Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
File:                     ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft (raw, json)
Hash identifier:          JwThm0pKv9euPnvWIRBbR8IVARjCsPpHEHqGFXcE8yo=
Subject key identifier:   BA:F7:6E:9D:FA:34:CF:53:A4:57:9A:3A:60:7D:75:0A:57:00:FB:8D
Authority key identifier: 8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54
Certificate issuer:       /CN=A9167671/serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
Manifest number:          86
Signing time:             Thu 23 Jul 2026 09:20:44 +0000
Manifest this update:     Thu 23 Jul 2026 09:20:43 +0000
Manifest next update:     Thu 30 Jul 2026 09:20:43 +0000
Files and hashes:         1: ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl (hash: i83VjcCkIIELVNb3btmcMpE7pxRyouDTpiXXU80Pxyo=)
                          2: 42AD4128C0FD11F0883D987DC4F9AE02.roa (hash: vGDLBHhQ2uCZ7yDty8cYd4H0mY/09AkesOUGu4E2fks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl
                          rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167671, serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
        Validity
            Not Before: Jul 23 09:20:43 2026 GMT
            Not After : Jul 30 09:20:43 2026 GMT
        Subject: CN=6a61dcec-6107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:ee:88:59:ef:6f:dc:93:24:30:65:d1:b1:
                    cf:ef:54:65:33:75:f0:b3:c4:40:eb:11:c5:f5:b8:
                    91:c6:37:cf:b1:5d:1a:4c:10:24:45:9b:a6:b1:8d:
                    3e:0a:79:0c:69:7e:fd:27:6b:a4:62:6c:ef:89:d9:
                    c1:1f:7a:37:5d:12:48:1c:47:c5:ec:fb:9d:1c:80:
                    30:ea:f5:6e:eb:d3:e9:2b:4c:27:71:f5:12:82:1e:
                    54:40:97:fe:d5:00:a9:83:f4:be:f1:02:2e:c4:85:
                    ac:90:e6:b5:f1:96:4c:eb:64:e6:97:55:27:f4:2a:
                    ba:7e:1d:fd:87:ad:be:83:a0:ee:bc:9d:52:38:dc:
                    8b:96:67:09:06:99:79:36:3c:b6:85:aa:86:21:f1:
                    82:ff:d2:d2:56:c0:23:64:ab:f9:cf:b9:3d:9d:0e:
                    2c:a1:8e:f3:5b:b1:05:78:31:f9:13:dd:bc:cc:a5:
                    81:9d:9c:12:02:8d:99:a4:92:da:5b:66:53:aa:e5:
                    6d:fd:b6:18:f4:db:23:5d:84:e8:56:1c:d9:03:fc:
                    b7:cb:ee:6f:83:11:2d:89:6a:bf:49:f2:40:8e:e4:
                    c6:c2:46:35:16:8c:6a:5e:8d:25:64:b5:08:e5:d5:
                    19:38:c2:ea:75:f0:cb:41:a5:81:48:dd:bf:dc:ed:
                    7a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F7:6E:9D:FA:34:CF:53:A4:57:9A:3A:60:7D:75:0A:57:00:FB:8D
            X509v3 Authority Key Identifier:
                keyid:8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:08:ff:d3:4a:d2:c6:48:78:29:e0:97:dc:57:a6:ee:69:39:
         1c:b8:67:44:6c:bf:61:c2:1c:c0:96:8c:f9:12:fa:df:5d:50:
         e3:dd:40:c4:f3:9e:36:ae:11:e6:42:9f:85:ff:3e:cc:ad:11:
         93:81:4c:52:f9:6c:30:2e:41:04:47:54:69:cd:05:40:0d:97:
         3c:03:d9:2c:0a:ec:ca:3e:e6:86:df:c7:64:7d:9b:8f:80:7a:
         2d:04:8a:66:88:e3:b1:3b:f5:2c:aa:37:84:e7:7f:e4:14:09:
         c2:d9:c2:70:32:c6:a2:26:17:bd:c8:22:f6:22:db:6f:8c:f1:
         dd:67:40:8d:af:26:94:64:a5:75:b6:8e:64:6f:e2:57:0f:6e:
         fc:d3:76:ff:78:dc:4b:63:02:97:e2:4f:39:0a:a4:ec:41:8b:
         3a:fe:03:f4:1c:d4:29:b3:df:07:c8:7f:e9:94:4d:b9:62:06:
         58:45:fa:13:0d:21:84:92:f8:0b:8a:4d:9d:7c:78:8b:d8:66:
         61:07:a9:29:03:14:9f:79:13:d0:e4:6e:ad:c8:0e:ee:f8:d6:
         a4:c0:c0:eb:ee:3c:59:a3:c8:ca:ee:98:db:1b:15:55:46:ee:
         c8:73:43:5c:23:b9:93:06:18:c8:29:a2:49:6b:ed:a3:b4:0e:
         42:8d:ef:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njc2NzExMTAvBgNVBAUTKDhBNTc3MTdFNjJFMTE1QkFEMEFGMTY3OTQyMjM1QjAx
QjlCMUYzNTQwHhcNMjYwNzIzMDkyMDQzWhcNMjYwNzMwMDkyMDQzWjAYMRYwFAYD
VQQDEw02YTYxZGNlYy02MTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0B3uiFnvb9yTJDBl0bHP71RlM3Xws8RA6xHF9biRxjfPsV0aTBAkRZumsY0+
CnkMaX79J2ukYmzvidnBH3o3XRJIHEfF7PudHIAw6vVu69PpK0wncfUSgh5UQJf+
1QCpg/S+8QIuxIWskOa18ZZM62Tml1Un9Cq6fh39h62+g6DuvJ1SONyLlmcJBpl5
Njy2haqGIfGC/9LSVsAjZKv5z7k9nQ4soY7zW7EFeDH5E928zKWBnZwSAo2ZpJLa
W2ZTquVt/bYY9NsjXYToVhzZA/y3y+5vgxEtiWq/SfJAjuTGwkY1FoxqXo0lZLUI
5dUZOMLqdfDLQaWBSN2/3O16ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLr3bp36
NM9TpFeaOmB9dQpXAPuNMB8GA1UdIwQYMBaAFIpXcX5i4RW60K8WeUIjWwG5sfNU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzY3MS80NjBCMDgwNEJF
MUYxMUYwOTU0MzVENkVDNEY5QUUwMi9pbGR4Zm1MaEZiclFyeFo1UWlOYkFibXg4
MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lsZHhmbUxoRmJyUXJ4WjVRaU5iQWJteDgxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzY3MS80NjBCMDgwNEJFMUYxMUYwOTU0MzVENkVDNEY5QUUwMi9pbGR4Zm1MaEZi
clFyeFo1UWlOYkFibXg4MVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEwj/00rSxkh4KeCX3Fem7mk5HLhnRGy/YcIcwJaM+RL6311Q491AxPOeNq4R
5kKfhf8+zK0Rk4FMUvlsMC5BBEdUac0FQA2XPAPZLArsyj7mht/HZH2bj4B6LQSK
ZojjsTv1LKo3hOd/5BQJwtnCcDLGoiYXvcgi9iLbb4zx3WdAja8mlGSldbaOZG/i
Vw9u/NN2/3jcS2MCl+JPOQqk7EGLOv4D9BzUKbPfB8h/6ZRNuWIGWEX6Ew0hhJL4
C4pNnXx4i9hmYQepKQMUn3kT0ORurcgO7vjWpMDA6+48WaPIyu6Y2xsVVUbuyHND
XCO5kwYYyCmiSWvto7QOQo3vtw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:22 2026 by rpki-client