Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft
File:                     6tKydVDbcXQNXPh2q1QLuGtfKjg.mft (raw, json)
Hash identifier:          3ThJ5tqb7XaNYFYZnII8lH3Lb9W8Gbny6whlzY6fdVE=
Subject key identifier:   F4:0B:C4:F5:E3:7E:48:60:09:FB:29:E7:73:85:0A:B6:2B:3E:27:CD
Authority key identifier: EA:D2:B2:75:50:DB:71:74:0D:5C:F8:76:AB:54:0B:B8:6B:5F:2A:38
Certificate issuer:       /CN=A913CFCF/serialNumber=EAD2B27550DB71740D5CF876AB540BB86B5F2A38
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tKydVDbcXQNXPh2q1QLuGtfKjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft
Manifest number:          36
Signing time:             Mon 11 May 2026 08:50:26 +0000
Manifest this update:     Mon 11 May 2026 08:50:25 +0000
Manifest next update:     Mon 18 May 2026 08:50:25 +0000
Files and hashes:         1: 6tKydVDbcXQNXPh2q1QLuGtfKjg.crl (hash: G1lcafZZXyCD3c1A/LXccs80QKTi5Q5u/rRv2AtrHCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.crl
                          rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tKydVDbcXQNXPh2q1QLuGtfKjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CFCF, serialNumber=EAD2B27550DB71740D5CF876AB540BB86B5F2A38
        Validity
            Not Before: May 11 08:50:25 2026 GMT
            Not After : May 18 08:50:25 2026 GMT
        Subject: CN=6a019852-54c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:79:b5:07:c8:36:9e:7e:7a:e2:0c:7d:96:8c:
                    9c:60:6b:2d:ab:3a:0b:0d:9a:8a:66:92:91:76:df:
                    cc:a8:f1:b3:84:dd:ac:02:b6:8b:7b:89:7c:6d:01:
                    c1:72:1a:c4:73:ea:75:1c:2c:c8:63:2d:ec:e5:36:
                    ec:30:df:65:bc:41:cd:c0:bb:61:bc:a4:6b:8a:b0:
                    82:78:28:a3:1d:f2:35:3d:46:6e:ce:73:fe:e6:3c:
                    1b:ad:05:c5:ad:57:b1:6f:f0:99:e5:1e:1a:09:31:
                    a6:1d:9b:80:ee:3c:18:17:12:77:7f:0c:43:1e:64:
                    a0:73:79:f6:6f:ce:96:4b:f4:f4:19:c0:91:a5:0d:
                    a4:25:a2:62:99:30:97:a4:3d:87:62:24:9b:d0:d0:
                    44:c8:b0:88:6e:ac:bb:3f:65:55:63:2f:08:ae:0d:
                    44:83:dd:19:3b:ae:b5:02:e6:71:e3:69:79:18:ed:
                    73:b5:10:b0:7d:1f:6a:eb:d5:4a:2b:ed:91:b2:ed:
                    72:22:ae:06:ca:c4:65:59:7d:4b:8b:18:2a:e6:5d:
                    a6:f2:c0:a6:e2:37:3a:60:89:17:64:e9:41:c7:20:
                    47:59:89:8d:fb:9f:01:9c:05:03:59:45:cf:30:5e:
                    c7:0b:b2:02:fc:c5:5c:d0:ba:b0:e3:4b:bb:e2:70:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0B:C4:F5:E3:7E:48:60:09:FB:29:E7:73:85:0A:B6:2B:3E:27:CD
            X509v3 Authority Key Identifier:
                keyid:EA:D2:B2:75:50:DB:71:74:0D:5C:F8:76:AB:54:0B:B8:6B:5F:2A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tKydVDbcXQNXPh2q1QLuGtfKjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6e:8d:98:55:89:3c:7a:d7:2e:82:c9:45:c0:ce:21:eb:eb:
         01:4b:4d:99:9f:d1:71:a3:76:ef:9a:4e:28:1c:10:83:48:f5:
         7f:42:90:18:8d:c1:69:90:78:e2:37:bb:c0:3a:60:43:57:b1:
         f4:16:08:0a:22:21:02:7b:11:41:10:6f:7c:3e:dd:c3:e6:9e:
         e7:09:99:2a:79:6d:89:c0:bb:df:41:67:3f:bf:2c:5e:dc:a5:
         ed:dd:f4:c3:98:16:b7:63:fe:56:69:c8:fc:31:26:4a:c5:b3:
         50:d6:eb:3e:78:05:53:47:9b:1b:3a:e5:a5:7c:9d:1b:db:ba:
         e3:ee:83:93:6d:db:43:07:6d:99:3f:ce:df:32:84:14:d5:95:
         16:46:eb:81:86:50:e7:44:e6:3e:34:2e:85:c2:0a:a3:74:3e:
         35:f5:cb:74:46:57:cd:9f:9c:e3:79:61:ba:9c:ed:f5:4d:d0:
         11:f9:32:99:dd:93:67:0a:a0:4d:a3:bb:84:e1:a4:15:86:46:
         6c:81:95:0e:88:e6:fa:15:a4:a3:04:54:48:24:21:21:f1:b7:
         6b:5f:c8:55:26:db:8d:26:ed:4b:dc:fb:06:5a:bc:67:83:51:
         cc:96:24:0e:d6:1f:91:51:2b:b7:d7:74:4f:ff:b7:1d:aa:3d:
         95:8d:bb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:35:11 2026 by rpki-client