Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft
File:                     ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft (raw, json)
Hash identifier:          8LzqOu+oOSC/t+0yZ95IlOYmtxROBoFfDrl0iHVbZU8=
Subject key identifier:   6D:C4:95:61:82:D7:FC:6E:BC:35:52:A5:79:C1:01:72:5F:2D:B8:89
Authority key identifier: 20:B6:5F:35:86:7D:15:CE:0F:79:F1:E8:30:8F:6F:65:E6:4D:25:1A
Certificate issuer:       /CN=A917B23B/serialNumber=20B65F35867D15CE0F79F1E8308F6F65E64D251A
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft
Manifest number:          11
Signing time:             Fri 25 Sep 2026 09:16:28 +0000
Manifest this update:     Fri 25 Sep 2026 09:16:27 +0000
Manifest next update:     Fri 02 Oct 2026 09:16:27 +0000
Files and hashes:         1: ILZfNYZ9Fc4PefHoMI9vZeZNJRo.crl (hash: VeAN/r8s9OYtOTf9335KE6OSVrV/IDm+UqUeb6bqYtY=)
                          2: 99F2CE74A1F011F1BB91A1DB3E11F970.roa (hash: 0f/muL4dbsS2xjRlJDf6C/ZSy3ovWH7NqcxlwtnGGaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.crl
                          rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 09:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B23B, serialNumber=20B65F35867D15CE0F79F1E8308F6F65E64D251A
        Validity
            Not Before: Sep 25 09:16:27 2026 GMT
            Not After : Oct  2 09:16:27 2026 GMT
        Subject: CN=6ab63bec-3c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b8:cc:7f:e7:b1:82:b7:73:e0:84:41:7d:e5:
                    37:20:ad:43:0c:3b:f2:db:92:9f:e5:04:60:18:6a:
                    af:e9:e8:7f:ef:0f:63:84:bf:a2:75:bd:b5:1c:15:
                    8e:92:c3:7f:7b:7e:d1:77:50:10:b6:99:a2:25:44:
                    d7:75:b3:e5:a7:41:1a:90:99:20:ae:2c:43:c4:4b:
                    73:e7:3a:b5:f0:50:a0:0f:9b:56:27:51:2e:5c:db:
                    ed:89:43:cd:03:a9:75:25:74:51:8e:30:4e:00:b8:
                    d9:62:f6:2d:6f:7d:5e:c4:dc:b5:ec:70:86:88:0c:
                    ed:75:33:57:03:09:53:fb:c9:d2:9d:28:9c:56:7f:
                    33:93:97:59:0a:19:c6:06:e1:b8:81:eb:c4:21:10:
                    ee:91:b9:bd:e0:7b:13:e7:b1:20:40:a2:9e:fe:ff:
                    3c:f5:65:d8:fd:92:57:5b:28:8d:26:18:d7:6b:85:
                    9e:d3:b9:46:c0:49:e0:1d:b0:29:1b:63:19:5a:01:
                    2a:ac:9a:72:f5:aa:13:7e:cc:62:ef:31:a3:a6:f8:
                    f5:e8:21:02:0b:13:98:97:7d:b7:9e:e1:3d:97:88:
                    f0:5d:f9:5a:b8:b0:67:90:c0:63:ef:07:62:92:b7:
                    ba:7a:ab:00:a3:41:5a:d7:aa:67:7e:1f:17:ef:3a:
                    da:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C4:95:61:82:D7:FC:6E:BC:35:52:A5:79:C1:01:72:5F:2D:B8:89
            X509v3 Authority Key Identifier:
                keyid:20:B6:5F:35:86:7D:15:CE:0F:79:F1:E8:30:8F:6F:65:E6:4D:25:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B23B/23DA6AE4A1F011F1A652CBF63D11F970/ILZfNYZ9Fc4PefHoMI9vZeZNJRo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:1c:f1:fc:f4:28:5d:90:ea:99:0f:e4:22:a6:93:b0:29:62:
         4c:50:9a:b4:87:f9:18:64:b3:50:36:1a:85:8a:f8:0d:f1:42:
         75:8a:7f:24:bc:0d:f4:b8:61:54:9e:e5:36:39:8f:78:f6:50:
         40:de:1e:71:3e:7a:ae:91:a2:9a:12:94:1a:c0:35:89:31:e9:
         f0:4b:17:43:3b:0f:eb:65:7c:69:b3:d6:f0:b1:11:a2:09:96:
         bc:c9:b3:99:c9:5b:01:b2:f3:12:4f:41:fb:85:c1:b8:81:a5:
         07:15:c1:a4:8b:c4:39:a4:23:77:b6:d5:d8:a3:fb:83:d9:4e:
         ae:43:c7:a3:d5:e0:55:43:ee:42:cb:2e:51:d2:91:b0:2b:5a:
         24:73:87:c9:22:45:57:29:4d:31:29:6e:f0:78:9b:93:66:31:
         6f:21:4e:9e:29:2a:c9:cd:5a:2a:36:50:06:1e:35:39:7d:56:
         61:e5:fe:77:a1:3c:3f:71:5a:77:ef:26:41:f7:54:8e:f4:5a:
         ba:0d:ab:14:c4:bc:f0:ac:f2:b7:4c:24:27:28:5a:a5:0e:8f:
         63:05:bb:ef:5f:7c:b7:54:31:2a:3a:58:92:65:eb:fa:bb:8c:
         0c:51:b0:07:d8:98:f8:28:8f:9f:e8:20:07:ec:1f:a9:27:5d:
         5a:5d:3f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:56:19 2026 by rpki-client