Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
File:                     SOkLc7Sfo6317JGlzNI9rTXTxI4.mft (raw, json)
Hash identifier:          SM+YtoK+z/nkVAPbQInIRYEPvHX2fgMJqy3uFSUhXm4=
Subject key identifier:   69:09:70:55:A3:69:DD:D8:57:4B:88:AF:F3:43:3C:36:4B:B9:81:A3
Authority key identifier: 48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E
Certificate issuer:       /CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
Certificate serial:       078C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
Manifest number:          0785
Signing time:             Thu 16 Apr 2026 21:27:05 +0000
Manifest this update:     Thu 16 Apr 2026 21:27:05 +0000
Manifest next update:     Thu 23 Apr 2026 21:27:05 +0000
Files and hashes:         1: SOkLc7Sfo6317JGlzNI9rTXTxI4.crl (hash: fdHs/TAS12jnZCWvwcl9Qf+yrJjerR0ktGll50qY4cU=)
                          2: 8CFEF8EE50AE11EBB71FB743C4F9AE02.roa (hash: 0b0HxKXaBgsrMjbgtSVdcN+5q1xfdbTvPOaj8MWjzqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl
                          rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:27:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1932 (0x78c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D228, serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
        Validity
            Not Before: Apr 16 21:27:05 2026 GMT
            Not After : Apr 23 21:27:05 2026 GMT
        Subject: CN=69e15429-9eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:59:c0:8f:59:37:10:33:e0:e1:1c:cb:8a:
                    9b:de:36:74:55:65:29:f5:b9:1d:1d:88:70:62:95:
                    4b:39:af:d8:b2:df:73:2c:1e:7b:9d:e4:d5:a0:2b:
                    4e:6a:2c:a0:f9:2c:47:ab:86:20:55:a9:3b:0e:51:
                    a0:cf:f9:7f:53:a4:57:3f:1d:39:69:58:bb:3e:c3:
                    78:d1:7e:79:db:06:51:89:61:2e:3a:44:6f:9f:3f:
                    1b:89:c0:9a:34:5e:0a:96:af:9a:ec:1e:5e:d3:cd:
                    c2:ba:cd:01:0d:74:86:b2:76:73:37:7d:a9:06:e2:
                    6f:a8:57:07:4d:3b:77:0e:6b:66:59:4d:2c:95:8b:
                    78:bd:15:9c:3f:06:24:33:2e:e8:43:5e:31:34:b8:
                    6d:d9:5a:00:07:99:c8:b8:df:e2:8e:86:fc:7d:2f:
                    23:75:08:95:1a:f5:41:f3:bd:33:0f:7b:76:71:30:
                    ac:86:c0:7b:ef:cd:02:e5:f0:fa:5f:87:46:e9:2c:
                    9e:6d:60:44:25:27:b6:41:2e:29:86:69:d3:6f:54:
                    32:98:dc:a0:a8:f4:a5:41:49:99:f9:ee:8a:b6:c7:
                    09:67:60:08:4c:cb:42:da:05:1b:1e:a8:25:75:58:
                    f1:1d:df:b4:ae:b4:4b:a8:e3:d4:cf:9a:c0:6f:3a:
                    86:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:09:70:55:A3:69:DD:D8:57:4B:88:AF:F3:43:3C:36:4B:B9:81:A3
            X509v3 Authority Key Identifier:
                keyid:48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:31:08:1a:9c:f4:aa:de:fc:7e:21:b9:7f:98:44:f7:bc:20:
         33:d3:58:78:78:54:70:37:28:e9:ca:4a:a1:aa:72:22:4a:9c:
         84:a8:f4:ef:0d:c4:6e:1f:57:e1:be:c7:cc:32:cb:e7:f1:8c:
         27:45:fe:73:c7:48:3f:1f:5c:ad:37:97:d9:21:38:5b:f3:0a:
         82:ef:36:29:e2:c3:6f:85:f3:c0:40:6a:3d:bc:eb:44:3d:4d:
         81:e7:95:c4:00:9b:b7:77:d3:eb:ca:e0:47:5e:1c:f6:e4:15:
         b4:9a:48:50:dd:0e:91:50:83:1b:1c:d8:ac:27:7e:6f:b6:64:
         d7:45:fd:7e:0b:50:ad:14:ea:73:ea:06:4c:2b:7d:3b:1b:e7:
         45:de:bf:3d:31:21:8c:de:bb:d5:24:75:8c:86:d6:a3:b6:b0:
         f5:0e:fa:c4:21:a5:d2:0e:24:f1:7c:94:60:56:1f:74:ab:a9:
         f4:d2:90:c8:19:8a:05:79:20:87:44:8c:e1:d8:ce:67:b5:57:
         df:0b:86:fd:56:ec:be:61:9a:0e:a1:20:1e:a4:64:f8:db:0b:
         94:16:18:61:4b:56:fd:e7:21:46:62:39:95:03:2f:14:34:15:
         7c:d4:a3:e5:12:e3:6e:ba:03:00:0d:bf:6a:83:f2:49:5c:ce:
         61:b1:b7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:00:34 2026 by rpki-client