:13:90:
                    97:2f:fe:2a:aa:28:e2:9b:e7:44:50:ec:a9:7b:4b:
                    b2:f0:13:4c:b5:00:da:5a:97:db:5e:47:e9:cd:e9:
                    61:03:dc:39:d5:47:c3:41:db:28:8b:3b:de:13:94:
                    bb:65:05:ea:ea:e6:6f:04:e2:62:4b:9c:87:f8:4a:
                    1b:0e:47:fe:e7:9e:cf:3f:91:85:58:db:7b:83:53:
                    8a:b6:5e:3e:f7:5e:b4:66:05:c8:3a:0b:41:c3:b4:
                    87:ba:91:7e:c9:dc:5a:22:b6:f6:d4:47:90:05:75:
                    40:61:63:7c:8d:4a:59:ee:11:a4:09:20:31:4e:32:
                    c2:ba:5f:a8:83:13:ce:b3:4d:a5:f9:2a:70:ed:ec:
                    98:48:2c:b8:ac:d4:a1:3e:31:6f:73:17:76:00:bb:
                    8a:05:82:73:7c:d7:2b:27:59:5f:56:00:de:f9:47:
                    e2:d4:84:ed:e3:c8:18:a8:2f:cf:d1:e3:20:21:15:
                    94:2e:54:ea:b9:e3:4b:35:03:8a:d0:d2:50:73:52:
                    75:09:3b:d7:71:45:30:d9:a9:f6:c5:24:69:45:6f:
                    25:84:2f:5a:02:16:dc:98:84:64:92:46:03:80:f5:
                    53:65:4e:95:db:3c:6c:75:21:8e:ee:99:6e:28:dd:
                    48:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:16:BB:5A:03:7D:D5:FC:89:6D:E4:16:DA:24:6C:7E:CD:D0:30:76
            X509v3 Authority Key Identifier:
                keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:45:65:92:f6:5e:61:80:d7:7d:14:f3:9b:33:3f:10:46:74:
         fb:5b:3e:3c:d8:a9:03:25:b3:5f:90:bb:2d:75:56:87:36:c3:
         b1:20:b2:0b:3b:e6:e4:5a:1c:18:77:62:a1:62:8b:82:8f:aa:
         f6:cf:6a:9c:92:91:13:fa:54:7a:3c:c9:e9:61:2e:c7:16:6b:
         31:a8:63:f5:2e:05:13:b1:9a:37:f7:90:9a:39:4b:2f:61:e6:
         3b:4c:4d:01:67:79:91:04:d5:7d:d0:bb:36:24:a9:1f:06:8f:
         7d:ed:bf:ef:24:02:db:60:c4:5f:ca:0c:c8:12:c1:d7:0a:94:
         c9:90:fa:03:b3:9b:7b:65:aa:4a:b1:94:eb:5f:41:20:e9:d0:
         cf:e7:94:bb:7a:4c:a6:a3:7b:40:09:48:8c:b7:46:05:0f:ee:
         46:09:0d:74:29:56:f2:38:74:74:f4:d5:d2:f4:1d:e6:8c:12:
         7e:91:f5:55:0b:c4:c3:cc:17:de:07:01:e0:dc:a6:24:c4:e1:
         35:f6:f6:00:81:72:d4:a7:f4:f1:61:97:6a:7f:f4:88:f7:97:
         e9:6d:cf:32:d5:05:4e:fe:26:30:92:c8:2d:3f:f7:97:55:b1:
         56:07:59:02:98:bd:dd:57:52:a6:6c:d5:ec:ea:23:ac:95:d8:
         4e:f2:6d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:02:14 2026 by rpki-client