Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
File:                     Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft (raw, json)
Hash identifier:          6lSnQvi/YdEzIi3CvhZb//sr6AkfrAG0iBZQ9lBB/HM=
Subject key identifier:   48:AF:EF:BA:A3:1A:41:61:C0:07:5E:1A:9C:CB:69:E5:30:02:FE:1F
Authority key identifier: 22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39
Certificate issuer:       /CN=A9197B7B/serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
Manifest number:          8C
Signing time:             Fri 23 Oct 2026 08:08:20 +0000
Manifest this update:     Fri 23 Oct 2026 08:08:19 +0000
Manifest next update:     Fri 30 Oct 2026 08:08:19 +0000
Files and hashes:         1: Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl (hash: XvgrvzY6NSEvs+MpK1CHO89gtO9eZTniE/Udwts64nA=)
                          2: 153BBC22FBEC11F094C0A6516D6F56BC.roa (hash: Fa+JKx4M6Yd97D4JU6xtHSXgVRciDGQpK7A4XgrvaWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl
                          rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 08:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197B7B, serialNumber=2256B82B0A6EDC6268A3CC90ACC05C74F114CE39
        Validity
            Not Before: Oct 23 08:08:19 2026 GMT
            Not After : Oct 30 08:08:19 2026 GMT
        Subject: CN=6adb15f4-1769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a5:9e:56:a1:f3:fa:90:ae:be:ff:09:e9:5d:
                    11:01:5a:25:73:fe:96:4e:8f:3c:2d:5b:87:e6:76:
                    85:0d:c4:8d:f9:cc:43:44:16:cf:9f:15:48:a7:ee:
                    2d:1a:d0:d9:b4:b9:7a:bd:c8:83:e1:72:45:7c:c8:
                    08:7f:d3:57:7d:93:71:5a:4d:82:04:f1:ca:7c:aa:
                    91:87:a2:f2:69:42:d3:f3:64:82:7b:4a:0b:9f:2f:
                    98:71:3a:17:5e:bf:04:e4:a2:bc:a3:f4:a3:22:d9:
                    ea:1f:9d:ed:a2:f6:78:a4:42:3c:76:89:6e:01:24:
                    2b:14:c0:e6:ce:f2:91:36:5a:f5:cd:a6:94:52:d8:
                    83:e1:71:c7:61:b3:49:df:b0:fe:eb:47:1e:29:9b:
                    4f:30:5f:0c:a8:82:4d:3b:56:3f:98:e9:7d:8c:29:
                    a0:92:4f:02:a9:9a:c2:13:c1:10:ac:f3:3b:3f:d2:
                    12:d8:75:9a:77:fd:a9:ba:6e:d8:7b:e8:05:e4:01:
                    72:38:fc:a3:d7:36:bf:41:5d:52:f0:35:65:94:99:
                    52:5b:61:ba:69:d1:0f:17:ee:01:07:11:a2:32:01:
                    09:4a:4c:73:f2:d4:90:f8:96:cb:b6:6d:5a:77:cc:
                    8f:42:81:df:70:9b:a7:71:e3:c4:fa:c4:9e:f8:70:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AF:EF:BA:A3:1A:41:61:C0:07:5E:1A:9C:CB:69:E5:30:02:FE:1F
            X509v3 Authority Key Identifier:
