Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
File:                     ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft (raw, json)
Hash identifier:          09CdbUixH7agQPsUf1N0ug9/I95GqpfAW1GtG3te4d0=
Subject key identifier:   FF:36:5D:4F:8B:F2:C0:38:2B:BE:8D:FB:4B:91:BE:74:1D:BC:93:85
Authority key identifier: 8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54
Certificate issuer:       /CN=A9167671/serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
Manifest number:          62
Signing time:             Mon 11 May 2026 08:02:23 +0000
Manifest this update:     Mon 11 May 2026 08:02:23 +0000
Manifest next update:     Mon 18 May 2026 08:02:23 +0000
Files and hashes:         1: ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl (hash: iS6iAzsERk7UoL0fc4gppzpZpdxexLKrw1uYVJK74RI=)
                          2: 42AD4128C0FD11F0883D987DC4F9AE02.roa (hash: vGDLBHhQ2uCZ7yDty8cYd4H0mY/09AkesOUGu4E2fks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl
                          rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167671, serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
        Validity
            Not Before: May 11 08:02:23 2026 GMT
            Not After : May 18 08:02:23 2026 GMT
        Subject: CN=6a018d0f-f4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:89:f1:15:5a:56:ee:e9:c5:80:38:46:af:
                    42:50:57:5c:d4:f1:c9:ff:82:ec:ef:bd:14:dd:7a:
                    ed:03:5d:0f:9e:5a:cb:4e:ca:c5:b2:6c:12:f9:52:
                    ac:fd:73:12:a6:66:7c:52:59:6b:d8:08:83:0f:cd:
                    6e:94:21:46:54:71:b0:95:f2:21:85:3e:a0:57:a9:
                    0c:d3:85:9f:2b:2c:63:b5:49:60:48:db:e7:e9:58:
                    96:34:30:be:e5:b9:72:af:01:10:6b:55:f2:9e:58:
                    ad:43:a4:c7:2d:97:d2:69:d9:a3:f1:57:36:c6:e7:
                    93:74:5c:77:59:67:7a:ed:99:7b:dc:b1:ae:81:b7:
                    9e:bd:f8:e4:e0:f1:c9:03:e3:f6:67:1c:25:fb:07:
                    52:69:6d:e6:55:4d:31:d4:6e:85:1c:37:d5:10:f7:
                    49:3c:b9:d5:5f:bc:5f:6f:62:6f:dd:f4:d4:ac:3b:
                    27:d9:03:44:30:49:3a:87:25:c6:45:cc:59:2d:ba:
                    5e:38:9a:0d:5b:66:58:d2:56:30:63:1d:0c:1e:a9:
                    a3:f0:eb:e4:cd:c3:e1:8c:04:96:72:8a:7b:fc:ad:
                    04:b9:95:32:84:64:7f:46:bc:74:da:0b:b1:c6:b7:
                    2f:a0:30:9e:a2:7c:8e:a3:f0:94:11:94:8e:59:85:
                    89:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:36:5D:4F:8B:F2:C0:38:2B:BE:8D:FB:4B:91:BE:74:1D:BC:93:85
            X509v3 Authority Key Identifier:
                keyid:8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4e:e3:45:56:77:6c:0f:40:35:35:8a:ed:fd:97:c1:ec:0c:
         97:26:c1:20:4f:63:00:62:d8:6c:de:b6:af:24:0f:d3:73:b6:
         87:ae:4e:b1:6d:87:b9:63:7c:ff:7b:c8:d2:8b:c8:22:a3:89:
         20:40:06:22:97:53:94:2e:1e:f8:69:be:84:4b:29:c4:0d:ff:
         39:25:32:0e:df:99:bb:9a:7d:e1:81:af:61:7b:8e:13:63:da:
         85:d5:e4:b7:11:2b:56:3e:e3:39:71:40:55:ba:ef:e1:f6:6a:
         69:80:c9:de:8e:be:eb:ea:8c:b9:61:6e:6c:c6:2a:76:79:23:
         01:c6:5f:38:a2:3d:c4:2e:04:71:e5:63:5f:14:7e:9f:5c:6a:
         0b:4d:57:ef:b4:41:a3:41:de:dc:4a:f7:d7:e7:8f:31:39:47:
         a8:96:c4:aa:91:3a:12:6b:89:b1:d4:32:fa:cc:b1:ad:1e:87:
         d5:e7:80:05:3c:b7:c4:f9:cd:0b:d0:59:00:5c:8b:ac:5f:0e:
         99:2d:9d:74:92:d5:7f:20:4c:35:01:e7:7b:7c:af:79:a9:67:
         1d:1d:41:8f:df:f2:b4:74:1a:5a:cf:4a:5b:0d:1c:47:69:98:
         ed:49:0b:e2:b2:9d:a4:5d:aa:97:81:db:fc:25:cc:ce:a0:b4:
         17:6f:ca:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:12:02 2026 by rpki-client