Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft
File:                     6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft (raw, json)
Hash identifier:          ATCwAq2GWO366ymt8CjXVIcpzOJYgEaMFXw5vkLbnBQ=
Subject key identifier:   E9:C6:68:42:63:33:81:23:F0:1B:29:5C:63:6F:3A:49:44:16:29:C3
Authority key identifier: EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59
Certificate issuer:       /CN=A918BFA2/serialNumber=EB04A5EAAAD51D5BF2B3ED7E675FD4D4A6B64059
Certificate serial:       3523
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft
Manifest number:          3523
Signing time:             Tue 24 Mar 2026 14:49:07 +0000
Manifest this update:     Tue 24 Mar 2026 14:49:06 +0000
Manifest next update:     Tue 31 Mar 2026 14:49:06 +0000
Files and hashes:         1: 6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl (hash: Hcq5qCXhxbY26RGUIlhg56r9ihW5ezO3wAK0Rj6BuEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl
                          rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13603 (0x3523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BFA2, serialNumber=EB04A5EAAAD51D5BF2B3ED7E675FD4D4A6B64059
        Validity
            Not Before: Mar 24 14:49:06 2026 GMT
            Not After : Mar 31 14:49:06 2026 GMT
        Subject: CN=69c2a463-1eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:81:27:a3:a4:d7:40:91:b3:e4:d7:f1:e7:
                    97:a1:91:d6:bb:55:03:32:9c:32:61:3e:84:ea:69:
                    6a:76:16:e2:e5:91:e9:a3:35:e0:fd:ec:9f:21:42:
                    b6:78:de:e7:a2:2a:9a:68:d4:00:dd:6d:98:a2:de:
                    85:96:10:b2:46:69:03:c1:c9:6c:d9:df:cf:31:05:
                    80:06:d9:57:46:17:e9:a3:0f:e8:46:b6:c4:dc:79:
                    de:75:8e:1b:96:77:c2:73:6c:77:3c:66:63:2a:fb:
                    96:3b:4a:3c:1d:fb:9a:5b:8d:df:3e:df:8d:89:3c:
                    c6:69:78:c3:44:78:cb:0b:18:9e:c6:a6:92:1f:fc:
                    02:ea:bf:38:22:91:cd:bd:4d:82:b5:1d:e4:0b:b9:
                    e4:9a:93:70:0d:c8:22:c9:a3:8b:aa:97:77:c2:56:
                    1f:ae:65:4d:3f:e9:cc:a7:d7:a2:7d:9b:f9:b2:8c:
                    fd:4e:b3:eb:09:13:37:00:d6:f3:92:8f:eb:af:db:
                    31:24:06:ea:c7:3c:af:ed:c9:6f:a1:b5:7d:b2:a7:
                    b2:64:4f:11:99:1a:c0:44:c6:de:b2:0d:dc:02:b3:
                    24:7f:38:c0:14:9b:63:ac:68:dd:c3:b6:d4:bf:90:
                    04:5d:8e:1f:e6:08:f5:e4:8c:11:09:52:bf:5d:c4:
                    ec:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C6:68:42:63:33:81:23:F0:1B:29:5C:63:6F:3A:49:44:16:29:C3
            X509v3 Authority Key Identifier:
                keyid:EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ea:01:d5:9c:81:0e:2e:f0:57:04:ee:fe:9a:7e:e4:33:b8:
         28:f4:c0:0f:c6:fc:f2:51:43:8a:9f:3d:ad:da:aa:76:74:25:
         99:9d:e7:af:74:21:19:cd:fd:b3:09:f8:f2:09:2a:88:32:e4:
         b4:21:fe:ca:a0:c6:28:43:7a:46:ac:8b:e9:cf:ff:62:3c:8f:
         88:95:3f:58:d2:9d:eb:e2:db:fa:9f:bc:d2:2e:39:c7:80:04:
         5a:93:7f:fa:f8:a5:9b:10:a0:87:18:fa:7b:13:7a:48:07:95:
         1d:4b:ab:8b:c8:a7:66:29:a0:f8:7a:9d:d0:f1:20:ef:6f:f3:
         ba:7e:13:18:ac:88:00:96:e3:ce:7c:a5:fc:23:43:03:db:9c:
         a4:6b:01:8f:50:75:f3:11:96:e7:d3:e3:fd:61:8d:77:40:d0:
         f3:ce:88:9a:c2:c7:8a:a5:19:37:7c:96:22:cf:4f:5e:fb:18:
         91:65:24:87:43:58:c3:ca:43:76:fd:89:69:3e:a1:bf:5d:41:
         45:e7:c8:07:8b:a1:43:c9:bb:60:97:04:1e:8d:fa:25:5a:36:
         5a:5e:a6:34:08:9a:8b:06:f9:7f:31:87:9c:a8:06:ed:a2:d0:
         c8:a7:b5:9e:b3:21:83:b7:3a:76:f7:56:00:27:4c:7d:c3:76:
         96:b4:be:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:50:22 2026 by rpki-client