Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
File:                     ilgWVckip6USHgD7ekJ-AZrHMHs.mft (raw, json)
Hash identifier:          Ms9RS/bZt5/MiMWW2oKw2/rZcQ67nZuhLTPBR9/9hGU=
Subject key identifier:   86:54:62:B6:D4:F0:36:DA:8A:61:1A:ED:35:7D:DF:E2:79:3D:05:02
Authority key identifier: 8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B
Certificate issuer:       /CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B
Certificate serial:       01FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
Manifest number:          01F3
Signing time:             Mon 02 Mar 2026 02:54:38 +0000
Manifest this update:     Mon 02 Mar 2026 02:54:37 +0000
Manifest next update:     Mon 09 Mar 2026 02:54:37 +0000
Files and hashes:         1: ilgWVckip6USHgD7ekJ-AZrHMHs.crl (hash: nlw8Q9ko2A6/9QQiUHHqgIiJcKonYHqjALBupI/+Hac=)
                          2: 85CE44A4BC1111EE9E42EB2DC4F9AE02.roa (hash: ykWOYJXvUHCK/9sjtZuf6RaL78xXi90Fjs/DYiu/rW4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl
                          rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154376, serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B
        Validity
            Not Before: Mar  2 02:54:37 2026 GMT
            Not After : Mar  9 02:54:37 2026 GMT
        Subject: CN=69a4fbee-695c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:70:ff:1c:cc:ed:3d:6e:51:31:e9:e4:2f:7f:
                    b6:ba:82:bd:4c:21:58:dd:0c:ea:7b:af:93:24:20:
                    9f:24:d1:e9:cf:fb:7f:5d:57:70:eb:00:0e:25:22:
                    fa:bc:32:40:8c:85:c0:0e:f9:e3:96:2d:6e:4d:0d:
                    e0:b5:30:8f:c3:88:a8:68:5a:99:a6:23:fc:f2:6d:
                    6e:b9:88:c1:85:c5:67:08:65:0d:3d:3e:c9:4a:cf:
                    9d:68:a5:dc:55:2a:65:66:99:e5:06:2d:71:ed:cf:
                    a8:02:a0:35:c9:ce:f4:a7:ac:11:69:2e:4e:e3:97:
                    81:9f:2e:8c:6d:ce:0a:9c:4a:41:5f:52:b3:3a:b3:
                    91:2e:5e:54:25:30:19:f7:95:04:fd:7b:2d:b7:be:
                    07:90:02:bd:62:99:02:31:19:61:42:b0:cd:9b:25:
                    d9:87:87:b8:80:5b:48:c5:09:c0:80:89:11:6c:f6:
                    31:e0:86:bb:b4:42:60:2b:44:32:a8:d1:ee:32:9e:
                    9f:8a:b1:68:af:80:a0:ad:54:80:e7:72:89:dc:c8:
                    e7:20:47:62:ab:39:34:84:14:68:5d:7a:4f:59:32:
                    6d:dc:90:c1:f7:ca:d7:33:66:06:44:7a:bb:7b:ae:
                    4d:30:9a:a2:1f:18:b6:ae:32:96:68:3c:67:dd:d2:
                    0a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:54:62:B6:D4:F0:36:DA:8A:61:1A:ED:35:7D:DF:E2:79:3D:05:02
            X509v3 Authority Key Identifier:
                keyid:8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:74:9a:17:7e:3a:96:bf:28:c7:af:4e:8c:3f:01:49:a1:ae:
         83:84:e7:a7:47:2a:2e:64:4c:c7:56:9f:c9:18:18:a3:26:88:
         3c:26:80:97:8c:ee:01:0e:8c:0a:e3:5a:b0:6d:77:52:28:f4:
         55:ae:67:4e:75:20:83:73:d5:1f:02:f2:64:d3:8a:25:d5:75:
         13:8a:d8:03:cd:57:8c:e3:c5:c7:35:25:6a:09:57:f3:ed:32:
         07:af:d8:65:98:05:96:0c:45:7e:c2:7c:01:22:30:ff:a8:b0:
         f6:58:4b:b1:a9:05:36:95:d1:0d:29:38:70:2d:d1:9f:59:10:
         af:80:a1:f8:d6:db:84:c7:7d:68:71:31:a7:9b:cb:b2:bb:70:
         27:be:5c:b7:e5:29:c4:6a:f8:55:42:23:a5:65:05:bd:52:3f:
         2a:b4:d1:66:da:1c:06:d2:36:1b:87:a8:d1:e1:19:86:7a:28:
         6c:32:22:38:e6:6d:d8:da:e5:29:81:ba:f4:4f:5c:32:f2:b1:
         7c:99:9a:10:d5:ca:3b:a6:79:4b:7c:cc:37:31:8d:2e:43:c6:
         fd:b9:6f:bc:fd:08:25:03:5c:b3:26:22:f0:00:c1:8e:7c:bb:
         8d:a9:14:87:7b:87:78:e5:3f:1a:2b:da:ba:1d:3d:11:f0:be:
         a7:f1:f7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:28 2026 by rpki-client