Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
File:                     rKBb-WKVthwuROndPExIxFm56Vw.mft (raw, json)
Hash identifier:          hARn9K6Ez0rE68+CfkZCO7hZmY20lSLwl0YbYV+e/VI=
Subject key identifier:   FE:1C:44:34:5E:2E:62:56:12:FE:61:7B:4C:70:99:66:1C:E4:AF:EF
Authority key identifier: AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C
Certificate issuer:       /CN=A91547EC/serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
Manifest number:          6A
Signing time:             Wed 25 Mar 2026 07:06:53 +0000
Manifest this update:     Wed 25 Mar 2026 07:06:53 +0000
Manifest next update:     Wed 01 Apr 2026 07:06:53 +0000
Files and hashes:         1: rKBb-WKVthwuROndPExIxFm56Vw.crl (hash: R9SoNIlQtbXU2AfKXZbxfZR/a2yYFVDgDJURgxhaKeE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl
                          rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91547EC, serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
        Validity
            Not Before: Mar 25 07:06:53 2026 GMT
            Not After : Apr  1 07:06:53 2026 GMT
        Subject: CN=69c3898d-1d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:d6:8e:64:4a:6c:28:81:e3:4e:b1:9f:49:
                    1e:a1:4c:46:9a:81:68:5c:c9:a1:5b:72:21:22:b8:
                    30:5d:5f:6a:6f:14:6c:d7:0f:9d:fb:e0:cc:a0:37:
                    1f:3c:26:89:a9:37:2e:93:8a:ad:86:a6:61:48:ff:
                    aa:ab:64:58:22:59:ff:e2:d6:15:28:4b:9c:1d:fe:
                    39:9f:61:ad:18:a5:de:2e:2a:f8:47:1c:f2:f6:43:
                    4a:6e:63:42:85:7d:0c:73:3c:37:c8:d7:cb:69:ca:
                    a7:43:00:6f:30:3d:4d:1f:18:52:a9:25:47:ac:e5:
                    1c:ca:c1:ff:20:d3:ed:8a:50:61:eb:88:d7:dc:17:
                    65:d8:9c:8e:24:d7:5a:51:45:c0:91:19:2e:6d:14:
                    1e:33:5a:36:19:4d:7f:14:51:2b:2d:ac:46:ab:88:
                    87:8b:6b:07:6f:0b:b9:8c:cc:8e:b6:c3:cc:b6:c4:
                    4c:45:96:4b:31:cb:72:b5:20:f3:9e:c5:89:94:fb:
                    b5:80:54:db:29:60:59:16:9b:68:1c:a3:8c:4a:d3:
                    4d:78:d9:e2:38:9a:41:27:f4:a8:53:4f:a9:ae:1e:
                    28:37:57:47:59:52:e9:8a:dd:f6:2d:57:24:65:99:
                    04:a2:57:1f:b8:d3:41:99:b8:6e:19:28:1b:94:a1:
                    8a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1C:44:34:5E:2E:62:56:12:FE:61:7B:4C:70:99:66:1C:E4:AF:EF
            X509v3 Authority Key Identifier:
                keyid:AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2b:53:71:f7:30:80:b5:d9:9b:64:60:75:b7:47:cc:e8:14:
         61:55:e9:38:40:3a:96:3b:e3:6b:2f:0a:4c:0a:32:e8:51:11:
         5e:cc:8f:3a:70:65:8c:c3:e3:72:95:1b:81:81:65:7a:ee:a8:
         c9:af:51:13:2a:8d:07:2b:a1:1e:77:65:13:ef:ea:da:53:63:
         65:ea:e6:ff:f3:80:8d:78:77:1b:0c:46:46:70:2a:5e:4f:e2:
         12:28:d9:47:cb:74:1e:a1:2b:8e:33:1b:1d:7f:75:f9:c3:cd:
         73:eb:9c:71:15:0b:25:e9:d9:f8:e9:47:9a:63:bb:dc:30:d5:
         da:b7:bb:eb:b8:d4:1f:37:9e:90:7d:02:5b:ee:5f:40:06:2e:
         0d:9b:57:3e:f5:8f:86:d2:68:46:e0:03:d0:c7:19:0c:36:b2:
         8f:39:89:1b:ae:af:87:94:b4:0e:9f:d3:b8:31:09:c4:f0:b9:
         6f:15:0e:c6:dd:a6:b8:7b:01:56:04:7f:9b:ce:44:5a:d3:81:
         20:72:e1:18:cb:dd:df:05:9a:02:24:a2:dd:eb:ac:1f:66:ed:
         4a:7d:a8:80:1f:00:b1:88:f9:74:b0:f7:c4:79:7a:b0:51:d9:
         31:40:d5:e8:43:5a:b3:f7:a2:61:2c:5f:48:da:35:bf:ac:5d:
         60:39:d7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:08 2026 by rpki-client