Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
File:                     sHoKQBnouCACE78tzPxocPheBGY.mft (raw, json)
Hash identifier:          RfYOYjVGubrarfRIQV1ppvaHBpQfP4qS5ueR7MIrKPM=
Subject key identifier:   35:59:DA:B6:8F:87:E1:E0:D1:F7:6D:33:4A:D0:01:19:62:FE:33:6F
Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66
Certificate issuer:       /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
Certificate serial:       0D0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
Manifest number:          0CF3
Signing time:             Fri 12 Jun 2026 18:19:36 +0000
Manifest this update:     Fri 12 Jun 2026 18:19:36 +0000
Manifest next update:     Fri 19 Jun 2026 18:19:36 +0000
Files and hashes:         1: sHoKQBnouCACE78tzPxocPheBGY.crl (hash: s1LB/sSyz6aCEaexBaKUGBLcSWmv2Hy2CAXt0nI8OjI=)
                          2: 6ED5481209DF11EAA6052433C4F9AE02.roa (hash: HrmVnXUGJt8jw2Un+GAxOWQzRcn/YFzs1aPIkDSrkXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl
                          rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3341 (0xd0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
        Validity
            Not Before: Jun 12 18:19:36 2026 GMT
            Not After : Jun 19 18:19:36 2026 GMT
        Subject: CN=6a2c4db8-2959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b5:3b:b3:65:5f:1f:ae:68:51:b6:b8:8b:22:
                    d9:9e:47:30:89:5e:c5:6b:90:07:36:60:1d:4b:9d:
                    41:05:c3:cc:b8:8b:e9:17:c4:17:a6:6b:26:2e:c6:
                    1f:3b:eb:f6:6e:c7:85:9b:2c:cc:f8:f1:88:8f:11:
                    8c:c3:c6:dd:7d:e9:d3:75:a2:ce:b3:4e:ea:9c:fe:
                    33:3f:8b:8e:7a:24:75:2e:20:9d:6c:4b:f2:76:a6:
                    10:f9:fb:b0:f1:d7:55:d7:bf:90:1c:b8:20:82:6f:
                    b9:a5:9b:c3:f1:61:5d:03:84:26:d6:22:8a:8f:c8:
                    1d:4e:72:37:ab:8f:21:19:49:fe:42:25:56:42:06:
                    5e:75:68:5b:0d:71:8d:b1:e3:5d:6f:0d:2e:66:a8:
                    ce:99:04:52:46:9c:23:c7:8c:85:2c:11:00:1e:95:
                    be:1c:68:33:76:43:45:ef:2d:e3:0f:42:df:44:10:
                    c2:ec:37:15:81:41:32:36:0c:92:94:2c:31:42:af:
                    58:93:ae:c8:d4:d4:65:33:66:e6:97:54:e8:45:6f:
                    c0:4d:2d:44:2b:7a:b9:fd:75:05:24:41:94:32:82:
                    7d:65:ea:33:b3:52:02:9c:bf:8f:2e:36:b8:7b:6e:
                    2e:cf:7b:74:fe:e4:d4:88:47:e7:f4:68:ca:68:77:
                    9a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:59:DA:B6:8F:87:E1:E0:D1:F7:6D:33:4A:D0:01:19:62:FE:33:6F
            X509v3 Authority Key Identifier:
                keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6e:12:76:8a:f2:7c:f2:e2:4a:54:77:ff:77:aa:b0:78:bb:
         ce:78:5f:4b:98:36:0e:e5:0d:28:78:14:31:17:73:6c:be:eb:
         b6:1d:46:5a:da:6d:77:7a:a0:46:a1:4b:f7:6d:8e:a4:70:e2:
         a9:22:65:83:dc:fb:11:5d:9a:be:c5:de:44:37:da:43:3b:c1:
         e5:1f:5d:b0:0f:28:f9:ab:15:08:ed:36:ac:68:ea:de:4f:53:
         2a:ba:18:3b:8f:d3:e6:32:01:b1:61:cc:f1:ba:7f:9c:d0:0c:
         b8:2e:2c:da:e3:5c:b0:eb:8a:95:41:08:f9:26:14:3f:8d:9d:
         79:e6:dd:6e:b7:67:93:8d:28:6e:e0:b9:e0:9c:10:5c:1f:d4:
         00:39:35:fd:62:74:75:fc:41:80:eb:b7:31:4b:d7:33:81:1e:
         f8:de:a2:fa:54:92:0d:d4:a8:29:aa:98:f6:95:d8:90:99:7e:
         41:38:9c:47:a8:63:15:20:e8:e2:3e:6c:f2:65:ab:cd:c5:d1:
         3c:db:f6:09:33:2e:fc:3e:d5:1e:73:09:bf:96:5f:b0:33:e0:
         b3:9c:03:0e:bf:1c:6f:66:b0:1f:c3:b7:ff:8c:4b:03:16:9c:
         1e:3b:28:f4:87:76:d1:42:64:78:55:47:6a:e9:0d:a1:50:b8:
         2f:23:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:59 2026 by rpki-client