Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft
File:                     SoXPE4hy0-RPkNe28wKPC1BnNMw.mft (raw, json)
Hash identifier:          ahUZdS05viD4dUIUiqS2ChW8NGokZ0MlEpYxU6gsEpg=
Subject key identifier:   92:BB:10:80:3F:BD:59:19:86:96:08:07:14:CE:1C:46:A8:1D:02:C4
Authority key identifier: 4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC
Certificate issuer:       /CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC
Certificate serial:       04DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft
Manifest number:          05D5
Signing time:             Sat 03 Oct 2026 00:07:22 +0000
Manifest this update:     Sat 03 Oct 2026 00:07:22 +0000
Manifest next update:     Sat 10 Oct 2026 00:07:22 +0000
Files and hashes:         1: SoXPE4hy0-RPkNe28wKPC1BnNMw.crl (hash: ARPDMbNe9nxZqhmARgmtAMQCXoOcHacqGQ2oym36Ypg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl
                          rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1246 (0x4de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D0AF, serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC
        Validity
            Not Before: Oct  3 00:07:22 2026 GMT
            Not After : Oct 10 00:07:22 2026 GMT
        Subject: CN=6ac0473a-f77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4a:0e:8f:a1:16:7d:c0:53:22:7f:45:a8:77:
                    f0:5c:58:e2:70:7e:24:65:ac:f2:04:19:c8:78:1a:
                    a5:76:93:ec:c8:c8:76:7f:d7:e4:6e:49:26:41:92:
                    6e:c8:dd:8a:8a:4d:56:34:e1:50:37:d8:78:fd:c1:
                    3b:9f:53:23:99:d6:4d:60:80:c3:8e:2f:f5:f2:fe:
                    63:d1:1e:6b:7c:db:0e:77:a8:52:23:2d:ea:d4:2d:
                    b8:bc:67:a6:f8:f4:e2:a8:58:56:94:97:02:e5:d1:
                    c9:9b:34:4e:88:66:80:81:89:4b:93:e7:1c:e9:97:
                    2a:e5:79:d2:38:d5:bb:87:4f:07:77:bd:56:fa:35:
                    ef:1b:ec:30:60:c6:7d:f9:f2:fb:06:c7:6a:96:05:
                    5f:81:27:b9:79:89:4b:37:f5:77:97:2a:2d:2e:94:
                    d3:8c:1a:91:8c:de:bb:66:42:f7:ad:65:e3:15:3c:
                    84:d7:66:18:f4:a5:46:26:90:d2:91:44:04:14:09:
                    64:f0:23:25:b4:64:ba:bd:8c:db:94:14:05:da:5b:
                    fa:73:a2:c0:62:7a:3a:04:56:ca:08:cf:23:c1:4c:
                    71:80:16:f6:84:85:78:39:88:97:fc:c8:ca:50:a3:
                    b1:06:25:df:9e:18:31:6b:a0:b1:5c:7e:a4:eb:43:
                    30:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BB:10:80:3F:BD:59:19:86:96:08:07:14:CE:1C:46:A8:1D:02:C4
            X509v3 Authority Key Identifier:
                keyid:4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9d:55:8d:32:47:63:82:9a:ed:16:75:0b:33:78:41:be:db:
         45:0f:ea:ec:8c:2c:06:d0:72:ea:76:2b:8c:50:6d:a8:c5:a5:
         b9:5b:ce:e0:d2:b5:97:89:39:a5:7c:62:e4:28:0f:c9:93:8f:
         23:ac:5b:fb:1a:ca:cc:f1:c3:71:f2:ce:a7:04:2e:c3:28:a2:
         e4:d7:38:73:79:8c:da:0c:2e:af:57:c0:77:5c:76:ff:1f:54:
         73:5e:8a:ad:09:42:36:f5:bd:e8:e6:51:c7:96:01:7a:18:4d:
         3b:ea:81:e4:cc:3a:d5:cd:d0:d4:3c:15:3d:a4:e3:fc:2f:bd:
         11:b6:59:26:2a:f7:d4:18:ef:25:a9:a2:1b:ac:24:30:77:36:
         fb:de:39:15:94:17:0c:75:82:d0:33:c1:dc:86:27:c5:62:3f:
         da:18:dc:1b:96:2f:50:b0:7a:c4:36:4e:27:bb:69:21:23:a8:
         e1:36:45:6d:67:80:c0:22:13:c9:ab:cc:4a:6d:f6:f8:6a:5f:
         cf:ee:bf:97:9d:34:2e:e1:97:ac:bd:e2:2e:29:2f:1e:80:ca:
         78:be:51:99:7b:cb:13:64:8c:ef:06:c1:b8:3e:62:88:cd:2d:
         97:96:c9:c5:b5:6f:98:54:2b:ad:28:c8:3d:2e:d5:58:18:a2:
         33:14:ab:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEQwQUYxMTAvBgNVBAUTKDRBODVDRjEzODg3MkQzRTQ0RjkwRDdCNkYzMDI4RjBC
NTA2NzM0Q0MwHhcNMjYxMDAzMDAwNzIyWhcNMjYxMDEwMDAwNzIyWjAYMRYwFAYD
VQQDEw02YWMwNDczYS1mNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi0oOj6EWfcBTIn9FqHfwXFjicH4kZazyBBnIeBqldpPsyMh2f9fkbkkmQZJu
yN2Kik1WNOFQN9h4/cE7n1MjmdZNYIDDji/18v5j0R5rfNsOd6hSIy3q1C24vGem
+PTiqFhWlJcC5dHJmzROiGaAgYlLk+cc6Zcq5XnSONW7h08Hd71W+jXvG+wwYMZ9
+fL7BsdqlgVfgSe5eYlLN/V3lyotLpTTjBqRjN67ZkL3rWXjFTyE12YY9KVGJpDS
kUQEFAlk8CMltGS6vYzblBQF2lv6c6LAYno6BFbKCM8jwUxxgBb2hIV4OYiX/MjK
UKOxBiXfnhgxa6CxXH6k60MwFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJK7EIA/
vVkZhpYIBxTOHEaoHQLEMB8GA1UdIwQYMBaAFEqFzxOIctPkT5DXtvMCjwtQZzTM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBBRi8xRTMzOUIzNjg4
REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9Tb1hQRTRoeTAtUlBrTmUyOHdLUEMxQm5O
TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NvWFBFNGh5MC1SUGtOZTI4d0tQQzFCbk5Ndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RDBBRi8xRTMzOUIzNjg4REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9Tb1hQRTRoeTAt
UlBrTmUyOHdLUEMxQm5OTXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHp1VjTJHY4Ka7RZ1CzN4Qb7bRQ/q7IwsBtBy6nYrjFBtqMWluVvO4NK1l4k5
pXxi5CgPyZOPI6xb+xrKzPHDcfLOpwQuwyii5Nc4c3mM2gwur1fAd1x2/x9Uc16K
rQlCNvW96OZRx5YBehhNO+qB5Mw61c3Q1DwVPaTj/C+9EbZZJir31BjvJamiG6wk
MHc2+945FZQXDHWC0DPB3IYnxWI/2hjcG5YvULB6xDZOJ7tpISOo4TZFbWeAwCIT
yavMSm32+Gpfz+6/l500LuGXrL3iLikvHoDKeL5RmXvLE2SM7wbBuD5iiM0tl5bJ
xbVvmFQrrSjIPS7VWBiiMxSrOQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:52:01 2026 by rpki-client