Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
File:                     IlPgspHkNQSp2iaP28xaDjF-bME.mft (raw, json)
Hash identifier:          LynyG0AFMOewwwGegP/LRi6jz4eBTbiO3lYfsc88KSI=
Subject key identifier:   FC:44:45:23:15:40:A0:4F:7C:D5:B6:F0:74:42:C6:26:9C:9E:C3:1B
Authority key identifier: 22:53:E0:B2:91:E4:35:04:A9:DA:26:8F:DB:CC:5A:0E:31:7E:6C:C1
Certificate issuer:       /CN=A91D1FD2/serialNumber=2253E0B291E43504A9DA268FDBCC5A0E317E6CC1
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
Manifest number:          56
Signing time:             Thu 29 Oct 2026 09:00:22 +0000
Manifest this update:     Thu 29 Oct 2026 09:00:22 +0000
Manifest next update:     Thu 05 Nov 2026 09:00:22 +0000
Files and hashes:         1: IlPgspHkNQSp2iaP28xaDjF-bME.crl (hash: iitS91YyHrBc/slOdt3vyR+H7zFZot4lYA0b0/KBh0o=)
                          2: A213FF8E535211F184FC032898833773.roa (hash: /sb5ONI+bRGD73MyIUMkM893RApQNOS9VkRgEjeAKps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.crl
                          rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 09:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1FD2, serialNumber=2253E0B291E43504A9DA268FDBCC5A0E317E6CC1
        Validity
            Not Before: Oct 29 09:00:22 2026 GMT
            Not After : Nov  5 09:00:22 2026 GMT
        Subject: CN=6ae30b26-465a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c7:52:1d:1a:34:c8:8e:05:a0:e3:93:09:f9:
                    dc:9b:de:4a:97:64:c1:98:63:c1:a2:75:94:2a:70:
                    b6:91:d7:7a:c1:cc:c3:21:f7:f1:1d:d1:c4:39:fa:
                    a8:f8:09:51:44:39:be:0e:e8:b4:c0:03:56:21:df:
                    22:6f:0d:81:08:46:14:b4:a6:bf:12:aa:19:29:c8:
                    21:ae:de:f2:da:06:25:e2:1f:ca:8b:1f:e2:e6:04:
                    df:06:26:e6:38:8e:e9:09:e0:c0:cf:8d:11:77:22:
                    0d:be:bd:bf:a3:d7:19:a4:5e:85:a1:d6:7f:20:74:
                    1e:f9:af:96:16:57:33:55:6a:7d:a3:43:f0:c5:8f:
                    9c:be:d9:99:c0:29:37:ad:51:b1:a9:44:e8:68:38:
                    35:d1:6c:ae:f2:5c:2f:48:09:c7:07:7b:73:c6:3d:
                    a9:e3:70:b3:dc:cb:1b:e0:6d:56:bd:89:8d:73:f1:
                    6f:22:37:df:fd:06:65:50:6e:13:13:2f:05:9f:27:
                    2b:c9:16:d9:34:e9:f5:9f:97:2f:f6:0b:ce:f9:0f:
                    a4:6b:75:36:fa:ab:d1:58:9b:d9:40:f8:21:1a:8b:
                    54:f1:40:8f:2e:67:ca:df:9d:5e:ef:e7:f3:77:46:
                    9a:08:70:60:20:e4:d4:95:fa:26:2d:4c:c1:57:65:
                    78:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:44:45:23:15:40:A0:4F:7C:D5:B6:F0:74:42:C6:26:9C:9E:C3:1B
            X509v3 Authority Key Identifier:
                keyid:22:53:E0:B2:91:E4:35:04:A9:DA:26:8F:DB:CC:5A:0E:31:7E:6C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlPgspHkNQSp2iaP28xaDjF-bME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1FD2/03A36F32534E11F188DF685995833773/IlPgspHkNQSp2iaP28xaDjF-bME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f7:5a:ab:7e:6f:02:0d:10:c5:7f:23:e3:b5:41:ba:65:eb:
         42:55:db:75:a8:b9:ab:3e:39:f0:b3:ce:86:31:26:07:11:48:
         22:a5:12:d3:cd:1b:f3:d5:44:76:46:c9:8f:43:9a:a8:49:c3:
         d2:9e:39:1d:bf:0b:36:95:8e:ae:97:68:d6:ca:90:6f:47:bb:
         a6:6b:5f:90:e2:5e:34:e2:98:14:e9:69:66:f4:ef:c7:21:65:
         cb:f7:01:ee:4a:24:98:45:0a:e9:41:8b:1a:28:cb:00:cd:b2:
         0b:4b:25:63:a3:6a:ca:a8:cf:94:ed:63:e2:06:1f:6d:09:69:
         15:a3:d4:b6:96:3d:13:e4:fd:ee:e4:16:fb:0c:a7:47:a6:bf:
         34:6d:c1:60:91:5b:19:3a:51:37:e0:c7:ed:54:0b:b7:07:94:
         ed:61:94:f2:5b:c8:58:95:3b:59:80:31:5e:21:d8:c5:02:a7:
         bd:1e:e7:a7:bc:1b:a5:9b:b3:10:38:7f:55:42:9e:9b:bd:68:
         03:5e:97:46:99:a7:af:dc:30:38:94:db:2a:1d:58:c9:18:80:
         38:73:9b:8d:94:d2:3e:b2:15:60:34:e5:6d:67:33:b6:bd:fd:
         c4:40:88:1d:dd:88:8f:0c:40:54:ec:5d:7e:59:55:3d:d4:dc:
         86:ed:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:09:23 2026 by rpki-client