Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
File:                     ilgWVckip6USHgD7ekJ-AZrHMHs.mft (raw, json)
Hash identifier:          ejh87uqcfm/OKzZBKbUFzBAhZLJcpqZVOvfhQwtZICI=
Subject key identifier:   EA:43:10:C8:D2:D6:BB:05:16:60:F1:C7:32:0A:06:82:32:05:2F:AA
Authority key identifier: 8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B
Certificate issuer:       /CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
Manifest number:          020B
Signing time:             Fri 17 Apr 2026 02:45:56 +0000
Manifest this update:     Fri 17 Apr 2026 02:45:55 +0000
Manifest next update:     Fri 24 Apr 2026 02:45:55 +0000
Files and hashes:         1: ilgWVckip6USHgD7ekJ-AZrHMHs.crl (hash: gYzcHs3oX3n+RIDk/K/CHkXFWAyZIH3b5sr8pmhEcx0=)
                          2: 85CE44A4BC1111EE9E42EB2DC4F9AE02.roa (hash: ykWOYJXvUHCK/9sjtZuf6RaL78xXi90Fjs/DYiu/rW4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl
                          rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154376, serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B
        Validity
            Not Before: Apr 17 02:45:55 2026 GMT
            Not After : Apr 24 02:45:55 2026 GMT
        Subject: CN=69e19ee4-1c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:da:8f:51:e8:e3:ab:b0:98:27:2f:e5:6d:
                    61:38:cf:44:8a:d8:26:4b:94:aa:ec:fd:29:f1:ee:
                    07:f2:f8:ed:f8:bd:2b:98:65:0b:4f:c0:0b:1d:b8:
                    4e:2e:4b:5a:cc:54:92:c0:a5:50:3a:e2:1b:d9:39:
                    23:37:a5:f1:ec:bd:69:93:53:54:34:22:93:dd:6d:
                    c7:53:cd:09:63:d1:73:e5:bd:fd:fa:f0:09:a5:73:
                    17:c7:ec:d6:fd:03:2a:84:98:40:59:e4:ac:cd:b0:
                    e3:64:16:0e:c4:ab:eb:4c:c7:02:a6:e0:92:60:1a:
                    45:95:bf:40:08:21:19:b3:71:73:8f:26:38:0f:3c:
                    dc:71:61:3c:b9:d5:75:9d:ad:d3:bb:c4:95:66:24:
                    d7:e9:bd:3e:f7:09:04:fb:94:d9:8c:ef:3d:5a:a2:
                    28:1e:51:e3:f6:c0:ca:f1:83:4b:aa:5c:fb:4a:34:
                    9b:97:7a:55:53:61:49:4b:d2:d7:2a:53:e8:29:11:
                    89:3e:e1:27:d4:46:45:94:26:df:ac:70:15:9c:06:
                    8d:00:ef:41:05:88:22:12:1d:2c:72:ad:d2:e5:3c:
                    a4:d2:5c:0a:5e:f7:a2:0a:ea:1e:b7:64:14:e8:26:
                    5a:34:48:cc:7a:4a:78:dc:2f:7a:40:5a:bc:42:d7:
                    2e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:43:10:C8:D2:D6:BB:05:16:60:F1:C7:32:0A:06:82:32:05:2F:AA
            X509v3 Authority Key Identifier:
                keyid:8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:90:41:ec:bc:45:31:3e:5b:7f:96:47:e8:71:3f:06:98:f7:
         18:01:56:6f:e3:3b:c5:f8:4b:47:96:98:d2:c0:bc:35:5d:4e:
         24:e2:51:83:36:a7:51:3c:a7:c9:55:af:fc:56:b7:06:a1:e7:
         9d:0c:90:59:34:49:b2:54:13:7e:5c:f3:62:f2:ea:b4:78:a7:
         44:1b:20:e7:1c:7b:97:43:d1:60:ef:f8:da:fb:12:64:36:06:
         a7:64:c8:3a:49:0c:3d:68:b7:4a:56:e4:36:8a:68:5c:7d:9e:
         34:0c:87:79:78:6f:29:af:fa:b3:79:86:93:ee:b1:eb:d8:ed:
         56:96:73:75:c7:ab:29:cd:31:bf:22:94:71:21:76:33:a2:cb:
         67:94:ab:e0:3d:4c:74:af:cd:a8:a9:ca:dd:85:27:a4:a7:d2:
         80:f2:53:66:5e:34:6d:f4:b2:7d:dd:1e:bb:13:b7:77:d3:97:
         07:ac:ff:0d:b9:e0:59:12:33:82:40:1b:1b:0e:0e:14:27:8e:
         a2:db:3a:ae:d6:36:18:68:b4:fd:56:58:04:58:df:1c:66:88:
         08:cf:52:e7:ab:5f:e8:bb:5e:2a:24:d9:09:41:3c:31:e6:f6:
         14:eb:d4:f9:d8:e5:cd:f6:5d:07:94:dd:b0:43:8e:00:1d:8c:
         c2:35:49:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:40:35 2026 by rpki-client