Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
File:                     IlPgspHkNQSp2iaP28xaDjF-bME.mft (raw, json)
Hash identifier:          BqgN6O6qWgPPEn2x8Q2/tDbA/2qHI2TK60GMn44Aff8=
Subject key identifier:   C7:7B:78:D8:75:4D:9B:26:69:63:85:86:EB:E9:FE:DF:CE:9A:0B:1E
Authority key identifier: 22:53:E0:B2:91:E4:35:04:A9:DA:26:8F:DB:CC:5A:0E:31:7E:6C:C1
Certificate issuer:       /CN=A91D1FD2/serialNumber=2253E0B291E43504A9DA268FDBCC5A0E317E6CC1
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
Manifest number:          4E
Signing time:             Tue 13 Oct 2026 09:07:10 +0000
Manifest this update:     Tue 13 Oct 2026 09:07:10 +0000
Manifest next update:     Tue 20 Oct 2026 09:07:10 +0000
Files and hashes:         1: IlPgspHkNQSp2iaP28xaDjF-bME.crl (hash: qKgmrdVKMn5xzh7UUUIDj9TZ6TcJoHn66gl3m8RIkh4=)
                          2: A213FF8E535211F184FC032898833773.roa (hash: /sb5ONI+bRGD73MyIUMkM893RApQNOS9VkRgEjeAKps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.crl
                          rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 09:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1FD2, serialNumber=2253E0B291E43504A9DA268FDBCC5A0E317E6CC1
        Validity
            Not Before: Oct 13 09:07:10 2026 GMT
            Not After : Oct 20 09:07:10 2026 GMT
        Subject: CN=6acdf4be-3664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c8:4a:e7:df:9f:7f:b9:f0:1e:e6:fa:48:c2:
                    db:fe:b3:75:46:28:c4:e5:e7:ce:44:90:95:b8:1b:
                    a1:98:6c:23:9e:53:b0:3d:ea:30:86:36:65:17:f4:
                    f4:f4:f1:16:e3:98:1b:67:49:88:28:82:27:22:a4:
                    3b:9d:84:6a:29:45:3b:4f:31:be:bf:81:7e:b6:cc:
                    57:79:17:ab:64:9a:37:3e:1b:b4:72:d5:81:d4:b2:
                    25:15:29:8d:06:b4:10:e8:5c:c7:ee:57:46:ed:29:
                    65:bf:7b:ab:da:38:63:dd:09:b8:99:5e:4c:3e:3f:
                    93:05:9e:23:57:4f:89:63:0b:eb:be:3a:1c:53:c0:
                    3d:94:11:04:2c:82:47:97:15:1a:e0:ac:7f:bc:08:
                    5f:3f:60:81:2d:25:d2:31:32:60:37:5c:1b:df:f2:
                    a4:10:5d:67:6b:dd:6d:a8:6f:11:9d:8a:e7:9f:56:
                    d1:da:91:c4:72:cb:ba:7b:cc:6c:64:c8:c8:88:68:
                    18:ac:ab:ad:19:c4:ee:6c:bc:ec:71:ca:19:15:b2:
                    45:1a:01:77:bb:e1:cf:5b:78:ab:96:be:90:7e:59:
                    98:c7:36:9e:28:2b:9e:c3:b2:0b:7a:b6:73:eb:67:
                    dc:ea:14:72:4e:2d:29:a3:fc:60:d5:f3:c5:ba:9b:
                    00:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7B:78:D8:75:4D:9B:26:69:63:85:86:EB:E9:FE:DF:CE:9A:0B:1E
            X509v3 Authority Key Identifier:
                keyid:22:53:E0:B2:91:E4:35:04:A9:DA:26:8F:DB:CC:5A:0E:31:7E:6C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:6a:5d:5d:11:a8:20:aa:62:11:d2:99:1a:bf:e8:a8:da:21:
         09:0b:34:fa:95:6a:6a:6a:de:39:67:21:27:b8:d0:d7:60:43:
         75:41:b0:7d:2f:9b:22:64:15:3e:15:8e:e6:cb:8d:52:69:b9:
         89:a0:7d:ef:a3:9f:73:8a:97:ab:f2:6f:d1:17:c0:b3:86:d9:
         aa:90:6d:4b:e6:83:22:2e:b5:1b:3f:9b:83:94:9e:fe:48:fb:
         1a:48:b5:2a:1e:a8:df:b8:d0:77:2c:27:8c:94:34:0d:da:16:
         db:fe:e0:bf:c8:1b:cf:a7:f8:c6:38:c6:b4:66:cb:41:57:88:
         9f:8d:38:ea:fa:99:e9:41:2b:1b:f6:24:f8:7d:7f:c7:1f:cd:
         84:12:8c:70:0c:c4:2f:50:ef:3e:f0:b7:8d:87:35:d6:be:85:
         99:83:c4:79:e3:c2:62:94:90:29:e0:e8:0c:92:ee:0e:0a:f4:
         e5:93:d1:e2:74:71:b5:de:d5:75:83:b2:b3:f3:f2:1a:11:69:
         6a:de:fb:45:1c:88:0d:52:c4:fa:b5:e5:9a:1b:80:71:26:29:
         f1:29:44:15:c6:57:84:82:ec:86:e7:68:4a:9a:a3:77:24:93:
         41:fd:55:b7:d3:ce:37:c7:6f:8c:dc:53:d7:9c:f1:d0:18:cd:
         55:a5:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:16 2026 by rpki-client