Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
File:                     6c1KiX_FldVl32QzGdg49i4pNh4.mft (raw, json)
Hash identifier:          T94q6GsVTvAV4HwN0cKyuGUll9k9PVKJSsPpzF4SHzA=
Subject key identifier:   B6:C1:80:DC:9D:E1:6B:15:FD:F0:8E:C9:C6:AE:C7:D3:0B:DC:E9:5D
Authority key identifier: E9:CD:4A:89:7F:C5:95:D5:65:DF:64:33:19:D8:38:F6:2E:29:36:1E
Certificate issuer:       /CN=A91575E2/serialNumber=E9CD4A897FC595D565DF643319D838F62E29361E
Certificate serial:       0659
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
Manifest number:          0656
Signing time:             Tue 12 May 2026 22:45:40 +0000
Manifest this update:     Tue 12 May 2026 22:45:40 +0000
Manifest next update:     Tue 19 May 2026 22:45:40 +0000
Files and hashes:         1: 6c1KiX_FldVl32QzGdg49i4pNh4.crl (hash: uI3XznfHueCQfYR4lkf4/RsdKhEtJDL9MptDyzTLRJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.crl
                          rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1625 (0x659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91575E2, serialNumber=E9CD4A897FC595D565DF643319D838F62E29361E
        Validity
            Not Before: May 12 22:45:40 2026 GMT
            Not After : May 19 22:45:40 2026 GMT
        Subject: CN=6a03ad94-5295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8c:1e:ac:81:92:f9:2a:8c:90:9d:44:0c:b5:
                    59:99:02:cc:d2:ba:87:f1:09:a0:26:6e:e1:28:cb:
                    4f:7e:56:48:3c:cd:36:e7:23:5b:ae:57:63:c6:a2:
                    8d:ac:97:db:00:d6:ef:b8:ea:1f:81:10:47:78:09:
                    39:89:91:2a:9e:4f:6d:e8:68:28:da:51:7c:54:24:
                    2c:74:4c:84:d6:cf:80:4c:d8:9d:38:45:cf:4a:67:
                    6c:b7:c9:a1:ad:f0:71:96:cb:df:7c:40:25:6a:19:
                    5c:68:46:78:69:91:92:df:ef:c9:07:6e:a8:66:2b:
                    43:cc:7b:51:f2:11:72:a6:a0:ff:c4:2d:db:b0:17:
                    ba:0d:97:3a:a9:d6:7e:79:19:a4:a4:3e:cc:c9:80:
                    55:be:d3:fb:1f:c6:83:5f:da:b3:1e:59:ec:a5:75:
                    00:3a:78:97:45:ae:c0:23:fa:76:00:80:42:95:2d:
                    ed:16:ae:60:6c:ed:84:76:57:dc:eb:35:d4:cf:ca:
                    5b:d2:73:1d:0b:f3:02:74:d1:43:28:03:36:21:88:
                    7b:b4:e1:0e:6d:3a:5d:41:3c:a7:2b:68:d4:bb:df:
                    d2:c8:db:4c:85:9a:25:8d:34:8c:9c:f1:64:ec:f2:
                    cf:ec:34:cf:19:55:a6:fc:d3:25:f2:38:46:33:97:
                    bc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C1:80:DC:9D:E1:6B:15:FD:F0:8E:C9:C6:AE:C7:D3:0B:DC:E9:5D
            X509v3 Authority Key Identifier:
                keyid:E9:CD:4A:89:7F:C5:95:D5:65:DF:64:33:19:D8:38:F6:2E:29:36:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:49:e2:d1:4a:f8:ed:03:b4:77:7a:d1:43:a2:9f:04:db:06:
         f3:f6:13:51:f6:62:1b:80:0d:5a:c8:e7:8b:ca:d6:80:b5:c7:
         6c:5c:3c:76:b4:5d:72:7a:43:bf:4c:19:d4:bf:d6:f4:23:a3:
         f9:e8:eb:7c:33:34:b9:35:df:8b:e5:73:54:1c:ac:4c:74:99:
         47:b2:f8:c3:35:e9:46:a8:c2:36:4d:29:3e:ec:2e:64:19:65:
         54:b6:bd:42:fc:8b:b0:21:16:43:23:7f:22:bd:6b:c0:c5:00:
         33:6f:72:53:a5:33:a1:66:65:24:83:05:2c:d2:9c:f8:82:18:
         b1:4d:d0:93:4f:16:ae:1e:03:49:49:37:24:3e:37:97:39:77:
         d9:33:e5:a1:9f:50:7e:92:5c:e8:dc:62:d7:3b:5c:93:31:5c:
         7a:22:3a:fd:a9:13:16:1a:5d:0a:12:5f:ec:3d:bc:0f:5f:66:
         d2:6f:4e:c2:4b:6e:da:20:e3:03:02:0d:7b:80:65:47:06:7f:
         34:6b:cd:a1:67:e7:40:0e:cc:26:97:5a:69:c1:6f:a2:0f:2c:
         63:2b:aa:30:01:72:0d:02:fe:36:66:2b:db:1f:6c:d3:7c:78:
         2a:0f:c3:46:fc:9b:3a:22:a8:02:0d:b5:05:56:d5:f4:f3:b1:
         6b:96:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:22:17 2026 by rpki-client