Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
File:                     SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft (raw, json)
Hash identifier:          LwNhDTENcpJvcTPz+Oc92tz1nwpqzEP13NVA0U6vqxU=
Subject key identifier:   FD:73:47:48:B4:4B:A1:D3:A6:83:15:0E:0E:17:0B:D8:AC:77:CB:1E
Authority key identifier: 4A:43:89:FE:91:F9:A1:24:C7:76:F8:9B:B2:1E:E0:7C:3E:7E:64:79
Certificate issuer:       /CN=A916CDAC/serialNumber=4A4389FE91F9A124C776F89BB21EE07C3E7E6479
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
Manifest number:          6B
Signing time:             Sun 05 Apr 2026 07:15:21 +0000
Manifest this update:     Sun 05 Apr 2026 07:15:20 +0000
Manifest next update:     Sun 12 Apr 2026 07:15:20 +0000
Files and hashes:         1: SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl (hash: oOf9ONPJ+zRwYfGWiXX6z2ZTEOWsVh0VL0G4kfhz3hE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl
                          rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDAC, serialNumber=4A4389FE91F9A124C776F89BB21EE07C3E7E6479
        Validity
            Not Before: Apr  5 07:15:20 2026 GMT
            Not After : Apr 12 07:15:20 2026 GMT
        Subject: CN=69d20c09-2b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7b:65:15:03:6f:8c:8f:29:d8:f5:cf:95:01:
                    4b:94:45:81:38:2f:1f:4e:45:09:f9:eb:60:58:3d:
                    bc:84:3b:7b:af:57:d3:41:48:19:e4:04:e1:05:b8:
                    a7:bb:83:7e:67:cb:23:b2:a6:b1:ee:ea:b5:12:27:
                    57:6c:a1:4c:67:c3:7d:5c:7f:62:c6:97:76:f1:e2:
                    88:0d:45:3f:43:c4:44:7e:07:f4:4f:4d:98:50:90:
                    ab:5f:ba:9a:21:49:44:88:0e:a9:c7:0f:68:2f:c1:
                    04:26:1d:2c:a1:1d:e5:07:cc:c2:ce:dc:17:69:8e:
                    e3:4b:88:9b:59:61:db:f7:95:ae:9d:82:b7:0e:30:
                    0b:f8:73:a5:b1:9a:0d:9a:61:19:c8:76:43:6e:a4:
                    85:bf:2e:8a:a6:2d:ca:e4:2a:2f:2d:bc:2a:82:c8:
                    6b:8c:00:be:74:92:3b:69:80:dc:c2:0e:9e:16:8b:
                    53:65:66:5a:0c:e0:41:ca:04:6a:71:a6:d6:0f:d1:
                    3a:bc:cb:1a:db:7c:71:0e:84:8e:19:5f:0e:58:5b:
                    c7:4e:bb:03:43:f0:f9:d9:3d:35:8a:5c:5b:af:37:
                    df:07:32:78:f9:f3:09:b7:91:76:7a:56:54:02:68:
                    07:99:9c:40:94:b7:69:6b:e0:da:56:b2:a5:07:60:
                    84:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:73:47:48:B4:4B:A1:D3:A6:83:15:0E:0E:17:0B:D8:AC:77:CB:1E
            X509v3 Authority Key Identifier:
                keyid:4A:43:89:FE:91:F9:A1:24:C7:76:F8:9B:B2:1E:E0:7C:3E:7E:64:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/82C0AA208F3911F08632A039C4F9AE02/SkOJ_pH5oSTHdvibsh7gfD5-ZHk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:21:de:47:d6:57:59:1f:64:31:51:a0:cd:18:31:32:86:67:
         d2:b1:36:fe:db:39:69:aa:85:48:aa:a0:8e:18:75:30:d4:20:
         53:0f:e9:61:b8:67:16:ff:18:f8:08:df:2d:4f:ab:8a:f0:2c:
         09:25:1e:13:83:e4:3c:86:d6:d8:4a:c8:90:82:55:12:38:3d:
         2c:5a:ee:d1:39:bb:a2:f4:50:41:bf:61:5e:a7:6a:ee:69:0d:
         76:36:2d:4f:b9:f0:b0:26:da:fb:cb:62:89:10:43:8a:02:27:
         2a:c8:f3:fe:e0:8b:d7:7e:ee:78:5b:11:80:c3:8e:50:41:b3:
         9c:ac:97:9b:a9:0d:37:96:18:80:92:4e:26:a6:1e:8e:00:2e:
         9c:1a:e9:c0:e3:f8:50:e2:b6:67:d6:8e:34:a8:4d:fa:89:e6:
         79:f5:60:0e:54:a0:f3:b7:18:08:eb:5c:0f:86:f8:1d:54:4f:
         1b:ae:2a:02:26:73:67:df:62:25:19:e9:5f:43:58:48:72:6c:
         c7:28:cc:94:ff:1b:d8:26:c6:b8:9b:86:69:ab:0b:01:39:b7:
         f3:78:03:5f:1e:cc:d0:39:10:3e:f8:1c:f6:51:7e:5c:ab:5b:
         b5:2a:ff:c5:32:2f:c3:ca:7e:da:39:b8:7d:62:f4:3e:01:ea:
         22:ec:f4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:16 2026 by rpki-client