Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
File:                     CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json)
Hash identifier:          iDUQRTbAG/P3NENwrFdDBhNJ44QnxfL/+2bXURBPoas=
Subject key identifier:   8B:5F:7A:2C:09:34:69:71:36:9F:91:FB:FD:F3:AD:9F:A5:8C:52:DF
Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
Certificate issuer:       /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
Manifest number:          E8
Signing time:             Tue 21 Jul 2026 08:07:58 +0000
Manifest this update:     Tue 21 Jul 2026 08:07:58 +0000
Manifest next update:     Tue 28 Jul 2026 08:07:58 +0000
Files and hashes:         1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: m9yxdNrJbbvlK+yclfEC0mNwDPWL+iYjeKsbp9X5ztI=)
                          2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: vX3EihROopwpsV3rRJmhMSguNpKACFQ6QBAvo5V5iVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
                          rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
        Validity
            Not Before: Jul 21 08:07:58 2026 GMT
            Not After : Jul 28 08:07:58 2026 GMT
        Subject: CN=6a5f28de-677e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c8:fe:12:dc:88:fd:43:e5:43:8a:94:37:20:
                    41:c2:76:04:c8:91:e7:70:b2:d5:35:ed:f3:3f:74:
                    c7:d8:e3:ca:00:e1:c0:33:59:2f:35:91:98:ea:c9:
                    95:80:87:b6:f2:6e:91:dd:4c:b2:bb:62:3e:8d:e3:
                    14:46:20:a2:4e:86:90:29:8a:2b:06:5e:d4:ba:11:
                    85:20:68:48:e8:31:de:8c:f9:30:60:ff:19:ae:36:
                    41:2b:56:0c:a2:27:8c:1f:57:bb:e2:c1:dd:6e:41:
                    d5:d8:6b:01:78:99:fc:b9:bb:ea:09:99:35:31:90:
                    10:61:33:66:31:f6:63:58:e9:db:c5:e8:d9:6d:39:
                    29:a7:6e:c7:92:38:08:bf:ef:de:11:d4:61:e9:f2:
                    d2:f3:85:b9:b8:87:85:06:3f:1f:91:d4:a1:86:63:
                    2d:a6:fb:27:8a:fc:b8:14:df:35:cb:4f:2b:1c:bb:
                    90:63:e8:97:2e:87:b5:63:09:31:12:91:1e:87:a8:
                    3e:b6:c3:0b:2a:e5:e1:bf:27:d4:20:12:14:e8:3a:
                    24:d8:f7:22:d9:8f:4a:0e:f6:ff:37:90:d8:9a:4f:
                    e4:5c:b7:25:01:cf:17:d4:ab:d5:f3:f0:9c:7e:cb:
                    0c:98:95:3f:2d:b9:a6:66:3e:ce:1d:7d:85:f3:0c:
                    8a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5F:7A:2C:09:34:69:71:36:9F:91:FB:FD:F3:AD:9F:A5:8C:52:DF
            X509v3 Authority Key Identifier:
                keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:d2:4b:83:ae:d1:ed:58:a7:84:38:11:bb:a1:73:86:55:59:
         3d:ba:42:d1:d7:4a:fa:2b:c0:05:5a:35:82:a5:8e:d6:d5:c7:
         8b:52:f5:a6:eb:38:28:41:68:7d:cb:6b:e6:9c:92:7e:5b:a7:
         b8:9e:61:45:f6:70:51:bb:06:a3:29:56:d9:f7:ef:a3:fe:2f:
         b4:49:97:66:50:6d:1a:ee:0f:c1:ac:ff:1a:15:c8:15:03:fc:
         0f:b6:ba:f3:3b:b1:9c:be:86:5c:27:65:69:a7:bd:a3:e8:62:
         fb:2f:6e:ae:c4:8a:4c:e5:d4:dc:df:01:8d:a7:77:2f:e4:80:
         78:54:39:92:74:77:f5:27:5d:9c:7c:2b:cb:cd:bc:e8:63:55:
         46:40:c1:eb:36:39:e1:4c:a6:7c:70:7d:5d:7f:84:f2:12:37:
         f7:67:7f:6d:7b:6f:df:04:58:ab:30:3f:64:41:1e:6e:75:56:
         4c:80:c4:80:33:c4:48:71:e9:fa:02:ce:b0:81:47:d5:1f:a1:
         04:b0:17:f7:09:c8:0d:a5:c6:75:f2:2d:83:17:da:68:5d:95:
         57:6c:0a:50:9b:6b:c3:39:02:de:7b:05:85:a1:88:6e:48:44:
         89:92:1f:4c:cc:4c:79:69:5d:84:91:ea:99:1b:8a:8b:9d:56:
         7d:47:bd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:01:42 2026 by rpki-client