Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
File:                     sHoKQBnouCACE78tzPxocPheBGY.mft (raw, json)
Hash identifier:          qjDGsVmn0v6srD27+eNm9m+afgCUO7bShtr2DC+SGYQ=
Subject key identifier:   CF:12:E6:DA:B8:96:75:16:8F:6C:15:4F:6A:21:8B:79:4F:B1:6B:F6
Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66
Certificate issuer:       /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
Certificate serial:       0CF0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
Manifest number:          0CD6
Signing time:             Thu 16 Apr 2026 18:17:27 +0000
Manifest this update:     Thu 16 Apr 2026 18:17:26 +0000
Manifest next update:     Thu 23 Apr 2026 18:17:26 +0000
Files and hashes:         1: sHoKQBnouCACE78tzPxocPheBGY.crl (hash: 5vrMfh7Rfam7BnioLRFdG2tMhLO8z8VwEpy69pNQPfk=)
                          2: 6ED5481209DF11EAA6052433C4F9AE02.roa (hash: HrmVnXUGJt8jw2Un+GAxOWQzRcn/YFzs1aPIkDSrkXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl
                          rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3312 (0xcf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
        Validity
            Not Before: Apr 16 18:17:26 2026 GMT
            Not After : Apr 23 18:17:26 2026 GMT
        Subject: CN=69e127b7-5a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:6e:38:65:08:da:2d:b7:96:ec:70:58:17:
                    9b:9f:63:dd:a7:cc:74:86:db:00:57:c5:8e:f7:04:
                    c9:33:b5:8d:11:13:dd:7f:a7:74:c7:c1:3d:2e:31:
                    26:94:ed:b6:47:dc:59:f3:53:a8:61:b3:71:78:60:
                    00:8c:f1:15:fc:80:43:81:79:71:8b:9c:a1:16:d2:
                    af:c0:a9:ea:6e:7d:4b:33:24:d5:f1:3c:63:56:62:
                    64:e0:87:89:21:89:fc:f0:5b:e7:50:c2:3d:b6:ac:
                    f7:0f:e6:f3:4e:a9:a4:8c:c8:b7:3f:bb:1e:1d:18:
                    be:12:17:b6:cb:8e:5c:10:ae:02:e7:1b:69:4a:24:
                    d8:db:0c:7f:a3:7a:60:61:ad:24:4a:98:16:fb:73:
                    26:3b:38:bc:b5:0a:c0:29:3d:f2:0b:b6:14:58:42:
                    ae:56:8c:92:58:16:d7:2b:6b:4d:08:1f:0e:a1:6e:
                    31:55:83:a9:88:9e:26:ab:30:74:05:b0:a8:99:5a:
                    5a:78:c4:f7:71:c8:1a:50:37:19:5b:f0:c0:8e:8d:
                    16:3b:85:b7:62:73:c1:0a:d2:8b:c7:64:b5:2b:27:
                    4e:73:ff:e2:8c:81:ba:31:af:c3:a4:24:07:8d:29:
                    a7:c9:fa:15:d8:27:db:be:43:5f:31:18:0c:de:e5:
                    39:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:12:E6:DA:B8:96:75:16:8F:6C:15:4F:6A:21:8B:79:4F:B1:6B:F6
            X509v3 Authority Key Identifier:
                keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:44:c4:2c:c5:d7:5b:79:22:18:60:b0:81:fb:b7:44:05:48:
         70:66:8a:09:02:f0:cd:32:9e:0c:35:9e:8a:b0:a4:20:da:33:
         42:8c:96:93:94:fe:74:8a:a7:3c:6b:1c:82:3d:2e:c6:a9:23:
         3e:e2:c3:76:d5:ad:07:ba:c7:f9:47:b5:31:a5:79:2b:02:2e:
         f1:98:dc:fe:fa:dc:be:70:80:43:bd:9e:3e:63:1d:fc:c4:12:
         f5:9f:0f:cd:5c:e0:76:dd:d5:ad:77:0b:1a:0e:6b:00:ab:53:
         6c:b6:a8:4c:cb:9b:71:35:02:8f:e7:4d:41:fd:9c:10:85:2e:
         27:d8:16:de:07:11:99:8f:81:d1:4c:5b:f2:19:63:62:73:e7:
         97:71:43:5f:5d:12:de:6e:65:89:25:a5:a3:95:6a:3c:01:4b:
         ab:1d:70:d7:b1:dc:0b:f8:b8:ab:19:47:49:39:87:2d:51:15:
         e2:0a:53:34:d9:59:10:87:eb:65:71:cc:c7:51:68:78:02:ce:
         67:cc:b8:d2:20:cf:a8:b9:2c:fe:9b:c1:51:b1:ef:7a:de:77:
         cb:e4:45:cb:90:f6:83:7d:2b:59:14:31:80:9c:1c:7f:88:e7:
         bf:51:7c:85:5a:70:e9:09:cf:3f:10:e3:d0:d8:fb:0c:a0:95:
         27:ea:76:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:01 2026 by rpki-client