Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
File:                     ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft (raw, json)
Hash identifier:          96ed5Z8iGbnr0GIuE+qPQbQf8n7gg2fFQUIJGN2AgSg=
Subject key identifier:   28:D8:AC:37:97:6B:A9:8B:9A:24:65:4F:B7:F0:9A:AA:62:E2:1E:90
Authority key identifier: 8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54
Certificate issuer:       /CN=A9167671/serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
Manifest number:          3F
Signing time:             Tue 03 Mar 2026 07:58:07 +0000
Manifest this update:     Tue 03 Mar 2026 07:58:07 +0000
Manifest next update:     Tue 10 Mar 2026 07:58:07 +0000
Files and hashes:         1: ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl (hash: 6N7fReUM0vggHtc8f7iY7qh+HyhqP8tsFsdc5oLGIl8=)
                          2: 42AD4128C0FD11F0883D987DC4F9AE02.roa (hash: vGDLBHhQ2uCZ7yDty8cYd4H0mY/09AkesOUGu4E2fks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl
                          rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167671, serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
        Validity
            Not Before: Mar  3 07:58:07 2026 GMT
            Not After : Mar 10 07:58:07 2026 GMT
        Subject: CN=69a6948f-3a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:32:82:e9:11:5e:ab:dd:8a:e6:2f:bd:96:
                    01:ab:dd:e9:ce:e0:06:4b:02:87:cb:1a:3e:5c:4f:
                    4a:e7:21:8e:ce:f7:cc:a5:14:c7:98:b2:a4:56:ea:
                    a1:5f:3a:a7:b6:de:bb:a4:bb:90:8c:7a:58:3f:33:
                    39:5a:b0:89:f5:00:46:bd:8d:61:63:86:89:6f:9e:
                    4e:b8:a6:7a:4f:f9:88:ba:1e:53:77:0b:37:7f:a5:
                    fe:00:f5:24:fb:6d:43:bc:7b:15:41:aa:4f:c0:41:
                    98:97:83:f8:ea:14:85:dc:55:9c:7f:da:b0:66:f7:
                    a3:0b:37:ee:0d:97:9e:2d:53:44:ef:09:d9:3a:8b:
                    29:45:d5:2d:e0:e6:31:54:1e:06:35:ef:10:04:eb:
                    c2:89:79:80:98:2a:f8:8a:2c:47:d3:d2:f4:b6:5c:
                    c0:94:08:4d:4e:92:d1:a5:dc:49:ef:39:d7:27:49:
                    45:b4:54:2e:38:e8:09:29:c8:c3:a8:75:88:17:a8:
                    71:dc:86:54:50:2e:8b:81:65:5f:20:3f:59:5f:47:
                    1e:b9:87:c2:ca:27:19:16:c8:3e:06:fb:6d:f9:b2:
                    6e:74:61:ca:25:7a:ad:c9:bc:4e:8c:3b:ef:01:88:
                    d9:84:5a:50:c8:6c:14:ca:40:36:8a:cc:b1:b0:5f:
                    40:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D8:AC:37:97:6B:A9:8B:9A:24:65:4F:B7:F0:9A:AA:62:E2:1E:90
            X509v3 Authority Key Identifier:
                keyid:8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2b:fe:fd:7a:14:eb:8d:65:da:25:5f:a8:31:a1:e4:b9:68:
         d2:9d:f1:6e:e9:f7:45:70:37:f3:90:df:55:12:a9:89:1b:3e:
         79:df:10:35:d2:16:24:a4:fd:b2:31:53:d2:0e:d5:9f:88:18:
         f3:6f:2d:92:1a:38:09:32:0a:64:da:da:c6:d9:aa:46:04:e1:
         6a:48:9b:f1:ff:f2:12:47:a6:cf:5c:4c:b0:ca:be:4c:ce:5c:
         23:dd:ff:d8:d4:0f:4d:00:79:7f:35:db:5c:e0:4a:62:50:7c:
         48:46:bc:82:87:96:35:dc:c0:bd:50:38:d7:14:24:f6:9b:a5:
         01:05:bc:03:a6:9c:3c:9f:38:98:a1:32:3f:52:8d:a7:97:40:
         75:4a:0a:f2:20:95:ef:39:e6:99:14:2c:dd:52:5c:07:43:ae:
         5d:94:96:be:f5:f5:ef:3e:b3:8b:66:27:d3:13:b2:89:d4:51:
         2e:96:ba:66:af:7e:9c:41:1c:2b:96:7f:4d:5e:7e:86:d8:cf:
         f4:53:40:33:b0:88:01:66:c8:a5:cc:dc:8a:09:db:5f:df:ef:
         22:05:b5:6c:17:65:c4:67:34:93:b2:63:db:36:62:cb:53:5c:
         40:a6:f8:88:85:0a:e3:4a:db:b1:c3:98:b6:d3:db:15:a1:37:
         c8:28:3c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:36:28 2026 by rpki-client