Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
File:                     CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json)
Hash identifier:          EXfu28ZNRIddHMUbROxQiEFUASaUDyMwtPCIXd172hQ=
Subject key identifier:   2E:E3:6C:66:BB:C6:9D:49:46:B1:61:57:AF:11:3A:A2:DD:0B:A1:06
Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
Certificate issuer:       /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
Manifest number:          EB
Signing time:             Mon 27 Jul 2026 08:30:53 +0000
Manifest this update:     Mon 27 Jul 2026 08:30:52 +0000
Manifest next update:     Mon 03 Aug 2026 08:30:52 +0000
Files and hashes:         1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: TTvBss1XrFZSD8ob/0fWboEQS8KFvA7fyKnQmfK+Pls=)
                          2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: vX3EihROopwpsV3rRJmhMSguNpKACFQ6QBAvo5V5iVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
                          rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
        Validity
            Not Before: Jul 27 08:30:52 2026 GMT
            Not After : Aug  3 08:30:52 2026 GMT
        Subject: CN=6a67173d-8fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:64:ce:80:25:cf:75:03:9f:40:18:b5:bf:
                    c2:1f:3a:04:96:f4:4f:de:40:f8:9f:76:94:ca:95:
                    2e:8b:84:b8:21:7e:ea:38:68:f3:8d:f7:55:b2:19:
                    33:c4:5d:e5:52:f7:d9:7b:3e:00:a4:b4:21:d9:c7:
                    2b:c3:0d:f7:59:6c:82:89:56:9d:7f:ba:64:f2:8b:
                    85:d4:0b:42:4b:df:8f:88:34:5e:d0:19:b0:04:c7:
                    7c:7f:43:ef:50:6b:60:4e:70:ac:5f:30:12:da:ff:
                    e8:fd:98:04:63:13:cd:a2:a0:e9:ca:d1:ab:6c:c3:
                    0b:59:7e:50:52:ed:04:57:d9:60:40:e6:dd:03:f8:
                    e0:e4:19:57:fc:c4:46:db:dc:52:71:b4:47:c3:73:
                    27:46:ff:47:80:72:30:79:44:2b:8a:0d:78:f8:2a:
                    cb:ed:a1:ea:a6:e3:3d:30:28:56:2b:41:f6:72:7e:
                    4b:2c:24:66:ae:db:6b:68:36:60:5d:40:ad:62:df:
                    c7:e0:ae:22:aa:41:1c:3e:e7:02:b6:14:d7:7c:7c:
                    f9:0c:15:04:ce:50:10:67:f9:5e:72:6c:ea:7c:2a:
                    26:43:8e:eb:be:a9:7d:0e:93:f2:19:b5:77:65:79:
                    3f:07:aa:fb:a9:12:e9:cc:f8:14:e7:71:76:62:8e:
                    9d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E3:6C:66:BB:C6:9D:49:46:B1:61:57:AF:11:3A:A2:DD:0B:A1:06
            X509v3 Authority Key Identifier:
                keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:9d:ef:23:f3:7b:65:e6:86:6c:84:e3:d9:13:ca:37:fd:05:
         71:57:7e:81:59:4e:87:e2:4f:80:87:f5:ce:8b:ca:3c:12:d9:
         aa:b4:4f:1b:2b:3c:50:dc:d4:b3:68:39:5c:4b:5b:e3:07:9b:
         18:e4:ce:66:d3:fb:bd:f7:2a:6c:50:13:30:af:e3:e9:7a:8b:
         47:ba:57:eb:4c:ba:7a:6e:a4:17:9d:cb:d7:31:97:81:f6:19:
         91:e7:77:6e:de:20:42:22:bd:72:57:40:a1:70:72:07:8c:7b:
         1a:e8:a7:99:ed:a7:fe:02:a2:f2:8d:d2:7c:06:c5:67:da:35:
         e2:fa:58:f2:35:fe:ec:3c:be:53:08:af:fe:34:b2:7f:3f:83:
         0b:5d:e9:79:99:cc:09:6f:7e:3d:7b:10:56:38:99:b7:d1:ec:
         80:ba:71:25:b5:d2:16:e9:8d:91:10:72:08:70:3a:09:0b:24:
         c5:1d:4b:bf:79:fe:ce:6c:22:cb:c3:94:aa:ba:e1:87:c5:55:
         78:0b:62:ef:6b:3b:a9:95:fc:22:97:9c:87:b2:fc:e2:9e:86:
         c4:64:d1:18:e1:cd:dc:20:61:15:5b:3b:f8:6b:ed:03:17:ff:
         16:2c:be:d5:b0:e5:c6:09:d4:a6:03:82:17:ae:32:08:32:ba:
         23:d3:4e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:17 2026 by rpki-client