Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
File:                     ilgWVckip6USHgD7ekJ-AZrHMHs.mft (raw, json)
Hash identifier:          8VMjEWX40mw1n5J1y9Wf+tWJYTNEgLweUr7VYaoXOlo=
Subject key identifier:   92:33:2A:88:8A:76:7F:5F:50:88:4E:C7:FA:36:D9:88:DA:32:83:72
Authority key identifier: 8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B
Certificate issuer:       /CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B
Certificate serial:       0220
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
Manifest number:          0218
Signing time:             Wed 13 May 2026 02:57:52 +0000
Manifest this update:     Wed 13 May 2026 02:57:52 +0000
Manifest next update:     Wed 20 May 2026 02:57:52 +0000
Files and hashes:         1: ilgWVckip6USHgD7ekJ-AZrHMHs.crl (hash: rIN8nddSEZQpkEGhBi90bziUIWmFxWtYRJdCZLUZlMs=)
                          2: 85CE44A4BC1111EE9E42EB2DC4F9AE02.roa (hash: ykWOYJXvUHCK/9sjtZuf6RaL78xXi90Fjs/DYiu/rW4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl
                          rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154376, serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B
        Validity
            Not Before: May 13 02:57:52 2026 GMT
            Not After : May 20 02:57:52 2026 GMT
        Subject: CN=6a03e8b0-4e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:d2:85:f2:f9:05:04:ca:40:2f:a2:8c:ac:
                    e3:b3:e7:6e:88:f3:be:71:5e:dd:f5:57:f7:63:d8:
                    87:23:93:3c:1a:68:16:72:cd:39:65:50:0c:31:f3:
                    ef:d7:d2:5a:c9:11:85:60:73:eb:1b:37:1d:c4:55:
                    da:18:70:da:17:52:96:14:45:3d:7c:d0:86:9c:d6:
                    1b:e1:b3:cf:2a:b1:d4:d9:03:ab:70:06:83:21:7c:
                    88:dc:a8:0d:4f:cc:32:39:b7:35:b8:9f:f0:2c:96:
                    15:43:b9:61:38:fa:42:a0:9c:7b:53:20:14:b2:c6:
                    e8:0e:31:c0:46:8a:52:43:1d:3c:3b:66:dd:d5:86:
                    1e:11:3b:d4:27:bf:a9:d2:11:05:dd:39:aa:6f:99:
                    21:cf:7d:aa:df:b9:8d:bf:b8:b8:a8:d1:56:09:c5:
                    92:3b:42:2e:41:d5:1e:33:03:a6:82:fe:7f:03:ee:
                    9e:2f:93:59:be:2b:ef:60:c5:1d:d1:8f:6f:d0:e3:
                    0d:80:85:28:01:ec:c5:8b:0f:3a:eb:e2:5f:75:f6:
                    9c:4b:b7:09:e7:31:f5:0c:c4:3d:7c:ec:c0:32:9d:
                    d6:bd:19:e0:f2:62:a1:49:72:67:69:a3:de:2d:9a:
                    58:ee:27:35:ca:36:2c:37:23:32:26:87:fe:64:6c:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:33:2A:88:8A:76:7F:5F:50:88:4E:C7:FA:36:D9:88:DA:32:83:72
            X509v3 Authority Key Identifier:
                keyid:8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:55:8a:f9:a8:d1:a5:26:ce:37:08:ba:00:57:70:35:2a:d3:
         34:b5:63:10:49:1e:5c:6b:c0:9b:9b:03:76:ff:19:96:c4:e8:
         59:67:fa:ad:94:a1:3e:6c:1e:56:1a:a1:4b:4a:74:58:35:2b:
         ee:39:98:bf:58:48:92:1d:be:b0:43:bf:a4:24:14:94:de:33:
         3c:33:c3:91:51:12:db:d9:f0:13:01:64:20:fc:f2:bc:df:78:
         58:49:62:88:20:8e:17:b9:42:e3:87:87:bc:14:12:69:10:01:
         1d:a7:35:bf:14:43:d0:be:33:c1:59:9f:c7:74:e5:16:d8:f0:
         2c:9e:22:1c:27:dd:68:5a:ad:bb:43:d9:b6:2d:32:34:5a:79:
         ea:50:e9:fd:a7:9f:06:f7:46:b5:c3:33:1f:11:54:c3:3c:69:
         e9:e1:f3:bd:75:be:d4:de:99:0c:96:0b:94:1e:86:47:79:1e:
         f9:23:7d:c0:98:39:b9:08:13:93:0c:73:c8:f3:28:29:b1:fd:
         81:8e:0a:7d:ce:d4:2a:52:34:34:4f:54:9f:85:45:85:f8:f7:
         56:f4:a5:af:af:0e:14:36:f8:d2:6d:13:13:50:b6:2e:51:e1:
         80:0f:58:84:82:1a:ba:2d:e5:61:65:a2:9a:ff:7f:39:4f:55:
         58:c4:5e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:41:04 2026 by rpki-client