Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft
File:                     6tKydVDbcXQNXPh2q1QLuGtfKjg.mft (raw, json)
Hash identifier:          krmWEjOo67znwrKKIksvGp/CqEJZRLTBZFExFx3UvK0=
Subject key identifier:   30:ED:D3:BC:A8:1E:A5:42:DF:A7:0A:87:0B:CE:0C:A0:9D:CB:68:FC
Authority key identifier: EA:D2:B2:75:50:DB:71:74:0D:5C:F8:76:AB:54:0B:B8:6B:5F:2A:38
Certificate issuer:       /CN=A913CFCF/serialNumber=EAD2B27550DB71740D5CF876AB540BB86B5F2A38
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tKydVDbcXQNXPh2q1QLuGtfKjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft
Manifest number:          1E
Signing time:             Wed 25 Mar 2026 08:08:09 +0000
Manifest this update:     Wed 25 Mar 2026 08:08:09 +0000
Manifest next update:     Wed 01 Apr 2026 08:08:09 +0000
Files and hashes:         1: 6tKydVDbcXQNXPh2q1QLuGtfKjg.crl (hash: Nsmwmocq1+o+DsGcrxkGsKC8IoVH+1TXyqydmTxXNU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.crl
                          rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tKydVDbcXQNXPh2q1QLuGtfKjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CFCF, serialNumber=EAD2B27550DB71740D5CF876AB540BB86B5F2A38
        Validity
            Not Before: Mar 25 08:08:09 2026 GMT
            Not After : Apr  1 08:08:09 2026 GMT
        Subject: CN=69c397e9-453c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:8e:89:dc:6f:38:bb:c9:f4:3c:07:81:90:
                    b3:89:3e:bf:4e:81:e5:3a:2e:82:dd:87:72:9d:bf:
                    25:38:4d:fc:21:58:0b:6c:0b:e4:91:4f:95:e4:7a:
                    f0:cb:c4:14:61:40:7d:8d:ce:cf:e0:e6:70:28:97:
                    2d:d7:c1:69:d5:e1:8d:a1:b6:b9:4c:2c:17:4f:30:
                    24:6f:12:b9:88:c1:40:de:4b:95:cd:48:8c:ab:af:
                    fd:6f:1f:4f:40:96:9a:ac:a9:75:84:6f:ef:e1:46:
                    af:42:56:b6:53:df:fa:cf:27:72:f6:84:36:b9:fd:
                    ac:d3:7f:af:13:30:4a:0c:8d:70:f3:d9:d8:19:15:
                    c9:ab:66:ad:36:52:3b:e8:f4:08:64:f3:d2:fd:d6:
                    0f:9d:c4:f5:c6:0e:3a:d1:86:e7:8f:bc:57:5f:3d:
                    87:8d:9b:2f:10:e6:3d:fd:60:e3:1f:23:de:ca:e6:
                    ec:f2:fa:fa:ac:56:01:c0:21:74:6c:7e:a9:8d:70:
                    d2:ad:4f:dd:eb:df:1f:bd:9b:42:f9:76:a8:df:6c:
                    d4:6b:66:fd:09:e9:9b:d6:07:30:e7:9e:5b:e6:34:
                    46:53:24:2c:61:e5:42:27:5b:e1:58:8a:76:e3:c5:
                    60:b7:d5:77:07:87:07:38:d2:99:0c:9e:d9:04:d8:
                    e3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:ED:D3:BC:A8:1E:A5:42:DF:A7:0A:87:0B:CE:0C:A0:9D:CB:68:FC
            X509v3 Authority Key Identifier:
                keyid:EA:D2:B2:75:50:DB:71:74:0D:5C:F8:76:AB:54:0B:B8:6B:5F:2A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tKydVDbcXQNXPh2q1QLuGtfKjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CFCF/D2EA5284029411F191E60C74363D8C67/6tKydVDbcXQNXPh2q1QLuGtfKjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:33:67:6f:af:dd:f9:75:f3:2e:d4:9a:55:de:34:e4:66:74:
         05:4c:bf:e3:ae:99:11:6b:ed:53:cb:8b:aa:e0:a9:6b:f9:d1:
         03:37:12:96:54:04:02:9d:3d:dc:25:49:d1:e1:0b:0a:94:f0:
         49:f2:c5:ee:9d:d4:49:54:31:20:8f:77:38:78:63:10:7c:45:
         d4:18:b8:b1:a5:95:ef:da:48:a2:f2:d5:92:d9:2a:b6:e5:05:
         e7:73:25:2a:24:78:cf:97:3e:d7:78:66:9d:6e:0e:6b:48:c5:
         2b:72:d2:e5:ce:7a:b5:2c:ec:ef:cc:8f:7b:fc:53:2b:53:a3:
         a8:10:36:eb:a0:e2:80:87:3a:91:27:ec:fb:cc:ed:fc:f1:2f:
         5f:2d:74:b0:44:3f:5b:e6:1e:44:cd:e6:16:d3:3b:9e:c7:0a:
         74:0e:6f:87:18:bd:8e:bc:ec:62:1c:49:46:17:6a:eb:fd:c9:
         ff:bd:3d:cc:3f:d5:5b:f0:76:ac:8e:86:95:60:93:8f:8e:be:
         da:0a:36:4c:2b:f3:54:59:fa:c1:3f:bd:c1:fd:2a:dd:16:85:
         7d:9c:b5:e7:45:f9:6b:d3:08:c3:0a:cd:7f:58:ea:36:56:9b:
         0e:d0:9d:46:a1:20:f5:c5:91:5c:df:d9:0e:c7:95:b4:3a:ad:
         6e:71:f0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:22 2026 by rpki-client