Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
File:                     6c1KiX_FldVl32QzGdg49i4pNh4.mft (raw, json)
Hash identifier:          eRaZWA9D27LhvZOU+tq2PGu45PiN6bC/YNfm1bLRsfU=
Subject key identifier:   DE:4A:90:94:9B:38:7C:C5:EB:FD:E6:93:AC:36:8B:B2:15:D7:6F:CF
Authority key identifier: E9:CD:4A:89:7F:C5:95:D5:65:DF:64:33:19:D8:38:F6:2E:29:36:1E
Certificate issuer:       /CN=A91575E2/serialNumber=E9CD4A897FC595D565DF643319D838F62E29361E
Certificate serial:       0674
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
Manifest number:          0671
Signing time:             Sat 04 Jul 2026 22:53:09 +0000
Manifest this update:     Sat 04 Jul 2026 22:53:09 +0000
Manifest next update:     Sat 11 Jul 2026 22:53:09 +0000
Files and hashes:         1: 6c1KiX_FldVl32QzGdg49i4pNh4.crl (hash: 1DrCzdgp/IcPCOaIwbUO/gz0bT0OG2t3pRZtaDKx8GQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.crl
                          rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 22:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1652 (0x674)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91575E2, serialNumber=E9CD4A897FC595D565DF643319D838F62E29361E
        Validity
            Not Before: Jul  4 22:53:09 2026 GMT
            Not After : Jul 11 22:53:09 2026 GMT
        Subject: CN=6a498ed5-cad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:0d:a3:39:10:5a:c3:65:af:5b:d1:9e:18:
                    38:64:d9:18:c6:72:6d:80:16:8d:b8:8e:e7:c0:79:
                    b2:48:98:d7:0a:a3:d4:47:c9:c9:0b:04:09:38:0a:
                    8c:c3:0b:8e:e8:9f:44:60:86:bb:18:45:3e:fc:b4:
                    d9:80:f5:c4:05:11:cf:8c:f9:b3:63:2a:df:0b:9b:
                    47:9c:ea:95:33:da:f8:bf:e6:8c:c9:7f:fe:92:e5:
                    95:9c:45:ee:9a:dd:ed:71:a4:ee:76:5e:7a:2c:26:
                    f4:ec:64:20:43:fe:9f:7f:88:52:85:3d:36:46:19:
                    7e:83:9f:dc:cd:84:d6:77:73:c9:19:b3:ef:54:0b:
                    ef:49:ac:2c:b8:37:c5:c4:eb:4d:06:c5:20:55:57:
                    e4:5c:19:a8:b8:dd:7a:a0:c9:f4:88:19:1c:2d:4d:
                    64:fd:98:dc:14:ec:9e:5f:c3:8d:5b:32:21:83:c1:
                    42:78:73:e9:5a:71:19:dc:f1:b8:0d:91:ef:35:22:
                    bf:c8:cd:4b:02:8c:3d:fd:4a:5e:5d:73:83:f5:41:
                    91:3c:2b:b4:59:0f:26:5a:76:75:c5:37:62:00:58:
                    1e:7b:02:5e:aa:d1:9d:aa:6d:ba:01:a8:62:ec:e4:
                    6f:0b:99:66:9d:25:6d:b7:fa:d6:ca:9a:96:67:02:
                    0f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4A:90:94:9B:38:7C:C5:EB:FD:E6:93:AC:36:8B:B2:15:D7:6F:CF
            X509v3 Authority Key Identifier:
                keyid:E9:CD:4A:89:7F:C5:95:D5:65:DF:64:33:19:D8:38:F6:2E:29:36:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:86:56:83:4c:cf:88:b4:f9:b4:3f:d6:5a:50:8f:83:ac:b4:
         c7:fb:b3:f5:f3:3c:b0:36:fc:26:15:f7:70:87:49:29:5f:6d:
         7c:7a:45:f8:e2:d0:9a:91:5d:9d:c4:d4:9a:f5:b9:db:3d:eb:
         21:a1:f8:49:15:ce:89:ff:d2:06:10:80:8b:b5:a4:6f:b9:57:
         c7:39:4d:98:47:22:f3:99:82:c2:b5:3f:d1:d3:b2:a9:98:91:
         1f:94:d0:28:b8:ec:d5:5f:d0:54:cd:6e:11:e2:be:04:ed:79:
         0d:55:c2:85:3c:fa:06:23:e0:f6:4b:d5:67:ed:95:66:b4:07:
         54:9c:b5:90:c9:88:ce:ed:b1:9b:72:1f:ae:42:e9:bb:a7:d6:
         0f:4a:65:f1:b9:4d:68:fd:56:e5:c3:ba:b4:63:b8:7a:42:1b:
         86:a6:a9:36:9b:db:b5:38:46:5c:4c:b3:e6:c2:e6:4c:6d:79:
         71:ea:2e:59:6b:a8:09:30:d9:eb:b6:c1:6e:80:da:ac:7e:89:
         8f:2f:bb:d4:2a:98:3b:05:e6:01:57:97:fb:66:64:b3:de:75:
         39:ee:27:78:bb:5e:14:2e:41:70:b7:ce:d3:60:37:61:30:95:
         4b:5c:e2:88:d0:bd:55:ad:45:78:cf:11:75:27:f7:f2:d4:9d:
         07:e6:95:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:44:31 2026 by rpki-client