Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
File:                     SOkLc7Sfo6317JGlzNI9rTXTxI4.mft (raw, json)
Hash identifier:          nVkiJzRo2LtWMJX0pAcpLVXXnL6a5z1YgZMM77eRi28=
Subject key identifier:   BA:AD:5E:34:5E:04:53:1F:AE:F8:C5:9A:05:80:61:D6:A7:30:3E:D1
Authority key identifier: 48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E
Certificate issuer:       /CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
Certificate serial:       076E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
Manifest number:          0769
Signing time:             Sat 28 Feb 2026 22:04:17 +0000
Manifest this update:     Sat 28 Feb 2026 22:04:16 +0000
Manifest next update:     Sat 07 Mar 2026 22:04:16 +0000
Files and hashes:         1: SOkLc7Sfo6317JGlzNI9rTXTxI4.crl (hash: sUIkFkY0YWn1u/XsSHV6ktqzi4p8PHeHC7vZEdxAeQQ=)
                          2: 8CFEF8EE50AE11EBB71FB743C4F9AE02.roa (hash: xRXc4Qynp20VBH0uvYkKK7b4+52BnXGj7roDL8ZzWEU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl
                          rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1902 (0x76e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D228, serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
        Validity
            Not Before: Feb 28 22:04:16 2026 GMT
            Not After : Mar  7 22:04:16 2026 GMT
        Subject: CN=69a36661-480d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:83:f2:7b:09:eb:8b:fe:d6:61:c0:66:c1:
                    b2:9c:b8:a1:6d:48:2a:b2:f4:aa:d7:45:c5:92:c1:
                    8b:7a:36:dd:09:85:4e:0f:27:25:fa:18:2c:e9:42:
                    58:14:2c:2d:63:b8:a1:91:d0:97:8e:8d:43:3c:34:
                    e0:af:24:8f:a7:ce:1c:a1:17:e8:40:06:64:bc:8f:
                    cb:b0:3c:03:ca:31:d3:6c:fb:1a:bc:1d:bf:5a:b0:
                    2f:be:0a:f8:30:60:5c:52:bc:d9:80:ca:51:14:13:
                    80:66:77:d5:a6:50:36:95:bc:47:1e:b7:47:da:59:
                    3f:8d:7e:62:19:c5:f2:9d:fd:3f:a2:a4:6b:d4:29:
                    29:11:f6:6f:ca:45:cf:36:6d:5d:6d:69:22:d2:b1:
                    fe:85:d0:2c:cf:69:bb:d6:12:3f:67:49:34:e6:9b:
                    40:22:7d:2e:7c:73:41:00:b6:84:92:20:16:aa:29:
                    44:b2:6e:bf:21:c8:bb:e7:38:55:76:47:7a:3a:1a:
                    bf:09:4a:25:1c:91:07:5c:88:3a:22:32:08:a9:78:
                    1c:00:79:c5:36:00:03:ca:e2:ec:e3:f6:a1:53:cf:
                    0f:af:67:5e:1f:3e:f9:93:7e:e9:59:4c:86:25:0d:
                    50:f7:34:55:db:88:2f:d6:20:13:15:2b:e5:eb:9b:
                    67:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AD:5E:34:5E:04:53:1F:AE:F8:C5:9A:05:80:61:D6:A7:30:3E:D1
            X509v3 Authority Key Identifier:
                keyid:48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:5e:28:5c:33:87:f7:59:5c:d3:3a:18:d9:00:52:df:a7:98:
         ac:66:d0:ab:3b:cb:40:91:90:88:d2:00:a0:d8:fc:88:05:aa:
         d9:f9:79:c0:12:1c:f1:5f:7c:ed:10:2f:bc:3b:a8:08:5e:67:
         a0:62:2a:36:31:a3:f0:7b:41:4c:99:ff:5a:59:ec:d5:e4:b1:
         e0:b4:96:25:b6:4b:ca:a7:21:ba:8c:ee:7d:18:8f:5d:28:76:
         a0:47:39:32:f9:5b:eb:92:db:a8:07:5e:5d:60:33:ee:fe:a2:
         ff:96:0f:bd:6b:70:6d:6f:95:3b:1a:64:64:9b:93:30:17:96:
         5f:de:c1:50:ad:c3:0d:0f:9c:aa:d8:4b:26:aa:2b:0e:e4:e7:
         a0:50:2a:3a:fd:84:97:fe:12:88:fc:a7:ab:48:25:ef:b8:ee:
         1b:c4:3e:d7:bb:45:ec:9b:ea:41:97:b5:40:0d:15:fe:3e:35:
         d0:79:db:a2:15:62:4d:7e:1b:66:36:be:e1:db:dc:c5:b9:fe:
         81:74:8b:6f:63:a5:90:29:25:5f:a7:bc:5d:79:80:f1:32:e7:
         99:18:6f:bd:bb:7d:cd:1a:ea:31:fd:a7:c8:9d:0f:72:32:1f:
         64:2f:9b:52:62:13:1d:dc:55:f4:76:a7:fb:97:06:73:11:ba:
         cd:6a:a1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:41 2026 by rpki-client