Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
File:                     CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json)
Hash identifier:          i/VR+COxJwwzEBIUzGbEm14gwDEPDKoPpU7HYXNJ148=
Subject key identifier:   99:70:7A:79:3F:23:4E:87:E1:28:9B:DD:38:F5:11:6A:FF:03:EA:2D
Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
Certificate issuer:       /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Certificate serial:       BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
Manifest number:          BB
Signing time:             Tue 21 Apr 2026 06:48:05 +0000
Manifest this update:     Tue 21 Apr 2026 06:48:04 +0000
Manifest next update:     Tue 28 Apr 2026 06:48:04 +0000
Files and hashes:         1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: sEN4gHFUjaL1iGXozdoobey9K7/4dbGW9/LnrPHsRyk=)
                          2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: vX3EihROopwpsV3rRJmhMSguNpKACFQ6QBAvo5V5iVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
                          rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
        Validity
            Not Before: Apr 21 06:48:04 2026 GMT
            Not After : Apr 28 06:48:04 2026 GMT
        Subject: CN=69e71da5-3861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:aa:9d:f8:6d:52:33:99:c9:57:f7:4f:fc:50:
                    54:80:3b:a8:73:e1:e4:d9:ed:1d:2d:2c:15:bc:8d:
                    f8:ba:ca:90:52:39:42:53:e4:90:3e:3e:12:56:23:
                    2f:9d:30:33:a9:07:29:ba:10:63:08:67:b2:7f:d4:
                    da:3d:61:e7:98:0e:9e:78:37:d6:80:26:5d:d3:fd:
                    e5:bc:d0:f6:37:6f:0d:f0:3e:43:66:96:6a:3a:3e:
                    e8:3f:e7:7c:8d:33:ee:f3:96:14:01:44:de:f6:51:
                    fe:2d:a3:f9:c1:41:82:2a:6f:e1:b4:99:ec:f8:1e:
                    3e:92:41:ab:c9:3f:32:60:27:8e:a1:c1:6f:d7:c4:
                    04:b8:d6:66:38:9e:1e:12:f3:cf:69:42:2d:a7:94:
                    f7:b9:a2:ca:05:66:3a:e7:55:cc:a8:f5:97:e1:f0:
                    8a:a6:0f:0b:b2:46:90:e3:28:76:31:b4:f9:3b:88:
                    9c:3b:ac:08:79:ad:53:41:d6:a2:a9:48:5b:0e:f9:
                    0d:a5:3a:ef:6d:17:9a:d6:68:47:19:c2:1e:8e:2b:
                    c4:0a:2d:1f:d4:05:ff:9b:ee:3f:65:66:e7:a8:9b:
                    c7:58:32:de:f3:61:77:01:ad:80:64:9e:0c:4b:a4:
                    c4:ec:38:63:35:7d:54:ca:fe:49:26:2d:95:f6:9a:
                    b9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:70:7A:79:3F:23:4E:87:E1:28:9B:DD:38:F5:11:6A:FF:03:EA:2D
            X509v3 Authority Key Identifier:
                keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:59:f7:03:c4:52:c2:8c:cd:e3:06:5b:bd:6d:3f:23:ec:e7:
         b9:d6:bd:df:af:ce:d5:2c:8d:e6:9d:d9:e3:f2:6a:c4:c5:85:
         52:31:87:9d:cf:80:1b:58:11:ca:b3:02:e1:74:39:1e:8d:eb:
         7f:d3:3d:ac:f3:72:f1:62:e0:57:78:8f:61:61:f7:18:8d:24:
         c2:39:95:3b:5a:6a:07:89:25:05:1d:7d:29:ac:ad:53:ad:da:
         df:a4:f8:34:77:6c:0d:d1:aa:b1:39:73:c3:ae:ce:1a:53:fb:
         6a:5b:4d:68:23:a3:a3:ab:0f:d0:fe:eb:3a:97:ea:ac:66:5c:
         2a:02:f0:f0:b8:ab:80:5d:04:45:a7:8f:59:1c:22:49:3a:be:
         b3:34:12:c3:d8:e5:ff:21:af:0a:8b:a7:50:99:cf:98:32:76:
         eb:4a:4e:cb:e4:8f:f1:f2:c6:87:eb:b6:ac:4d:6a:a1:c3:e2:
         98:a9:fc:da:74:66:f5:22:33:a0:1d:37:3f:84:35:e2:95:98:
         d3:8f:f9:db:0e:f5:4d:df:4a:ee:9f:bd:4f:59:8c:f8:24:e0:
         12:fd:42:9f:82:c1:b4:7b:94:3d:5a:b5:04:49:65:49:5d:6b:
         a9:b4:5f:4c:28:44:46:f2:95:8a:ad:9b:da:c7:d9:1d:2d:a8:
         96:62:b4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:37:50 2026 by rpki-client