Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
File:                     ilgWVckip6USHgD7ekJ-AZrHMHs.mft (raw, json)
Hash identifier:          ilj4xp/i4fzaJ81bsrMGtM0sHXT9pHApnz3nedu9v1c=
Subject key identifier:   A5:17:2B:46:B2:C3:4C:51:3A:EF:FB:08:D0:4A:82:9C:CB:6D:BE:91
Authority key identifier: 8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B
Certificate issuer:       /CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B
Certificate serial:       0243
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
Manifest number:          023B
Signing time:             Thu 23 Jul 2026 03:45:59 +0000
Manifest this update:     Thu 23 Jul 2026 03:45:59 +0000
Manifest next update:     Thu 30 Jul 2026 03:45:59 +0000
Files and hashes:         1: ilgWVckip6USHgD7ekJ-AZrHMHs.crl (hash: HOXpcNuFNzhClhQwCMAvlWZAmiDjvIuIFrLdYOvkCGE=)
                          2: 85CE44A4BC1111EE9E42EB2DC4F9AE02.roa (hash: ykWOYJXvUHCK/9sjtZuf6RaL78xXi90Fjs/DYiu/rW4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl
                          rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154376, serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B
        Validity
            Not Before: Jul 23 03:45:59 2026 GMT
            Not After : Jul 30 03:45:59 2026 GMT
        Subject: CN=6a618e77-3c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:ad:e1:c2:3c:4f:a8:ea:6f:2c:ce:9f:9b:
                    fb:37:90:0e:3e:12:b6:40:23:f2:8a:52:ae:f3:b3:
                    eb:25:2b:d7:c8:a5:7f:54:ab:66:b0:2e:8a:0c:55:
                    0d:8c:12:77:03:0b:a8:bc:e9:8b:12:e1:bb:9e:a6:
                    27:04:5e:a1:09:6e:7a:62:bf:9d:7d:27:8e:bb:9f:
                    fa:80:bf:e1:ce:69:26:1e:20:de:cd:68:7b:9c:08:
                    fb:09:5c:ed:4d:f3:18:8a:7c:80:3b:4e:e6:fd:dc:
                    82:35:eb:0e:64:44:47:81:03:c6:6a:3b:d1:52:29:
                    d1:a0:da:da:4b:40:94:3b:ec:14:e5:2b:3c:48:bd:
                    15:10:5f:58:59:7f:d0:db:20:bd:36:1f:fb:ca:75:
                    99:70:05:f2:5e:25:8d:9e:ff:d3:7c:53:07:f7:a7:
                    20:81:99:c8:bb:c1:39:67:0a:85:41:81:8f:24:5d:
                    58:94:4c:77:fd:e4:f4:45:30:2d:46:b5:17:fd:54:
                    93:f2:1e:4d:41:32:bf:6b:34:80:fe:73:a4:39:d9:
                    55:bc:3d:23:ea:4a:4d:6d:ad:dc:fe:f0:84:7a:55:
                    45:1f:83:f4:37:95:6c:ab:1a:6f:b5:dc:87:a4:4a:
                    3c:ac:bf:6e:2c:7a:b5:aa:07:1e:fb:e6:36:0b:43:
                    4d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:17:2B:46:B2:C3:4C:51:3A:EF:FB:08:D0:4A:82:9C:CB:6D:BE:91
            X509v3 Authority Key Identifier:
                keyid:8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0d:9e:d4:80:76:4d:29:f5:9a:b3:ea:df:a3:4f:73:da:74:
         55:76:a8:4b:a5:d4:20:17:3e:d5:dd:92:cf:f6:c5:45:f7:68:
         37:1a:39:a1:fa:29:11:ad:53:60:cb:79:3f:4c:0f:4f:ba:d2:
         58:8f:65:50:4e:e5:8f:9e:60:46:09:21:b6:da:6a:f8:81:67:
         e7:b2:91:af:7b:da:80:66:75:16:2e:e7:0a:76:c9:9c:9c:d5:
         ee:fd:46:cd:a3:b1:cb:b0:9d:8b:39:bc:e1:67:e5:f8:84:09:
         dc:41:24:15:9e:07:03:0c:de:e8:b9:5d:d9:60:92:6d:6c:3c:
         15:c0:57:14:ea:c4:57:8c:4c:58:b2:d9:ea:3f:f1:d7:80:06:
         ed:b8:92:b4:81:0b:dc:e0:ac:5b:07:ef:b9:d1:c4:6e:6b:9c:
         7f:00:54:49:a1:69:d9:e0:b7:f1:60:af:4d:ca:b7:ef:24:00:
         e1:9b:27:80:79:4f:0e:fa:cd:ed:9b:ff:28:52:85:36:42:64:
         e8:81:9e:0d:f5:24:0b:53:c7:b2:85:b4:82:b6:66:0e:1c:58:
         47:ca:96:4e:b5:aa:43:3d:cc:59:7e:2c:68:b2:e4:06:cb:9c:
         c4:01:37:8e:a9:7b:28:0e:58:28:61:94:d7:2d:f7:60:37:0c:
         ae:13:07:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:33 2026 by rpki-client