                keyid:22:56:B8:2B:0A:6E:DC:62:68:A3:CC:90:AC:C0:5C:74:F1:14:CE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197B7B/4CB3A384FBE911F0912FE61C6D6F56BC/Ila4Kwpu3GJoo8yQrMBcdPEUzjk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:23:d8:b7:c3:ed:24:ad:59:7a:f3:96:af:b8:80:1a:58:85:
         63:18:51:ce:ec:b7:ac:c7:22:87:70:66:97:c7:f2:bb:f0:8f:
         7e:1b:17:ee:22:29:80:23:16:58:b0:33:e4:17:ca:6d:f4:04:
         2f:06:1e:fb:84:78:8b:be:59:1a:67:28:94:8e:80:9a:e5:16:
         72:95:c1:d0:c4:a8:a1:8f:53:e9:3a:66:78:5c:4a:05:44:75:
         b9:7b:e2:59:a7:95:be:57:ee:f7:a3:16:5d:77:26:1e:02:0c:
         94:ea:94:5d:3d:10:ce:b6:0b:85:97:58:ec:ae:52:c4:86:eb:
         82:06:f6:58:6e:15:b5:97:cd:ff:b6:0b:d5:2b:bb:06:92:19:
         39:6d:1c:a0:88:70:12:e4:ef:95:9a:51:42:e2:ca:2c:a7:07:
         80:12:49:f9:c8:3c:b2:c9:d0:70:f0:c4:e0:d9:ef:6b:9e:77:
         bc:a5:b4:dd:5f:77:ad:ee:b4:73:bd:b5:00:18:82:37:b6:76:
         18:bd:ce:90:5b:1f:8f:20:86:08:55:65:60:4c:5e:16:be:4b:
         b1:67:d1:67:9c:fe:fa:a8:a2:7d:81:09:63:5a:f6:0d:2d:53:
         5c:c4:d3:d6:60:63:16:c1:bc:4f:d5:db:d2:b9:fb:f4:92:c8:
         e0:ea:2a:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTdCN0IxMTAvBgNVBAUTKDIyNTZCODJCMEE2RURDNjI2OEEzQ0M5MEFDQzA1Qzc0
RjExNENFMzkwHhcNMjYxMDIzMDgwODE5WhcNMjYxMDMwMDgwODE5WjAYMRYwFAYD
VQQDEw02YWRiMTVmNC0xNzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0KWeVqHz+pCuvv8J6V0RAVolc/6WTo88LVuH5naFDcSN+cxDRBbPnxVIp+4t
GtDZtLl6vciD4XJFfMgIf9NXfZNxWk2CBPHKfKqRh6LyaULT82SCe0oLny+YcToX
Xr8E5KK8o/SjItnqH53tovZ4pEI8doluASQrFMDmzvKRNlr1zaaUUtiD4XHHYbNJ
37D+60ceKZtPMF8MqIJNO1Y/mOl9jCmgkk8CqZrCE8EQrPM7P9IS2HWad/2pum7Y
e+gF5AFyOPyj1za/QV1S8DVllJlSW2G6adEPF+4BBxGiMgEJSkxz8tSQ+JbLtm1a
d8yPQoHfcJuncePE+sSe+HCHmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEiv77qj
GkFhwAdeGpzLaeUwAv4fMB8GA1UdIwQYMBaAFCJWuCsKbtxiaKPMkKzAXHTxFM45
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0I3Qi80Q0IzQTM4NEZC
RTkxMUYwOTEyRkU2MUM2RDZGNTZCQy9JbGE0S3dwdTNHSm9vOHlRck1CY2RQRVV6
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0lsYTRLd3B1M0dKb284eVFyTUJjZFBFVXpqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
N0I3Qi80Q0IzQTM4NEZCRTkxMUYwOTEyRkU2MUM2RDZGNTZCQy9JbGE0S3dwdTNH
Sm9vOHlRck1CY2RQRVV6amsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhyPYt8PtJK1ZevOWr7iAGliFYxhRzuy3rMcih3Bml8fyu/CPfhsX7iIpgCMW
WLAz5BfKbfQELwYe+4R4i75ZGmcolI6AmuUWcpXB0MSooY9T6TpmeFxKBUR1uXvi
WaeVvlfu96MWXXcmHgIMlOqUXT0QzrYLhZdY7K5SxIbrggb2WG4VtZfN/7YL1Su7
BpIZOW0coIhwEuTvlZpRQuLKLKcHgBJJ+cg8ssnQcPDE4Nnva553vKW03V93re60
c721ABiCN7Z2GL3OkFsfjyCGCFVlYExeFr5LsWfRZ5z++qiifYEJY1r2DS1TXMTT
1mBjFsG8T9Xb0rn79JLI4Ooq7A==
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:56:48 2026 by rpki-client