Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
File:                     SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft (raw, json)
Hash identifier:          /wE67TeZ/XF/z07qG4rLNOtfyaiHvMu3SHg88/4/Vgk=
Subject key identifier:   64:A3:66:14:B8:33:78:EE:34:68:A3:52:4D:32:D9:88:36:7B:4F:87
Authority key identifier: 4A:43:89:FE:91:F9:A1:24:C7:76:F8:9B:B2:1E:E0:7C:3E:7E:64:79
Certificate issuer:       /CN=A916CDAC/serialNumber=4A4389FE91F9A124C776F89BB21EE07C3E7E6479
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
Manifest number:          57
Signing time:             Sun 01 Mar 2026 09:32:23 +0000
Manifest this update:     Sun 01 Mar 2026 09:32:23 +0000
Manifest next update:     Sun 08 Mar 2026 09:32:23 +0000
Files and hashes:         1: SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl (hash: Tb/9QDoM+e0bZDMhluV7yyVwQdYRqL4e2YcEC2xMOzk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl
                          rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDAC, serialNumber=4A4389FE91F9A124C776F89BB21EE07C3E7E6479
        Validity
            Not Before: Mar  1 09:32:23 2026 GMT
            Not After : Mar  8 09:32:23 2026 GMT
        Subject: CN=69a407a7-a76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8d:a8:7c:1a:d8:77:25:e6:10:a1:1b:d8:c7:
                    b8:0b:08:f8:fb:af:ce:6e:7b:ac:d6:2f:ab:ac:8f:
                    fd:f3:5b:68:e5:46:18:d5:83:c6:76:7e:23:b9:85:
                    d2:99:04:0d:a7:2d:14:9a:31:b0:a9:0a:cf:5a:0e:
                    71:f4:96:dc:24:94:ff:27:6f:46:a6:f7:9a:e7:81:
                    8d:7e:ac:38:2c:a6:25:58:8b:27:91:48:86:3a:99:
                    cd:c9:f8:f7:9d:8c:f3:f6:1d:b9:8d:d8:20:89:1d:
                    d7:d8:3e:93:98:bb:03:ca:ca:69:17:9c:7c:23:5e:
                    2f:b6:3e:3a:59:4d:11:92:87:0d:06:92:0e:40:17:
                    db:da:fc:63:94:bd:a5:8d:32:50:e9:7e:b5:4e:4d:
                    bd:87:be:4b:5f:ed:da:22:27:74:5a:56:2a:0d:37:
                    fd:7b:d0:d0:a1:43:6b:1c:5a:d3:fd:a1:15:11:f1:
                    eb:e2:88:ad:9a:cf:e9:9a:ec:a3:17:24:25:67:f3:
                    51:58:92:39:50:9c:6f:d1:40:6a:0b:53:f4:69:f4:
                    c3:d8:3f:b7:78:7d:16:22:9a:41:9b:e0:db:fe:68:
                    0b:98:de:6c:ff:1b:75:39:58:d2:a4:b0:0b:c2:84:
                    f5:01:48:9e:87:96:dc:5c:f4:23:51:d2:6f:c6:9f:
                    2b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A3:66:14:B8:33:78:EE:34:68:A3:52:4D:32:D9:88:36:7B:4F:87
            X509v3 Authority Key Identifier:
                keyid:4A:43:89:FE:91:F9:A1:24:C7:76:F8:9B:B2:1E:E0:7C:3E:7E:64:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d6:09:f5:d2:15:bb:cf:e3:47:ca:2f:73:7c:c0:02:52:d0:
         96:24:e6:04:4e:d0:72:d0:12:9d:84:70:c3:fd:09:1c:5e:d1:
         b6:ba:b0:82:87:bd:62:c9:9b:a6:64:39:86:4b:ae:de:fe:06:
         20:2b:be:79:f7:57:1d:c4:bd:9e:19:63:3c:0d:09:73:3b:ba:
         83:a9:41:20:3c:5d:6e:6f:04:c4:86:b1:38:75:75:76:94:0c:
         66:dc:84:a4:7e:54:9a:d0:e0:c5:06:2b:87:4f:df:e8:71:33:
         93:d0:aa:95:60:cd:71:74:70:b9:e9:3d:9f:55:16:14:8c:fd:
         1d:36:72:fd:be:52:98:c3:2c:b1:db:56:63:1d:b6:6f:30:98:
         5d:38:ea:54:f0:45:a1:c9:23:b6:ba:37:aa:07:24:b3:8c:4c:
         dd:0a:d6:d9:3a:ef:28:ea:66:5f:8b:e9:9d:b4:e2:d3:38:a2:
         67:80:f0:8f:1b:21:9d:e2:33:28:45:cf:a8:04:f6:18:75:04:
         92:ef:5f:2f:8a:55:5c:67:81:6e:e7:4a:44:ad:a4:25:d3:8b:
         0a:1b:c0:f9:69:9a:2d:7c:6f:41:43:51:e2:4d:b9:61:f2:40:
         19:15:92:32:e5:6f:b7:83:e4:bd:cc:49:69:44:8e:51:0f:b5:
         90:b4:48:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:40 2026 by rpki-client