Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
File:                     ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft (raw, json)
Hash identifier:          hKXzg+SHOGq3uK2uTdyst75PWps0O/05EQAVElDKOxY=
Subject key identifier:   78:84:BA:5F:55:17:13:87:9C:40:AE:38:C7:64:14:E5:85:34:D2:A4
Authority key identifier: 8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54
Certificate issuer:       /CN=A9167671/serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
Manifest number:          4A
Signing time:             Wed 25 Mar 2026 07:22:48 +0000
Manifest this update:     Wed 25 Mar 2026 07:22:47 +0000
Manifest next update:     Wed 01 Apr 2026 07:22:47 +0000
Files and hashes:         1: ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl (hash: GU5u9SFpznDDkGhfNuGdTZvzz8Ue/U1uk/L9WJigISA=)
                          2: 42AD4128C0FD11F0883D987DC4F9AE02.roa (hash: vGDLBHhQ2uCZ7yDty8cYd4H0mY/09AkesOUGu4E2fks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl
                          rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167671, serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
        Validity
            Not Before: Mar 25 07:22:47 2026 GMT
            Not After : Apr  1 07:22:47 2026 GMT
        Subject: CN=69c38d47-2920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:a5:26:d3:fc:27:07:1b:4d:b7:cb:dd:1f:
                    2f:23:48:c0:54:ed:c7:36:76:eb:3f:16:6e:f7:9c:
                    f0:15:64:b8:b6:df:94:c0:de:26:6b:c3:9e:f2:66:
                    28:0d:1b:b9:d9:d1:89:92:07:5d:7e:28:f1:f9:1d:
                    9b:24:86:db:6b:8e:6b:71:38:57:46:61:fa:39:ba:
                    71:01:9a:67:ea:85:25:20:1b:ca:f8:b9:9b:29:84:
                    43:bf:a5:bd:36:a9:c5:28:9c:1f:f0:d1:83:b0:bd:
                    f4:54:b9:bb:6a:05:cb:75:12:1d:62:9a:09:3d:82:
                    8a:a2:c1:ac:73:cc:c5:4d:84:f0:cd:42:41:db:6f:
                    72:a9:03:73:7e:d1:ae:c0:ac:12:b4:bc:27:44:8b:
                    e4:32:05:77:c1:da:88:22:74:55:eb:b9:fc:48:9a:
                    53:8e:77:62:d4:74:67:35:20:0d:a9:b2:71:0d:8a:
                    cd:54:7c:15:f4:65:f3:b7:43:98:a8:3c:17:97:33:
                    fb:28:2a:ed:cd:4b:e8:b4:50:40:ed:46:dd:6a:15:
                    e0:ac:f4:63:e5:de:f5:c3:ba:6b:ef:7b:6f:f2:d6:
                    9d:ca:c5:3b:88:57:ba:f2:01:fd:aa:4c:e3:0e:aa:
                    75:c4:11:75:90:71:a2:93:b7:48:a8:b5:c7:29:57:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:84:BA:5F:55:17:13:87:9C:40:AE:38:C7:64:14:E5:85:34:D2:A4
            X509v3 Authority Key Identifier:
                keyid:8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f6:55:f0:e9:90:2b:3a:ba:16:70:20:ce:4a:51:fe:27:a8:
         af:2c:14:32:e2:af:4d:70:d0:55:87:e6:cb:8e:1b:9f:43:73:
         46:32:3e:a0:df:cf:e3:da:cf:07:3f:64:c7:07:4e:77:40:e2:
         32:26:bb:33:96:03:6b:7c:ef:60:dd:eb:c5:69:1c:10:73:ee:
         02:6c:19:31:2f:c1:e5:d3:11:c0:75:8e:88:01:7b:d4:b8:b5:
         a1:fb:70:b4:e8:24:8e:8f:33:03:5f:c0:1e:2f:27:07:95:d0:
         77:45:db:46:8c:7b:75:5b:b8:f0:ec:c9:6c:58:d8:de:98:df:
         b2:c9:1e:41:2b:94:8a:b1:74:89:08:fb:7e:8b:85:29:af:85:
         c3:bf:23:71:c9:f0:46:c5:58:0a:e6:18:81:a2:66:3d:b6:67:
         91:5e:6c:22:23:10:b5:34:1e:5b:c6:fc:b2:96:a4:06:96:5e:
         2c:a3:1c:9c:5c:61:dc:0e:9e:5c:bf:71:85:1b:6a:aa:e1:08:
         ae:8e:97:a1:62:3b:41:22:8f:5d:12:94:0b:2d:20:3c:54:cd:
         ef:76:bb:37:b9:cb:7f:d9:27:2f:89:3b:01:46:cf:e3:a8:b2:
         3d:42:c9:de:97:e4:0e:4c:c9:50:5c:a8:9b:af:d9:f9:06:cd:
         13:eb:3a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:05:18 2026 by rpki-client