Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
File:                     sHoKQBnouCACE78tzPxocPheBGY.mft (raw, json)
Hash identifier:          m9cUuMPpkk/XZqsULV9u/1n2wUj4noiKz7F7GwIjv4k=
Subject key identifier:   34:0C:8E:6C:10:21:D8:9F:B1:0C:34:EA:EE:BD:39:49:3F:48:F4:C4
Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66
Certificate issuer:       /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
Certificate serial:       0D44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
Manifest number:          0D29
Signing time:             Tue 22 Sep 2026 18:09:17 +0000
Manifest this update:     Tue 22 Sep 2026 18:09:16 +0000
Manifest next update:     Tue 29 Sep 2026 18:09:16 +0000
Files and hashes:         1: sHoKQBnouCACE78tzPxocPheBGY.crl (hash: v8BkaKRWTLablhpCb3Q3EMlGHdL2B58Sfk5h6zqSzPE=)
                          2: 6ED5481209DF11EAA6052433C4F9AE02.roa (hash: S8UR8Pn5oelpMcuQkBy3qp9Od6g69KBr7LuxEQT5fp0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl
                          rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3396 (0xd44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
        Validity
            Not Before: Sep 22 18:09:16 2026 GMT
            Not After : Sep 29 18:09:16 2026 GMT
        Subject: CN=6ab2c44d-b11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d7:de:b1:1a:d9:ac:75:53:15:45:69:dc:c3:
                    1e:f2:f5:fb:dc:8e:6a:b7:ea:92:77:92:15:b0:d4:
                    f0:ea:c4:80:57:d0:5c:df:91:a1:ef:f0:af:50:52:
                    75:44:83:d5:72:e0:b6:80:ac:67:7d:72:fe:24:ed:
                    38:6d:b0:f1:d5:a5:1c:e8:4b:3e:77:17:b6:ae:4e:
                    ab:f0:d2:87:84:94:b5:1d:35:c4:95:eb:69:f8:18:
                    d4:50:74:ae:a2:6a:9f:1f:7a:4b:0a:11:f3:50:37:
                    ec:94:d5:98:ea:6e:4e:4d:05:62:8c:5e:5d:f2:d0:
                    00:dc:22:78:9f:8c:21:8d:07:e0:c3:52:35:d4:f1:
                    08:a4:d1:42:22:a7:63:f0:30:e6:53:9f:23:39:1b:
                    1e:6b:f8:4e:cb:0c:18:f9:20:19:24:4a:aa:e6:4a:
                    91:2f:3f:bf:7d:87:fe:b3:61:b6:e2:c9:3c:ac:fa:
                    de:c6:69:a3:15:2e:b5:c7:42:86:ae:ee:e9:1e:b2:
                    15:29:75:6e:ad:74:38:71:b5:38:fb:c8:4a:05:bd:
                    df:b0:d0:8a:86:08:52:99:40:8b:16:55:c8:28:bc:
                    06:c9:f1:b8:3a:91:b9:1a:8c:1a:6c:1b:31:0b:55:
                    0b:7a:86:c1:fb:92:d9:67:a8:d6:38:82:95:d7:55:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0C:8E:6C:10:21:D8:9F:B1:0C:34:EA:EE:BD:39:49:3F:48:F4:C4
            X509v3 Authority Key Identifier:
                keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b6:67:dc:ac:b0:94:15:0e:29:b3:71:0d:b7:66:67:a5:d5:
         07:a3:ca:e8:1e:c0:05:0c:92:33:d1:ed:9f:3a:01:d9:41:4f:
         6f:81:cb:d3:55:ed:b7:96:62:25:02:6b:7a:62:4a:2a:29:19:
         de:bc:3f:5f:9f:74:1f:ab:43:f8:bd:3d:10:8d:49:4c:83:9f:
         6b:2a:28:45:e7:22:b4:b6:f6:c3:e7:c3:02:21:d8:af:c0:04:
         30:8c:e0:46:6e:20:63:1c:6c:2d:3a:af:a8:04:eb:a8:31:c0:
         71:7f:82:d7:cd:d6:89:36:17:20:f3:a2:d8:e8:cd:74:05:4e:
         11:68:f2:78:06:d3:b2:66:66:c8:9e:40:5e:a3:da:0a:97:35:
         bd:2a:38:14:87:65:a3:a3:57:f6:92:71:a4:1a:19:ab:02:4b:
         24:bc:ea:75:40:5d:84:da:23:54:10:31:a2:9c:35:47:62:fb:
         3b:46:ea:7d:43:eb:76:17:22:ad:07:33:0a:d6:3c:f9:e4:4e:
         41:0b:26:f5:0f:5b:f3:e6:1a:d3:50:24:60:78:0d:79:a6:5f:
         36:a9:d8:17:ff:05:42:62:eb:88:1a:fb:2d:03:e9:fc:71:4f:
         8a:75:60:1d:99:b7:a9:93:1e:18:8a:b0:71:8f:74:05:32:d6:
         ee:f8:cc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:39:39 2026 by rpki-client