Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft
File:                     fA03qVD2-mazVJllAshMr6_nOXE.mft (raw, json)
Hash identifier:          OvEgsUsKdm0zLsqcwveduRV/gLL50OQ8+oKS33szcuo=
Subject key identifier:   3A:AD:94:D0:68:4B:3A:14:B1:B1:6B:01:09:BF:23:00:22:17:8D:D5
Authority key identifier: 7C:0D:37:A9:50:F6:FA:66:B3:54:99:65:02:C8:4C:AF:AF:E7:39:71
Certificate issuer:       /CN=A918D6AD/serialNumber=7C0D37A950F6FA66B354996502C84CAFAFE73971
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fA03qVD2-mazVJllAshMr6_nOXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft
Manifest number:          6B
Signing time:             Thu 21 May 2026 07:59:11 +0000
Manifest this update:     Thu 21 May 2026 07:59:10 +0000
Manifest next update:     Thu 28 May 2026 07:59:10 +0000
Files and hashes:         1: fA03qVD2-mazVJllAshMr6_nOXE.crl (hash: E4oCtAF28EIZ7/RCu3EnzIQKd7bg4Y+/vA8zLQMyXUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.crl
                          rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fA03qVD2-mazVJllAshMr6_nOXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6AD, serialNumber=7C0D37A950F6FA66B354996502C84CAFAFE73971
        Validity
            Not Before: May 21 07:59:10 2026 GMT
            Not After : May 28 07:59:10 2026 GMT
        Subject: CN=6a0ebb4f-3f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:02:95:2d:5b:bb:d5:dc:a4:70:9c:cd:ca:
                    99:08:53:de:cf:fb:13:f2:a2:67:fe:44:12:26:f0:
                    5c:52:d7:87:7e:fa:69:93:31:7d:57:81:23:a8:b7:
                    f9:06:95:b6:de:7a:2d:b7:66:90:3a:97:8b:cb:a8:
                    11:32:31:a7:d6:6d:ea:f3:8e:14:2e:bd:3a:85:1a:
                    f7:b7:13:b5:1f:88:11:a0:5d:bd:86:88:c3:c8:7e:
                    07:ca:80:a8:93:be:ca:c9:b5:9e:8e:50:be:21:f8:
                    53:df:61:52:29:17:ae:fd:a6:cc:12:52:a2:de:53:
                    68:92:26:19:cb:b0:5c:c2:ff:22:08:bd:56:52:10:
                    57:15:ba:e6:1e:9e:53:2f:7c:bb:84:82:fd:26:d4:
                    72:c6:f8:09:4d:a3:1e:89:c8:43:cb:6c:77:aa:f9:
                    eb:17:4e:a4:98:32:21:5b:41:d8:5a:14:68:47:a0:
                    fc:da:2c:cc:80:0f:4a:34:46:a2:f9:c2:81:b7:63:
                    74:b0:0e:fd:a4:fa:89:e1:1f:e6:64:37:fc:38:72:
                    b0:d5:89:c1:2f:d4:3b:fa:9e:36:c7:9e:26:77:95:
                    da:a5:dd:99:8d:c6:97:bb:7c:70:51:4b:3a:53:9a:
                    49:50:aa:53:22:b9:09:f3:b3:c0:76:e9:ad:0c:e1:
                    c7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AD:94:D0:68:4B:3A:14:B1:B1:6B:01:09:BF:23:00:22:17:8D:D5
            X509v3 Authority Key Identifier:
                keyid:7C:0D:37:A9:50:F6:FA:66:B3:54:99:65:02:C8:4C:AF:AF:E7:39:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fA03qVD2-mazVJllAshMr6_nOXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:29:6d:84:08:dd:e1:b7:47:fb:27:1a:76:f2:83:f7:4b:58:
         2d:cc:60:6b:01:37:5d:b6:9b:19:2b:0c:af:66:c1:ec:d1:97:
         df:42:69:1a:59:3c:d9:4a:3c:bd:92:8b:24:c1:a4:b6:8a:bb:
         66:d1:b9:24:4d:ad:aa:e7:fb:af:a6:99:73:ea:a2:ab:eb:f9:
         00:df:40:7e:d4:19:52:a3:ab:a3:0c:49:00:02:4d:58:9d:b1:
         a5:8a:38:46:df:db:ce:b4:dd:0e:48:dc:75:03:5d:d5:d2:44:
         93:98:0a:c7:b8:04:5c:d4:7e:62:8f:95:89:06:ec:e0:02:ba:
         0a:f0:20:60:1e:8e:48:be:70:eb:76:56:cf:30:61:0f:12:1c:
         34:b4:7d:63:78:fa:f6:58:59:1e:a4:7d:c4:dd:d2:7a:a3:1b:
         42:44:3e:77:7c:ca:d8:e0:38:54:e1:fa:47:cd:b4:b7:a2:ef:
         7e:da:9d:8c:6a:40:82:8a:67:d5:70:25:14:b3:66:2b:3d:d2:
         87:08:02:eb:96:48:9e:97:34:0f:e6:02:b9:ed:d4:d4:f2:86:
         23:7b:d7:29:24:b8:85:69:34:2d:b0:ab:d7:1a:81:c7:c6:59:
         49:e4:bd:48:65:fb:fd:fd:5b:9d:c0:ba:8c:d4:12:c3:0e:31:
         a0:b0:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:10 2026 by rpki-client