Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
File:                     ilgWVckip6USHgD7ekJ-AZrHMHs.mft (raw, json)
Hash identifier:          8Yrhk6VWRw+n1NzZMqvGr5y+16QOwmO71YZ/qmLcsJ8=
Subject key identifier:   8C:63:75:13:F8:65:89:E2:66:95:1C:F8:D4:B9:60:B4:1E:95:35:39
Authority key identifier: 8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B
Certificate issuer:       /CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B
Certificate serial:       01BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
Manifest number:          01B6
Signing time:             Wed 05 Nov 2025 03:14:47 +0000
Manifest this update:     Wed 05 Nov 2025 03:14:47 +0000
Manifest next update:     Wed 12 Nov 2025 03:14:47 +0000
Files and hashes:         1: ilgWVckip6USHgD7ekJ-AZrHMHs.crl (hash: qbyYIR6aX05cR4gijyDEdAC6EHaw7v3O4oj1mShsqQ4=)
                          2: 85CE44A4BC1111EE9E42EB2DC4F9AE02.roa (hash: AfyKET21CuVm+C0lZplWyO7fvqiYNNsqsgPynM9Y4+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl
                          rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154376, serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B
        Validity
            Not Before: Nov  5 03:14:47 2025 GMT
            Not After : Nov 12 03:14:47 2025 GMT
        Subject: CN=690ac127-6652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3d:63:01:c9:04:f2:09:77:37:60:e0:10:79:
                    91:07:04:67:e0:37:36:27:fc:34:8b:d2:67:f9:c7:
                    3d:cb:c9:6e:00:15:90:05:6c:f0:7c:16:fa:87:1e:
                    a9:f5:67:a4:21:9a:46:94:99:90:c2:a0:dc:ea:9b:
                    7d:ef:11:09:09:f5:28:49:1f:c9:c4:b7:43:6b:cc:
                    6c:61:ae:01:74:78:1d:69:fd:5c:68:33:d5:2b:a8:
                    e9:43:d6:73:ef:9e:2d:80:e5:1c:79:5e:c1:b4:4d:
                    ad:c3:58:42:53:a6:f3:33:70:86:15:3e:78:3f:db:
                    94:81:5c:01:7a:53:ce:e8:3d:9a:30:45:ec:17:80:
                    d5:8c:ed:5e:ea:62:7c:c8:fd:cc:91:0e:9f:57:65:
                    60:fa:ac:0b:80:0a:84:63:81:7b:b8:45:d9:85:c6:
                    e0:12:1b:97:f4:34:47:13:84:8e:61:b3:b5:d0:98:
                    02:b4:ca:9f:2f:3e:3c:84:8b:83:eb:5a:c0:9b:f2:
                    f7:c7:fc:89:24:0f:95:f3:a9:7a:5d:35:64:db:ee:
                    df:84:a9:09:87:46:c6:b9:34:e1:06:7c:69:de:f8:
                    86:73:0b:e0:99:56:9f:37:88:a7:b6:de:95:38:6b:
                    7c:fd:e8:97:23:71:e1:e3:52:2b:4a:c6:6a:c1:f2:
                    da:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:63:75:13:F8:65:89:E2:66:95:1C:F8:D4:B9:60:B4:1E:95:35:39
            X509v3 Authority Key Identifier:
                keyid:8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a2:5e:b3:cd:7a:9d:e0:d4:d3:9e:d9:91:8b:04:5e:97:1b:
         4e:e0:e7:64:13:f7:57:a4:69:07:a4:bb:9a:92:2b:82:ae:02:
         f6:fb:6b:cc:6c:17:45:30:f8:6f:82:a4:99:6a:1e:a3:fd:6c:
         e8:de:0b:d9:52:1a:25:a9:bc:4d:5e:3a:e9:bf:72:d2:90:fa:
         6f:cc:18:8c:f8:04:58:3b:bd:81:ba:a0:55:ed:bc:db:c9:b9:
         a3:53:7c:60:d0:dc:ff:6d:88:3d:92:15:7f:43:44:db:99:c0:
         42:6b:e8:1f:9b:c6:d9:bf:d9:38:23:db:2c:6a:5d:51:23:00:
         ad:cb:a0:c0:fe:e3:9e:f8:3e:24:8a:de:4d:4f:19:e8:a0:34:
         5c:16:ff:3d:52:39:b4:7e:da:28:df:17:b6:6f:bf:bd:50:40:
         84:ba:45:93:31:6d:b0:f7:8a:b8:4a:0a:9a:cf:99:8c:b0:8e:
         d0:41:55:5c:8d:be:b7:38:c3:cf:32:f0:37:74:9e:1e:aa:ce:
         3a:23:57:a9:51:d6:36:b2:c8:2f:e9:3c:00:77:15:c9:2c:d4:
         c7:5b:0e:5d:ec:c0:9b:2d:0f:cb:00:3b:76:5e:d5:5f:fd:5e:
         53:7c:91:91:5b:50:3f:77:18:32:a0:0a:ec:85:fb:c9:e3:d0:
         fa:92:b7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:26:21 2025 by rpki-client