Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
File:                     ilgWVckip6USHgD7ekJ-AZrHMHs.mft (raw, json)
Hash identifier:          FAN3mAl5AF79IOaxCF4Y8YOm6JsEb/Cavd+wgvliJx0=
Subject key identifier:   26:F3:F1:08:8C:D9:F0:87:3C:5F:EA:08:73:9B:A7:05:87:FB:9C:A2
Authority key identifier: 8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B
Certificate issuer:       /CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B
Certificate serial:       0251
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
Manifest number:          0249
Signing time:             Wed 19 Aug 2026 02:57:58 +0000
Manifest this update:     Wed 19 Aug 2026 02:57:58 +0000
Manifest next update:     Wed 26 Aug 2026 02:57:58 +0000
Files and hashes:         1: ilgWVckip6USHgD7ekJ-AZrHMHs.crl (hash: K2xetMM/lRnUCtkCkLwsjzx/LT6Re1aYyNq3Bhk5mog=)
                          2: 85CE44A4BC1111EE9E42EB2DC4F9AE02.roa (hash: ykWOYJXvUHCK/9sjtZuf6RaL78xXi90Fjs/DYiu/rW4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl
                          rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154376, serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B
        Validity
            Not Before: Aug 19 02:57:58 2026 GMT
            Not After : Aug 26 02:57:58 2026 GMT
        Subject: CN=6a851bb6-5d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:45:f6:d7:16:71:03:0e:7c:6a:ed:89:7d:12:
                    83:cc:46:76:0d:d4:47:57:92:75:26:b2:f3:2f:38:
                    4e:ee:a2:4e:1c:8d:b2:a4:cc:51:0b:92:f0:43:b7:
                    7e:ca:04:17:bb:48:45:0e:d1:a9:46:a6:82:c4:ea:
                    20:a1:fa:08:52:d5:5f:04:05:0c:39:8e:1b:0e:8a:
                    72:6b:1b:57:40:e3:dc:70:8d:5a:6c:26:74:49:e5:
                    a4:b4:89:d2:ad:ce:84:79:5c:3a:26:0d:cb:a3:2e:
                    36:7f:ed:d0:41:42:3e:0a:5c:7c:2b:d4:9f:b0:43:
                    16:d3:b8:97:a6:2f:bd:f6:fb:88:d5:7f:9d:c8:7c:
                    e0:2f:c3:9a:88:90:f5:82:3c:1a:26:29:7c:a5:b1:
                    d6:f2:c8:53:af:e6:44:46:b4:9a:6b:01:c1:d1:64:
                    47:52:a6:e0:42:f3:b0:f7:ac:e2:a8:02:6d:4b:99:
                    df:fc:82:27:4c:08:42:16:2e:90:e3:76:a3:e1:35:
                    a2:73:51:72:6b:3e:a3:53:73:a7:5e:f6:3f:86:2e:
                    ee:de:18:4d:16:42:a7:76:72:5a:a3:43:8e:32:1b:
                    62:6e:ad:d0:cc:60:37:cd:2f:be:43:b0:be:b4:00:
                    d5:ca:08:53:40:aa:40:cc:aa:99:a6:e9:37:08:dd:
                    a2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F3:F1:08:8C:D9:F0:87:3C:5F:EA:08:73:9B:A7:05:87:FB:9C:A2
            X509v3 Authority Key Identifier:
                keyid:8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:aa:a1:18:bb:c8:ae:b6:c7:a3:65:8a:d2:03:cb:a7:5d:e6:
         1e:94:c6:44:0d:aa:4a:10:6f:78:c9:ab:ee:c1:a2:43:e9:27:
         bd:4a:63:ba:5e:b2:9c:3e:8d:24:c5:13:38:9d:f4:67:ce:e2:
         97:63:08:6c:97:05:66:c4:8c:32:c3:97:3a:96:80:de:82:ee:
         f6:01:ca:28:7c:a5:df:fa:ec:5a:d0:64:09:86:3a:d9:2f:94:
         51:d5:fd:17:39:0f:1f:83:5a:4e:9f:8d:33:da:d3:01:cf:5e:
         07:33:02:ba:d8:fa:51:d3:4e:2f:1a:1a:51:34:e1:b1:15:ca:
         92:f0:24:88:c8:6e:3e:9d:e8:a8:fa:ac:b9:61:8e:ea:b3:f1:
         1d:dc:6d:91:31:76:5b:ce:62:ce:1d:df:67:45:79:15:c9:39:
         60:3c:bb:6b:9d:4d:ed:da:ff:75:c8:66:6f:e6:d6:7b:68:24:
         d7:26:60:18:cb:50:6f:a3:98:99:b9:3b:64:6d:08:48:34:c9:
         bc:86:6e:3f:81:fc:f6:e1:1f:1b:45:1e:3b:29:67:03:4f:d7:
         ab:49:73:0c:3f:0e:60:02:f6:cd:3f:9a:97:87:5e:3c:53:a5:
         dd:f0:77:4c:b5:32:54:9e:ac:06:40:43:60:82:dc:be:9f:ff:
         55:31:a7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:56 2026 by rpki-client