Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
File:                     Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft (raw, json)
Hash identifier:          er6CoVNt7oPIkNLgd00Qf1Sn2q8f+3l7Skau9Yzmy9U=
Subject key identifier:   1E:0E:19:C0:29:DA:0C:15:7F:1E:BE:13:9A:73:89:EE:87:0E:C3:FB
Authority key identifier: 22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39
Certificate issuer:       /CN=A9197B7B/serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
Manifest number:          5D
Signing time:             Thu 23 Jul 2026 10:05:34 +0000
Manifest this update:     Thu 23 Jul 2026 10:05:33 +0000
Manifest next update:     Thu 30 Jul 2026 10:05:33 +0000
Files and hashes:         1: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl (hash: /GvbiEIPsNUFVnMa54uO/aT1tQoYMntS13FDgHSzXbo=)
                          2: 153BBC22FBEC11F094C0A6516D6F56BC.roa (hash: Fa+JKx4M6Yd97D4JU6xtHSXgVRciDGQpK7A4XgrvaWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl
                          rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197B7B, serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39
        Validity
            Not Before: Jul 23 10:05:33 2026 GMT
            Not After : Jul 30 10:05:33 2026 GMT
        Subject: CN=6a61e76d-94b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:e7:57:69:bd:ec:d1:26:fe:79:a9:1d:fd:
                    19:0f:46:f5:96:cb:bc:c6:b2:3f:c7:47:8b:4e:3c:
                    ba:2a:e0:1f:53:70:a7:d9:08:39:78:f5:f8:74:91:
                    50:c1:8c:ae:9b:fc:7d:a5:b8:5c:07:d5:d9:23:31:
                    91:27:2d:a0:82:37:96:fa:b9:fe:3f:b1:26:11:11:
                    22:08:53:b7:40:b9:dd:09:ce:ef:c6:ab:a9:19:b4:
                    5a:f1:ce:59:04:9f:5c:37:1c:d8:75:07:c8:37:1e:
                    2e:99:d6:55:89:e2:8d:9b:29:18:84:a6:c2:64:c7:
                    dc:5a:8f:d3:bd:fc:6e:85:0c:6b:b2:54:3c:9b:f5:
                    c6:63:55:86:a0:33:15:0d:09:99:b6:3c:31:f3:b7:
                    a4:ae:28:88:6a:42:dd:da:3b:af:e4:bc:5d:9f:c2:
                    16:e1:61:11:c4:02:af:50:78:1e:4f:0e:19:0b:e4:
                    4a:e2:58:c1:b5:07:a4:02:26:32:b7:19:12:2f:a5:
                    62:0d:8e:db:19:22:90:17:d3:0f:7e:8e:7e:79:46:
                    fa:b4:f3:d2:82:82:43:7c:55:72:21:b8:05:c1:53:
                    ec:f9:3a:bb:20:da:62:fa:9d:a1:a3:b8:e8:57:68:
                    1f:c8:0d:49:b4:61:fd:d7:a9:bc:f8:36:b7:a5:9d:
                    ce:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0E:19:C0:29:DA:0C:15:7F:1E:BE:13:9A:73:89:EE:87:0E:C3:FB
            X509v3 Authority Key Identifier:
                keyid:22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a1:0e:1d:3d:00:a1:d1:ae:82:00:d0:84:f6:46:c8:c1:70:
         8f:d8:52:78:7c:60:26:56:85:c5:5c:17:17:92:e3:0c:24:06:
         2f:c1:1e:1c:36:80:4d:a1:bf:db:f5:4a:26:f1:92:02:7d:a9:
         3d:40:d6:76:c9:bf:9f:8a:e8:96:29:e5:d2:2c:c9:82:64:90:
         f8:30:05:a3:38:2a:67:e4:7f:9f:b7:c1:ce:44:46:9e:db:64:
         a4:c5:6f:84:07:ed:f2:e7:d4:1c:2e:9f:4a:fc:83:a4:a4:00:
         a1:55:d9:42:a3:7b:c4:f6:02:d7:20:10:6f:e7:9a:94:f5:e9:
         71:61:60:34:a0:50:4e:b1:d4:4d:6c:8c:16:49:7a:a0:f7:b3:
         af:21:ec:1e:d9:bc:71:62:93:be:68:8e:37:a8:f5:a9:1d:02:
         31:e7:d1:77:15:22:18:ed:cc:b1:b1:ef:39:ae:a6:7c:51:88:
         63:38:1f:c7:14:e6:92:82:93:2e:25:e5:19:63:60:9b:e1:56:
         fc:63:aa:a2:5d:2e:58:1c:8c:36:ae:8b:68:48:10:0d:80:9f:
         67:86:66:f9:be:f5:f7:3d:a8:74:f0:aa:33:e4:36:7a:36:ed:
         9f:82:1a:ae:4b:14:fb:6d:1b:ce:d9:58:42:1a:64:f2:d4:80:
         df:4a:74:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:34 2026 by rpki-client