Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
File:                     ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft (raw, json)
Hash identifier:          YeZ20SQMup0PW0QGycV+WHlTWYbqnXlms+HEqSqZXhU=
Subject key identifier:   DD:78:92:53:20:C8:4D:47:A1:8C:A0:C8:DB:11:F7:39:EF:2F:EA:4B
Authority key identifier: 8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54
Certificate issuer:       /CN=A9167671/serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
Manifest number:          6D
Signing time:             Mon 01 Jun 2026 08:32:16 +0000
Manifest this update:     Mon 01 Jun 2026 08:32:16 +0000
Manifest next update:     Mon 08 Jun 2026 08:32:16 +0000
Files and hashes:         1: ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl (hash: MA9PksMvnSEqQwKBps5ysbB0Ab6vvvjn+PNpGbv/lfk=)
                          2: 42AD4128C0FD11F0883D987DC4F9AE02.roa (hash: vGDLBHhQ2uCZ7yDty8cYd4H0mY/09AkesOUGu4E2fks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl
                          rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167671, serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354
        Validity
            Not Before: Jun  1 08:32:16 2026 GMT
            Not After : Jun  8 08:32:16 2026 GMT
        Subject: CN=6a1d4390-1977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:47:9f:c9:3d:5d:ad:f7:4b:9c:11:6b:e7:
                    e1:6c:e0:f5:f2:fb:3d:8e:8c:3c:e3:3b:dc:97:5a:
                    56:58:64:5f:46:0d:06:90:94:d6:e0:48:d9:1e:31:
                    a7:05:0c:06:cc:d6:c4:41:da:43:6d:2f:dd:a9:47:
                    07:03:48:ef:6d:31:49:28:ca:26:39:6b:95:62:25:
                    07:cc:01:09:de:3b:7a:b9:57:1e:05:82:10:97:59:
                    d6:4d:13:fc:75:f1:9d:cb:1f:ad:98:4e:17:b7:e0:
                    33:fe:3c:4c:d5:5f:de:65:9e:1c:26:45:2a:e9:25:
                    f5:e3:b2:9c:3c:df:90:22:43:3c:23:b7:5d:d4:0f:
                    0d:61:6d:9e:10:48:98:f3:ea:c0:ac:cd:a7:55:8b:
                    de:86:2e:cc:05:90:97:94:23:be:7d:8f:f9:91:38:
                    8c:12:15:b2:ba:ed:61:92:ab:70:ee:9d:08:29:0c:
                    f4:22:c5:cb:1f:33:e1:ba:23:c9:1b:2c:38:4e:72:
                    37:ff:95:21:b4:46:86:4b:12:50:ee:6e:2e:34:62:
                    f7:e8:6e:f1:53:b3:f8:42:7b:3d:03:83:df:7b:e6:
                    74:3b:95:02:4d:d6:09:ed:88:b6:56:3a:e4:79:b5:
                    81:af:22:43:b2:ed:82:6e:d0:bf:c8:9d:c8:4e:1e:
                    6f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:78:92:53:20:C8:4D:47:A1:8C:A0:C8:DB:11:F7:39:EF:2F:EA:4B
            X509v3 Authority Key Identifier:
                keyid:8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:b9:a0:6c:86:1f:11:14:d5:75:03:85:e9:6a:5c:20:51:7f:
         f9:0c:bc:a8:58:32:7b:08:20:ce:13:a2:a0:1a:98:72:4a:7c:
         95:ce:28:b9:7c:a6:3b:c0:fc:d8:28:e2:40:28:6b:ea:2a:59:
         bf:ae:ae:73:7a:98:bc:2d:d6:cd:91:bb:0c:22:90:53:6b:ff:
         38:92:5e:1c:05:7f:ea:2e:6f:80:c8:72:f9:5b:dd:cd:4f:dc:
         bb:2d:66:79:60:6f:a5:d5:ee:2e:bc:e3:18:91:48:6c:66:6a:
         4c:21:d2:71:cb:b4:43:26:1e:f5:f9:d6:d5:fb:c0:69:bc:f2:
         6e:00:19:e9:41:64:0f:cb:74:eb:a0:76:56:eb:6c:cc:eb:80:
         73:e5:5e:71:38:e6:aa:71:25:3a:18:16:05:cd:a4:2d:f1:56:
         68:c0:32:aa:1a:74:07:0c:e7:fa:e7:2a:6d:34:27:cb:f2:e8:
         f1:e5:5e:6e:98:73:22:cb:49:16:7e:9f:ec:b2:aa:b6:0c:bd:
         cf:44:5c:06:42:62:f8:c5:91:ba:dc:b5:85:2e:90:1b:1f:66:
         62:f4:fd:b6:58:e0:1a:6b:31:2e:cf:56:31:d1:36:da:c3:e9:
         bc:2c:3e:0a:05:50:97:9f:ec:fc:52:46:c8:45:ca:57:bc:93:
         13:40:d7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:26 2026 by rpki-client