Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
File:                     CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json)
Hash identifier:          w2nAn7VSKpMztbuPjtbHpsamJqod1kbX5HSPNQEjPk4=
Subject key identifier:   DA:EE:D5:55:E9:2B:B5:5A:FC:21:F2:68:D9:B1:D8:55:FE:14:EE:18
Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
Certificate issuer:       /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
Manifest number:          B9
Signing time:             Fri 17 Apr 2026 06:44:40 +0000
Manifest this update:     Fri 17 Apr 2026 06:44:39 +0000
Manifest next update:     Fri 24 Apr 2026 06:44:39 +0000
Files and hashes:         1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: xD8/wRa1UOCVgYq7J4cvaSnBN8ghngh9tVjkg11WH9E=)
                          2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: vX3EihROopwpsV3rRJmhMSguNpKACFQ6QBAvo5V5iVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
                          rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
        Validity
            Not Before: Apr 17 06:44:39 2026 GMT
            Not After : Apr 24 06:44:39 2026 GMT
        Subject: CN=69e1d6d7-0022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cb:49:c7:d0:90:69:fd:63:79:26:64:c5:25:
                    d9:3e:5a:74:34:4a:a4:94:26:8a:a7:be:0b:14:ce:
                    90:db:6f:3e:df:a9:bb:c6:27:f5:a2:64:04:74:25:
                    c0:e0:e4:12:77:1b:09:43:01:a6:9c:37:4d:ed:89:
                    0d:a7:90:f1:15:5a:d2:70:2a:d4:bc:96:83:c9:c5:
                    a1:09:0f:42:f4:27:2a:e2:52:bf:f6:a3:7c:15:38:
                    1b:c1:79:c1:23:05:3d:23:a9:a4:f8:a2:67:0f:aa:
                    79:ad:0d:af:bb:0a:b1:a3:00:4c:b5:27:10:dc:bd:
                    8b:88:47:63:99:ec:4c:e0:d5:69:01:3e:f4:bc:e1:
                    6b:72:e3:cc:0d:86:3b:57:18:2e:23:44:e6:0e:37:
                    6a:78:23:18:8e:11:01:7c:dd:8c:2f:7b:11:87:90:
                    cf:c7:46:ad:57:35:75:27:c2:a1:b3:2a:00:c7:92:
                    98:e4:cf:42:b9:5f:5f:8e:bb:f3:5c:47:99:bf:e9:
                    f5:3e:03:59:61:26:2c:e0:c7:6c:e1:60:e6:11:c5:
                    2e:e8:13:fe:83:b7:ba:2b:92:2d:3a:8e:21:54:c8:
                    e7:ff:8f:2a:6e:10:6c:85:d4:58:0f:39:19:ae:5d:
                    46:e3:5b:2a:59:ea:6e:d0:77:9e:4e:17:7c:b9:25:
                    26:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EE:D5:55:E9:2B:B5:5A:FC:21:F2:68:D9:B1:D8:55:FE:14:EE:18
            X509v3 Authority Key Identifier:
                keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:82:e0:45:14:e0:22:06:d8:0c:65:0f:09:15:1e:28:56:76:
         fa:6e:63:ac:e8:5d:3a:b2:30:eb:c2:31:f1:66:80:03:9e:74:
         50:db:c6:90:92:2e:9b:f2:44:b1:31:c2:b7:df:08:59:c7:db:
         e1:e0:21:1d:15:ea:73:4e:c1:b6:d6:62:61:ce:94:d1:0f:67:
         63:99:53:8a:c2:65:1e:c7:f2:19:55:c3:74:42:d1:5b:2d:bc:
         43:8b:1a:f0:76:6d:7e:30:60:92:b3:f7:93:48:96:ba:24:5c:
         ee:31:c4:6d:60:0c:c1:96:f7:92:e1:fe:bd:a7:6a:cf:10:61:
         eb:95:48:e4:fa:df:a8:38:b0:80:4c:5c:68:f7:4c:f5:1f:1c:
         83:20:8c:c7:e6:49:cd:3c:b9:5c:56:35:e7:bd:57:fe:2f:f6:
         8c:63:26:e0:7a:36:4f:7d:dc:c9:69:fa:bd:c9:cb:a2:fa:5f:
         03:f0:af:9a:e6:36:0d:1d:d5:ea:02:1c:60:5e:73:e1:d5:4c:
         13:db:82:45:22:57:a2:11:2a:9b:cf:ec:de:88:1c:d0:a7:89:
         16:6b:49:33:09:b5:67:e3:aa:46:ab:70:d7:8e:56:ad:9a:b0:
         49:1d:85:c1:7c:a1:7d:1d:c6:ad:ff:e8:dd:dd:c3:2c:53:55:
         7b:0c:6d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:48:25 2026 by rpki-client