Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft
File:                     SoXPE4hy0-RPkNe28wKPC1BnNMw.mft (raw, json)
Hash identifier:          kcjpmZNk++xVIJtzIGArLJU+OePhJVnPnvnikyyPdxs=
Subject key identifier:   5F:FA:43:30:9D:C2:0D:10:65:69:C5:E6:F1:86:9F:40:CD:62:FB:A9
Authority key identifier: 4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC
Certificate issuer:       /CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC
Certificate serial:       046F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft
Manifest number:          04F6
Signing time:             Sun 01 Mar 2026 23:33:26 +0000
Manifest this update:     Sun 01 Mar 2026 23:33:24 +0000
Manifest next update:     Sun 08 Mar 2026 23:33:24 +0000
Files and hashes:         1: SoXPE4hy0-RPkNe28wKPC1BnNMw.crl (hash: JMkv3yKO0amRGaODy55ptSNLoboCiB5x3NxRVRAoQA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl
                          rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135 (0x46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D0AF, serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC
        Validity
            Not Before: Mar  1 23:33:24 2026 GMT
            Not After : Mar  8 23:33:24 2026 GMT
        Subject: CN=69a4ccc6-8da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3c:e6:c8:fb:85:53:8f:eb:38:d9:6d:ee:07:
                    98:f0:47:29:f1:6e:e1:3c:5a:90:33:c6:36:57:bc:
                    d3:53:1d:53:7d:ad:5f:10:6a:0f:46:78:71:f2:24:
                    71:58:b9:bb:60:25:85:36:19:f9:14:60:0c:6a:8d:
                    04:c5:c7:bd:3e:2c:3e:2d:e1:7c:94:86:fc:52:32:
                    10:4a:e7:40:2c:cd:5f:11:8e:1c:ed:6b:e2:c8:02:
                    71:6f:0b:37:ca:86:05:2a:b7:68:c1:e0:31:cc:6c:
                    96:82:db:40:33:eb:e2:be:df:b8:c7:66:ea:db:6a:
                    19:69:86:92:32:8a:f2:8f:e7:f2:09:27:41:2f:69:
                    d3:c4:8c:7e:66:c0:77:73:09:23:44:51:a8:04:46:
                    be:c0:6b:1d:8b:02:84:59:39:ba:d2:e1:83:e3:50:
                    ef:49:05:7d:4f:36:89:9c:66:ef:c5:d6:75:12:6d:
                    5c:17:4d:36:a8:aa:c3:c3:43:1d:c1:48:29:5e:c5:
                    ab:80:93:18:3a:de:92:a2:2f:c9:83:28:12:28:c8:
                    66:f8:83:c6:f4:7c:d3:26:b4:33:bf:75:6a:01:2c:
                    0f:d6:b3:86:3e:54:43:8d:4d:7a:51:0c:54:75:85:
                    0e:a2:fd:28:c7:c5:4f:02:53:79:2f:2d:47:8c:97:
                    42:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FA:43:30:9D:C2:0D:10:65:69:C5:E6:F1:86:9F:40:CD:62:FB:A9
            X509v3 Authority Key Identifier:
                keyid:4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:50:8f:a5:3a:7d:9b:9b:d9:36:04:c5:6d:e7:2f:d2:00:de:
         c0:23:32:c3:4f:4b:bf:b9:91:09:19:ce:7f:67:08:d5:05:cb:
         21:ff:cc:97:cb:e4:34:bf:a9:cd:8e:97:20:df:b8:af:cf:d6:
         59:19:62:c0:31:ae:d7:e5:70:03:a8:d4:20:3e:7d:70:ef:88:
         b7:22:06:2a:66:b8:67:dd:14:49:62:92:0d:c5:fe:f9:ca:9c:
         cf:2a:07:a0:65:69:ad:9c:1b:c2:53:1d:cd:bf:ac:b9:77:30:
         4a:53:ec:62:38:a0:ad:6d:d7:db:ec:48:48:05:27:97:38:e0:
         eb:b0:13:48:e7:d1:6d:f0:1f:1d:83:02:05:17:70:12:f6:b2:
         8c:2c:df:2d:19:dc:30:55:f4:e2:e7:03:83:de:aa:73:06:ba:
         8a:67:b9:c5:83:5e:15:1c:94:01:20:8b:75:5e:6f:40:0f:a1:
         0f:e6:21:1f:fa:dc:b9:b9:f5:68:fd:b6:8d:8d:90:ae:0f:54:
         34:2d:0f:f2:3f:58:59:9d:ea:e4:3f:57:cb:aa:48:dc:35:eb:
         85:f2:c1:de:d0:b4:c4:e0:b7:f5:0b:5c:ad:da:d9:c5:24:a3:
         d2:a8:1b:fd:c2:ec:6c:d4:a5:df:93:bf:2a:64:18:6d:7e:40:
         a8:1a:bd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:16 2026 by rpki-client