Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
File:                     iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json)
Hash identifier:          8iBK+Ez7WLC49qsnQLMFSPVcoGvt8jJyIvfbRyzg0Oc=
Subject key identifier:   F0:42:B2:AE:79:46:48:70:1B:05:2F:70:8E:09:04:7D:51:55:37:16
Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
Certificate issuer:       /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Certificate serial:       021F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
Manifest number:          0216
Signing time:             Mon 27 Jul 2026 04:28:23 +0000
Manifest this update:     Mon 27 Jul 2026 04:28:23 +0000
Manifest next update:     Mon 03 Aug 2026 04:28:23 +0000
Files and hashes:         1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: KT/PAiu2pdlJ4jSFnTpjNi6oPf26AlC38Kc1x9/SJ38=)
                          2: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: 8VCSX3Py1IyN0f9zmOSlchE4nrVyfSkUdTOEL2+Xh+k=)
                          3: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: m4OYQMEnrmC7k1a1yVmKxzd2QvlWXdsaMA1wS2lcsRs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
                          rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
        Validity
            Not Before: Jul 27 04:28:23 2026 GMT
            Not After : Aug  3 04:28:23 2026 GMT
        Subject: CN=6a66de67-76a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:b6:f7:8b:9f:9f:95:da:33:1b:5d:ce:ca:
                    74:c9:00:c3:2a:0d:16:db:3f:97:16:7b:68:f0:33:
                    03:ed:2e:d0:f0:dc:d6:8c:c2:19:d0:80:86:71:f1:
                    53:56:65:0d:b7:fe:3a:6b:17:0f:b0:76:fe:15:c3:
                    66:2a:64:5c:60:5e:a4:85:43:cb:96:25:78:37:43:
                    4f:bf:46:c6:12:89:9f:aa:fc:b6:0a:b0:79:fe:ad:
                    37:c5:62:e8:71:df:d7:25:7d:da:bc:c8:88:de:59:
                    7b:e9:8d:04:14:47:2d:67:6f:4d:c3:49:52:aa:58:
                    53:df:1e:9b:01:db:0b:29:7e:b2:7e:a5:32:7d:d7:
                    9e:3a:60:c8:e1:eb:e8:12:e8:ce:40:b8:44:aa:86:
                    0f:04:58:b0:15:28:a5:ab:ac:c5:a6:51:35:6a:b6:
                    bb:00:33:76:d5:6b:57:c5:d7:f3:d2:f0:39:89:7d:
                    36:bb:83:f1:9e:2d:54:d8:39:76:87:06:4c:a6:bf:
                    69:d4:7c:60:69:7c:ef:7c:ee:99:02:a1:c1:a8:0b:
                    62:6f:84:cb:59:e2:81:c7:5e:7c:d7:65:ac:dc:e5:
                    20:6e:73:42:ba:d4:2e:88:ef:be:cb:e0:35:3d:75:
                    52:e3:c8:c9:6d:5a:72:f5:94:1a:c9:97:27:e1:5a:
                    05:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:42:B2:AE:79:46:48:70:1B:05:2F:70:8E:09:04:7D:51:55:37:16
            X509v3 Authority Key Identifier:
                keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:54:67:29:bc:2f:4f:a7:f0:41:7f:fd:40:d3:3f:70:50:03:
         fe:a5:40:1d:26:ad:bd:c2:50:e2:f1:68:bd:b6:16:82:eb:bd:
         df:2c:54:35:4c:57:be:5c:74:27:e2:13:ab:2b:e6:32:e2:81:
         b8:95:f5:d5:37:70:41:90:de:cb:f7:96:39:e6:eb:ef:34:f7:
         26:b6:04:0a:dd:40:fd:9f:1f:a2:cd:33:d1:f0:4c:1d:cd:bd:
         89:ce:c7:d1:0d:85:4e:12:c3:18:15:34:08:0d:33:ec:09:99:
         3e:af:4e:9e:88:4b:82:23:d7:ed:32:85:c4:a0:e3:7f:4c:87:
         60:0c:e9:de:5c:ef:4f:e9:82:ec:eb:9d:58:57:53:8a:08:48:
         b5:d4:d5:6a:af:dd:6b:ca:18:b0:dd:bf:f6:64:af:ad:70:b4:
         57:f8:a8:e2:87:af:30:c4:fe:d9:2f:08:17:74:90:57:58:15:
         f6:5d:6f:b0:b5:a9:dc:0b:1c:45:33:3c:81:6e:3d:2c:d3:19:
         cd:a9:d8:48:13:cc:66:07:be:18:7b:e5:29:bb:d8:34:08:87:
         44:64:51:90:58:a6:d6:e4:da:b6:23:25:95:2c:3e:c6:05:f1:
         eb:a1:26:40:2f:ba:3c:89:92:bf:b1:07:19:37:31:68:fb:0b:
         3a:09:b2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:07:46 2026 by rpki-client