Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
File:                     IlPgspHkNQSp2iaP28xaDjF-bME.mft (raw, json)
Hash identifier:          2KhEMTBQSsrfM9/15B1xCVlgbe/U0+q5C78lBCqMJYs=
Subject key identifier:   5F:72:74:64:7F:6D:EE:BC:98:28:82:C1:E6:4B:37:B3:BF:6E:D3:1B
Authority key identifier: 22:53:E0:B2:91:E4:35:04:A9:DA:26:8F:DB:CC:5A:0E:31:7E:6C:C1
Certificate issuer:       /CN=A91D1FD2/serialNumber=2253E0B291E43504A9DA268FDBCC5A0E317E6CC1
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
Manifest number:          0E
Signing time:             Thu 11 Jun 2026 11:26:59 +0000
Manifest this update:     Thu 11 Jun 2026 11:26:59 +0000
Manifest next update:     Thu 18 Jun 2026 11:26:59 +0000
Files and hashes:         1: IlPgspHkNQSp2iaP28xaDjF-bME.crl (hash: KDj9Z4jqX5LZWmnmb6PToDA3I3b4CDofhwUAX3qpHC4=)
                          2: A213FF8E535211F184FC032898833773.roa (hash: e77/1jHRbJq6yZ1MwuR8SDyAYoYRytcNGyFdLOJ6VnY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.crl
                          rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 11:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1FD2, serialNumber=2253E0B291E43504A9DA268FDBCC5A0E317E6CC1
        Validity
            Not Before: Jun 11 11:26:59 2026 GMT
            Not After : Jun 18 11:26:59 2026 GMT
        Subject: CN=6a2a9b83-d849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ef:49:fd:a8:63:51:ec:47:45:0c:0a:34:f0:
                    8c:43:0b:51:f8:eb:73:72:39:34:b0:33:61:2b:a9:
                    c8:d4:74:8c:5d:13:aa:22:c3:61:6c:b5:af:40:64:
                    a6:3e:b0:ef:fb:e6:da:ed:06:f9:2f:0d:ba:72:65:
                    dc:a0:e2:05:17:de:a5:ca:c6:6f:fd:41:f0:75:cb:
                    fe:dd:26:5f:63:2c:d8:bb:1b:aa:3a:c8:a9:3c:9c:
                    be:30:ce:5b:02:c5:8c:b9:e5:4a:4f:92:56:c6:8b:
                    df:24:1e:db:66:ff:82:3e:2d:7e:3b:84:0d:ac:38:
                    d3:ff:8c:b7:f6:52:39:e1:ba:f5:2e:6a:29:71:1e:
                    03:27:31:87:ba:a9:60:aa:7f:d4:e2:4c:fd:30:a9:
                    c9:45:7e:7b:65:f6:70:2c:aa:4b:13:16:38:d4:8b:
                    77:64:06:d2:eb:51:1e:39:fc:d1:31:fb:f0:96:cf:
                    41:63:6e:36:9d:92:de:c3:5a:71:d7:cc:75:12:23:
                    6f:b5:e1:c8:67:21:32:fe:c5:b1:57:7b:d8:4b:9c:
                    2c:d6:da:bb:3c:ab:bf:7a:1f:24:c0:1d:ec:a4:6d:
                    5a:07:84:cb:ac:05:0a:c3:0b:f5:25:b4:c1:b1:38:
                    f6:67:e4:20:77:11:b4:a0:2e:02:d6:d9:6e:fe:20:
                    5b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:72:74:64:7F:6D:EE:BC:98:28:82:C1:E6:4B:37:B3:BF:6E:D3:1B
            X509v3 Authority Key Identifier:
                keyid:22:53:E0:B2:91:E4:35:04:A9:DA:26:8F:DB:CC:5A:0E:31:7E:6C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:1d:6f:77:22:1f:3f:81:0a:53:15:c6:23:ad:06:79:26:13:
         85:d2:ff:35:94:67:24:e4:87:75:25:b5:fd:fe:b8:79:db:87:
         d7:69:34:88:97:f8:5a:3d:4f:a7:42:14:5e:11:0a:20:ba:2d:
         26:21:75:22:1c:61:21:4a:50:f7:a3:79:a7:eb:b2:be:b5:a1:
         c9:c2:4f:17:9a:8d:41:84:da:c2:61:5c:67:17:9e:45:16:84:
         6d:82:59:c4:78:e2:4b:be:86:e4:55:05:da:ca:2f:b0:df:d6:
         aa:78:40:17:c4:27:09:91:1c:b4:cd:92:86:f0:47:61:c2:2f:
         2c:49:db:88:f2:d6:fc:39:6b:a8:bb:17:42:88:73:a6:d1:d0:
         ed:19:76:2d:98:d6:94:7a:96:be:f0:d2:b0:87:90:5e:89:02:
         c3:31:62:eb:e5:07:92:7d:6b:a7:0f:06:32:ad:9a:43:b9:77:
         61:c5:b5:41:ef:a5:26:60:dc:c2:f7:e1:26:b4:09:92:49:89:
         7e:77:7c:c7:6f:58:08:8a:ad:e1:75:7b:a3:24:77:c9:9e:98:
         80:e5:7c:b6:77:35:1f:a8:23:cf:bc:26:87:b1:3b:5b:f4:52:
         a4:17:94:28:08:23:69:3e:a0:e8:52:9c:da:80:bf:61:6a:80:
         cd:95:de:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:18:15 2026 by rpki-client