Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
File:                     sHoKQBnouCACE78tzPxocPheBGY.mft (raw, json)
Hash identifier:          qCHrcQrYw2x0FSZQbWMuxNLudvBluNHdIqB5bESTYy8=
Subject key identifier:   08:B7:0E:88:FA:C9:39:77:BD:7F:F8:36:58:30:6A:6D:E0:77:E0:4F
Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66
Certificate issuer:       /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
Certificate serial:       0CEA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
Manifest number:          0CD0
Signing time:             Sat 04 Apr 2026 18:13:26 +0000
Manifest this update:     Sat 04 Apr 2026 18:13:25 +0000
Manifest next update:     Sat 11 Apr 2026 18:13:25 +0000
Files and hashes:         1: sHoKQBnouCACE78tzPxocPheBGY.crl (hash: jUw4wLAZbunZqmDOMEyHGMHPymduEFlOjqzcR4vD9Gg=)
                          2: 6ED5481209DF11EAA6052433C4F9AE02.roa (hash: HrmVnXUGJt8jw2Un+GAxOWQzRcn/YFzs1aPIkDSrkXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl
                          rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3306 (0xcea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466
        Validity
            Not Before: Apr  4 18:13:25 2026 GMT
            Not After : Apr 11 18:13:25 2026 GMT
        Subject: CN=69d154c5-a6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b1:38:a7:7a:20:0f:92:53:20:6c:01:82:51:
                    07:32:de:ea:15:42:14:e6:d1:23:b1:7a:80:af:52:
                    84:5c:0f:57:de:cd:c4:be:02:c8:a0:e9:e2:40:f5:
                    47:f2:f3:a8:c8:d7:d1:fc:25:30:5f:6f:27:fb:97:
                    ac:c6:85:a6:ff:2d:81:a5:e4:35:2c:43:64:5e:dc:
                    ea:fa:3c:92:bd:c4:a4:51:0c:85:bf:7e:6d:81:55:
                    28:5b:5c:54:2e:81:db:3e:d6:3a:08:84:b8:56:61:
                    d3:6d:33:5e:bc:ea:cc:3b:ca:e3:d1:55:fb:0e:ad:
                    b5:e7:dc:9a:ad:b4:8e:87:9e:d6:9a:aa:03:cd:19:
                    a1:2d:d6:3f:01:05:97:b8:e7:d5:ce:f2:65:1a:40:
                    25:b3:b3:2a:54:df:e9:c5:01:a2:e0:d3:ca:48:72:
                    c3:ec:bb:dc:12:0a:7f:a5:35:85:ae:81:82:37:51:
                    e3:6b:07:ca:f4:36:00:69:44:e6:ce:7b:08:d4:88:
                    6c:62:47:c2:e8:9b:8b:00:8b:c9:e2:ca:8c:0a:61:
                    6e:7c:f0:fd:db:3e:3e:91:c1:5b:f0:e7:d3:60:52:
                    22:bf:d1:99:90:9b:30:a8:18:aa:34:e9:1f:00:81:
                    73:de:df:74:88:b7:62:f3:0e:a3:52:61:2d:3f:0c:
                    d3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B7:0E:88:FA:C9:39:77:BD:7F:F8:36:58:30:6A:6D:E0:77:E0:4F
            X509v3 Authority Key Identifier:
                keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a2:94:08:5c:6e:ea:d1:c2:f5:9a:83:e4:ed:10:64:02:b6:
         bd:51:0a:17:8d:11:90:1b:7a:37:85:77:4f:8d:31:b6:c0:8e:
         08:27:bb:1f:31:9f:0f:43:ec:49:f0:5e:1f:e1:7e:c2:a3:40:
         14:31:4d:2c:25:fe:70:50:f6:18:b8:4d:f6:9a:64:91:fb:37:
         79:01:1d:11:cc:d7:4f:81:86:6d:06:19:6c:a6:87:9f:11:38:
         b6:7f:00:29:86:08:b4:73:9b:be:b4:91:8d:4a:9a:a7:63:b2:
         91:df:0e:92:8a:9f:82:1f:bb:43:b1:a5:cb:26:47:70:54:6f:
         9b:b7:30:1f:15:a9:e8:0e:f8:cb:26:11:25:e0:cd:90:c1:3d:
         f3:4e:8b:2f:00:20:29:ed:5a:cf:84:94:aa:a3:c7:f5:1a:17:
         54:c6:72:f6:22:20:17:6c:ce:3c:8e:e6:11:58:78:7e:b1:be:
         d9:68:80:64:fc:6b:14:08:15:af:97:bd:29:1e:50:93:4c:df:
         24:9c:33:3d:e3:d5:86:56:99:b0:92:1f:7e:35:98:04:89:ca:
         5c:42:93:dc:c3:da:77:6b:5a:5f:53:9a:74:d9:44:63:3d:7e:
         97:48:47:52:95:68:2e:ff:b3:99:d8:06:38:73:1a:64:8f:6c:
         bd:24:b3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:59 2026 by rpki-client