Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
File:                     CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json)
Hash identifier:          DLCA5Nvgp/u78PfaR2JQWTEu1ZvwdAb/9qWcCvo6MtM=
Subject key identifier:   B7:D2:72:FE:AC:9D:67:56:2D:2D:A3:3B:E3:D4:75:44:60:D5:FB:2C
Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F
Certificate issuer:       /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
Manifest number:          A4
Signing time:             Sat 07 Mar 2026 06:31:37 +0000
Manifest this update:     Sat 07 Mar 2026 06:31:36 +0000
Manifest next update:     Sat 14 Mar 2026 06:31:36 +0000
Files and hashes:         1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: yaZu2WKx1/qkqhq1avQzre81rEXQy8psmVLXR+mDVR8=)
                          2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: vX3EihROopwpsV3rRJmhMSguNpKACFQ6QBAvo5V5iVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl
                          rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 06:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F
        Validity
            Not Before: Mar  7 06:31:36 2026 GMT
            Not After : Mar 14 06:31:36 2026 GMT
        Subject: CN=69abc649-04f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:85:49:65:f8:4b:b9:01:e1:6f:6d:f0:9d:cf:
                    94:af:b6:bf:32:1a:90:21:40:a0:5f:e5:6a:79:c3:
                    04:3d:96:e9:e7:88:c6:53:c7:1d:c9:c6:f1:ed:f9:
                    ca:11:5c:62:c3:4f:27:19:53:bf:26:ad:79:16:9c:
                    23:65:bd:29:ab:ab:54:fa:bb:68:d2:c1:f9:57:93:
                    94:ab:10:56:19:ff:a4:1d:09:1b:2f:65:6a:05:64:
                    fd:c9:a5:99:15:f5:7d:ff:35:25:1d:ea:b3:4a:28:
                    46:b5:9e:c5:db:a1:7a:99:17:db:42:ac:50:d2:e0:
                    3e:cc:3b:0d:ac:fe:39:b9:89:af:f3:1b:96:e5:73:
                    ce:d7:38:b5:77:90:50:51:57:ef:68:76:fd:e7:f1:
                    52:40:9e:a3:e8:a3:77:d0:fb:a6:83:05:d5:f8:a6:
                    f1:a9:cd:39:62:03:05:8a:d2:6e:10:8a:10:c3:aa:
                    69:45:4e:28:cf:0f:49:63:53:8b:65:28:53:41:cf:
                    5c:b9:3d:81:6d:d4:a1:e1:a3:f2:54:c0:9a:83:2c:
                    8c:ea:ff:61:aa:bc:a1:fc:b2:4d:85:52:22:d4:f7:
                    ed:fb:b0:d8:c1:89:36:66:16:ef:a3:68:05:f6:2a:
                    e8:18:54:10:e8:96:77:18:b2:a1:b4:fa:3c:98:7f:
                    0e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D2:72:FE:AC:9D:67:56:2D:2D:A3:3B:E3:D4:75:44:60:D5:FB:2C
            X509v3 Authority Key Identifier:
                keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:44:00:2e:ea:59:50:71:30:7a:4e:81:81:95:60:a8:87:18:
         c4:e6:73:4a:62:fc:b2:bd:d9:ad:3d:bd:50:55:99:f2:d2:73:
         b5:67:6d:65:75:0e:79:db:fc:c8:2c:00:34:93:97:ba:3c:84:
         f4:84:f6:7b:41:e8:3d:28:97:bb:25:88:8b:be:d7:a6:f1:9e:
         e4:a8:76:f2:0c:09:bf:27:7d:32:86:81:6d:fe:cb:82:2e:5e:
         a8:fe:56:0d:f8:d1:09:e7:35:b8:8a:3f:4d:a7:fe:91:7b:ec:
         fc:04:c4:d8:62:da:80:83:00:2b:eb:de:64:2a:3e:ad:b1:93:
         7a:17:a3:84:4f:85:40:30:ad:37:0d:a5:62:a6:62:4e:47:1e:
         b7:08:35:e2:40:f1:d9:1d:ff:bf:04:07:cf:75:53:f5:71:5c:
         d3:0e:39:da:65:3b:59:1e:80:6c:d7:de:30:58:05:17:75:aa:
         08:26:25:36:15:09:74:70:72:64:04:52:f3:b9:19:9c:6a:22:
         d6:0f:d0:c4:c6:c4:58:b9:58:0f:20:a7:ca:a6:88:dc:7a:a3:
         3c:55:d0:a2:af:bd:59:8b:d9:a7:4b:2b:9a:61:90:99:a7:09:
         0d:be:07:76:ac:fa:03:8c:5b:0b:2e:8d:03:79:40:60:a6:c2:
         f9:61:22:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:27:10 2026 by rpki-client