Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.mft
File:                     qG2L-RW00uHRHYfsP2pwVPETKeg.mft (raw, json)
Hash identifier:          mGkOoFLWL8ovea50GSco+0gxwIWXuziFh/q5tL1lPPM=
Subject key identifier:   D8:52:15:2C:C6:15:55:C8:BA:C7:EE:9E:32:6C:BE:2E:9A:3E:91:35
Authority key identifier: A8:6D:8B:F9:15:B4:D2:E1:D1:1D:87:EC:3F:6A:70:54:F1:13:29:E8
Certificate issuer:       /CN=A918C553/serialNumber=A86D8BF915B4D2E1D11D87EC3F6A7054F11329E8
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG2L-RW00uHRHYfsP2pwVPETKeg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.mft
Manifest number:          06
Signing time:             Tue 19 May 2026 09:06:15 +0000
Manifest this update:     Tue 19 May 2026 09:06:14 +0000
Manifest next update:     Tue 26 May 2026 09:06:14 +0000
Files and hashes:         1: qG2L-RW00uHRHYfsP2pwVPETKeg.crl (hash: BTm7PyfExUSbhABAa4u4a5NUQPkCY8AzgLvjppNSjCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.crl
                          rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG2L-RW00uHRHYfsP2pwVPETKeg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 09:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C553, serialNumber=A86D8BF915B4D2E1D11D87EC3F6A7054F11329E8
        Validity
            Not Before: May 19 09:06:14 2026 GMT
            Not After : May 26 09:06:14 2026 GMT
        Subject: CN=6a0c2807-23d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1e:4c:26:31:6a:ae:95:48:0c:7c:d5:1a:29:
                    9d:64:7a:f0:45:0e:f2:ac:5c:df:4d:5a:1e:39:da:
                    86:ab:46:aa:4c:d0:71:8f:ef:35:b6:92:ea:11:f1:
                    89:81:53:73:c9:27:cb:42:44:6b:fe:3f:41:a5:51:
                    1b:0f:59:f7:f4:64:8a:22:36:a4:86:18:92:38:82:
                    7b:2c:85:bb:f1:87:95:09:84:1e:0b:f6:50:7b:36:
                    37:12:c3:e9:55:76:e7:ec:a4:3c:1f:51:7b:b3:d3:
                    87:61:4e:72:b3:cb:a2:7b:d9:4e:5e:76:70:14:87:
                    3c:99:de:ce:6b:84:29:e1:60:c4:e5:d9:dd:38:c9:
                    b8:e7:c0:ed:60:1d:85:6f:02:2f:ef:02:4d:3c:75:
                    0b:53:32:b5:73:32:ca:23:e2:6b:94:f7:80:17:17:
                    6a:d2:fb:fc:82:41:dd:55:03:d5:52:53:f9:ed:86:
                    b9:99:8b:cf:fa:8e:90:69:f3:74:41:8b:11:fa:10:
                    56:7c:f8:3d:13:a4:18:de:5e:98:d9:e4:0d:dc:18:
                    10:2b:a4:51:c4:c4:c6:1a:84:18:52:5d:31:58:65:
                    3b:26:19:a5:7e:fc:59:5a:49:92:cd:36:c7:54:76:
                    6e:0a:3b:90:c8:33:c1:23:a1:e5:3f:6a:3b:27:25:
                    f6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:52:15:2C:C6:15:55:C8:BA:C7:EE:9E:32:6C:BE:2E:9A:3E:91:35
            X509v3 Authority Key Identifier:
                keyid:A8:6D:8B:F9:15:B4:D2:E1:D1:1D:87:EC:3F:6A:70:54:F1:13:29:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG2L-RW00uHRHYfsP2pwVPETKeg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b6:da:2d:3e:e1:32:33:54:35:f3:c4:0d:86:2a:eb:a6:bd:
         80:a5:50:c7:ba:4c:82:09:ac:ac:11:bb:a0:33:39:6b:c3:7d:
         41:4a:cb:78:6f:9e:55:c3:68:fc:32:60:3c:2a:d8:21:c9:c5:
         07:77:bf:68:f8:03:b3:cc:29:ed:fc:c1:d5:74:94:37:4c:e6:
         89:de:ff:b0:1f:c8:a6:3a:b2:97:bb:ea:00:fa:39:67:be:84:
         95:04:ec:0a:07:ea:07:f1:db:5e:62:8a:51:e1:27:65:4f:ee:
         62:13:a9:81:3a:2b:a7:39:a3:da:9b:05:aa:e3:61:1a:99:5a:
         7a:60:b6:ad:ca:63:70:8d:57:4f:24:5e:78:bc:0d:a3:f0:6d:
         0d:10:78:ce:aa:3b:15:68:db:ad:fa:79:5a:bb:29:4f:de:3f:
         c7:12:bc:42:9a:d4:02:96:a2:f4:96:a7:00:2a:6c:e7:57:26:
         08:e1:c9:50:0a:e5:93:33:6d:9c:c8:1e:2e:c5:b5:97:cb:b2:
         f3:03:c0:05:61:82:05:78:4e:67:ca:d3:09:b7:13:16:1c:eb:
         19:91:0b:fc:b4:c6:9e:46:f0:79:2b:8a:b0:c2:27:a9:80:11:
         3b:fd:5a:c5:29:70:6f:0f:b8:78:4d:04:08:90:66:ac:11:23:
         60:bd:23:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:29 2026 by rpki-client