Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
File:                     SOkLc7Sfo6317JGlzNI9rTXTxI4.mft (raw, json)
Hash identifier:          cf7UGuV2GKTBC/QUl048LwfRTudJxozB6I8qoPNBA2Q=
Subject key identifier:   11:00:D1:EF:2F:0C:5F:78:D9:0C:AC:18:3E:6C:AD:03:92:61:27:AC
Authority key identifier: 48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E
Certificate issuer:       /CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
Certificate serial:       0795
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
Manifest number:          078E
Signing time:             Mon 04 May 2026 21:34:36 +0000
Manifest this update:     Mon 04 May 2026 21:34:35 +0000
Manifest next update:     Mon 11 May 2026 21:34:35 +0000
Files and hashes:         1: SOkLc7Sfo6317JGlzNI9rTXTxI4.crl (hash: vIq4xxgqaZtrBWuFNqOlxwucfV2gMeVPBZqUdIjy6uM=)
                          2: 8CFEF8EE50AE11EBB71FB743C4F9AE02.roa (hash: 0b0HxKXaBgsrMjbgtSVdcN+5q1xfdbTvPOaj8MWjzqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl
                          rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D228, serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
        Validity
            Not Before: May  4 21:34:35 2026 GMT
            Not After : May 11 21:34:35 2026 GMT
        Subject: CN=69f910eb-5393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:46:b8:1b:1e:84:3a:fd:bf:23:d3:cf:c7:
                    48:80:81:88:c5:4c:7f:a8:7d:eb:1c:b7:f9:6a:30:
                    3f:2d:64:41:9a:d1:78:4d:a3:1b:60:62:5f:c1:86:
                    82:88:4d:b7:4c:6d:b4:fd:94:ba:64:3f:d1:6f:54:
                    6c:ad:59:c7:0f:2f:65:1b:cf:b4:f0:dd:10:a1:a1:
                    35:6a:45:04:c8:cc:89:6e:4c:3f:2a:57:e1:1b:4a:
                    87:35:4b:fb:7d:48:24:14:af:8e:62:f5:a0:6f:eb:
                    83:39:f5:c9:ce:6b:80:84:ed:93:c2:2d:a0:49:1f:
                    1d:cf:9b:56:8c:9a:9a:fe:93:ae:ad:5c:a6:6c:dd:
                    7a:35:d3:7a:08:32:34:54:04:69:e4:08:db:3d:f2:
                    03:52:35:d1:92:50:3f:c1:1e:8a:02:63:db:b4:e0:
                    e0:d4:fe:af:2a:e0:91:7b:3f:93:81:d8:fd:31:ac:
                    82:e5:f8:2e:17:9a:bd:7a:20:7f:96:26:6c:eb:52:
                    f6:a3:be:18:c3:6c:06:0b:b9:b4:45:37:01:ef:8c:
                    77:61:4d:54:92:d1:7f:fb:15:95:e4:60:2f:82:a9:
                    51:3a:1d:bb:81:03:8f:b8:79:45:dd:dd:19:7d:5b:
                    4e:e2:c2:e9:8f:5f:4c:a8:8e:51:73:45:88:9b:44:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:00:D1:EF:2F:0C:5F:78:D9:0C:AC:18:3E:6C:AD:03:92:61:27:AC
            X509v3 Authority Key Identifier:
                keyid:48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ca:fd:0f:11:9e:82:6a:ad:0b:82:43:45:75:06:98:94:c4:
         56:be:c2:86:e5:94:a1:3e:dc:ba:39:5f:f1:54:b0:66:54:cc:
         95:2b:17:d7:1c:53:b0:4e:5b:1c:e1:97:a7:0c:2e:8e:c3:64:
         38:60:08:ff:2a:e4:c0:9e:8b:da:ce:89:67:89:a2:45:bd:71:
         49:9b:f6:06:fc:53:5a:f0:99:13:c1:6a:18:77:1d:42:38:be:
         1e:fe:08:07:e4:2e:d0:a3:9b:00:7e:23:2e:17:d2:8b:72:ac:
         b0:4f:3c:ac:fc:6b:52:9b:3c:d4:f2:e7:ca:a1:d2:ad:24:d7:
         2a:87:53:84:9c:23:0a:b1:56:ee:88:e6:99:c0:c2:7e:9f:bf:
         05:ac:c7:e1:b1:a7:6a:41:d9:bf:58:cd:74:47:6d:2f:78:1b:
         18:ca:f4:dd:78:de:0c:55:28:52:be:d8:a8:d9:a0:91:c6:dc:
         f7:66:d2:3e:f7:35:a8:c7:50:0f:06:0a:ab:37:28:bb:33:ec:
         9b:fb:73:a3:2c:d9:c3:06:d5:d8:50:49:79:b9:03:ae:af:8c:
         d0:dd:1d:3e:c2:b9:66:0e:86:00:9d:d6:80:10:b2:7f:3e:c6:
         a5:94:4d:2b:ea:36:eb:98:d5:f6:32:e3:57:c5:b4:e4:02:f1:
         9a:9a:ea:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 06:03:21 2026 by rpki-client