Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
File:                     SOkLc7Sfo6317JGlzNI9rTXTxI4.mft (raw, json)
Hash identifier:          F8UE4dK+X6oKBcIBB9mbErNTD+tD5BxnGwul6OgNqcs=
Subject key identifier:   2C:67:3E:45:ED:7B:CC:CE:50:73:7B:B7:3A:97:65:79:2A:40:16:52
Authority key identifier: 48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E
Certificate issuer:       /CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
Certificate serial:       0799
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
Manifest number:          0792
Signing time:             Tue 12 May 2026 21:35:11 +0000
Manifest this update:     Tue 12 May 2026 21:35:10 +0000
Manifest next update:     Tue 19 May 2026 21:35:10 +0000
Files and hashes:         1: SOkLc7Sfo6317JGlzNI9rTXTxI4.crl (hash: kbw0Nic/jvpCgj8Aq8z+5lkYnnymcsjCbmZrE3n6iQ8=)
                          2: 8CFEF8EE50AE11EBB71FB743C4F9AE02.roa (hash: 0b0HxKXaBgsrMjbgtSVdcN+5q1xfdbTvPOaj8MWjzqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl
                          rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1945 (0x799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D228, serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
        Validity
            Not Before: May 12 21:35:10 2026 GMT
            Not After : May 19 21:35:10 2026 GMT
        Subject: CN=6a039d0f-49ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3a:7e:70:7c:1d:c8:94:de:e5:a2:8d:67:bf:
                    29:5d:02:fc:70:db:30:ae:be:2a:af:4e:98:9f:b3:
                    2a:49:44:68:1b:a5:f9:ab:a8:3d:d3:60:5c:30:e1:
                    ed:ef:40:c8:86:20:a3:05:c0:13:ba:8d:c8:07:cf:
                    34:5f:a5:ce:85:d1:81:a0:15:38:ea:df:cc:fd:7b:
                    d1:1a:81:c3:12:4b:a3:bc:51:ef:91:5a:44:79:96:
                    dd:e2:93:5a:63:bc:fd:0b:6f:75:86:d9:63:72:93:
                    c9:d7:58:d9:e7:89:f8:09:3e:2c:41:eb:5e:c6:e0:
                    38:af:7d:0e:89:c7:e7:df:85:e6:e0:73:e2:4d:f8:
                    71:8e:7d:ce:65:0e:b9:43:ff:b6:f4:e2:f6:e6:00:
                    7e:e3:4e:be:c2:26:c3:2f:44:52:cd:6a:66:e4:fe:
                    d4:e0:05:67:d2:83:20:d3:3d:a8:60:cb:77:12:21:
                    45:c0:ae:f9:1a:2e:a6:92:57:53:04:61:83:db:0a:
                    34:54:fd:44:1c:4a:f4:fe:41:32:4f:46:cf:06:a2:
                    99:4e:57:a3:57:d4:bc:ef:09:33:86:e4:03:7d:c6:
                    69:42:c3:d6:44:26:62:fb:9b:d2:3b:2b:58:e7:20:
                    3c:56:93:66:c2:b6:d1:9e:64:57:95:ee:83:e5:e3:
                    38:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:67:3E:45:ED:7B:CC:CE:50:73:7B:B7:3A:97:65:79:2A:40:16:52
            X509v3 Authority Key Identifier:
                keyid:48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e7:f4:da:7c:9b:54:7d:36:df:b5:78:1c:25:2d:19:c7:cd:
         2c:d4:98:c5:1d:f3:65:db:dc:74:ee:05:da:24:1c:9f:a0:b3:
         94:0c:e0:01:dd:c8:2e:ff:26:fa:44:8c:af:bc:ab:b9:8e:a9:
         86:a9:2e:ec:2d:85:73:f8:02:7b:23:24:91:8d:e0:00:98:2d:
         48:ee:a3:75:a3:ff:8e:8a:00:92:09:61:1c:77:82:89:75:3c:
         24:31:a0:23:23:3c:e8:51:e0:4a:37:a4:72:04:1d:d8:ea:c2:
         8d:ae:a6:fe:be:b3:8c:64:e6:bb:1c:65:de:53:47:3e:66:99:
         a9:83:09:fd:b6:cf:3b:dc:fc:d6:58:1c:42:bb:77:12:1e:80:
         9d:f6:d9:a9:dd:0f:23:bd:de:72:e1:7f:ac:1f:c2:0f:7e:29:
         52:37:0b:d5:43:f8:59:59:fe:c0:2e:57:b1:be:6d:a5:ad:3f:
         d2:3f:51:a8:b1:4c:c7:f6:57:0e:11:cd:c8:04:bb:6a:dd:c2:
         20:00:47:8e:fb:80:8d:0c:a0:b8:1c:41:c1:b9:29:d9:6c:4a:
         87:a3:d0:3d:9e:60:8b:63:34:f7:81:f2:c3:e8:ad:b0:21:8a:
         00:58:d0:a7:ae:79:ae:99:26:60:ed:7a:c3:1a:1c:bf:79:dd:
         7e:ed:8c:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0QyMjgxMTAvBgNVBAUTKDQ4RTkwQjczQjQ5RkEzQURGNUVDOTFBNUNDRDIzREFE
MzVEM0M0OEUwHhcNMjYwNTEyMjEzNTEwWhcNMjYwNTE5MjEzNTEwWjAYMRYwFAYD
VQQDEw02YTAzOWQwZi00OWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvzp+cHwdyJTe5aKNZ78pXQL8cNswrr4qr06Yn7MqSURoG6X5q6g902BcMOHt
70DIhiCjBcATuo3IB880X6XOhdGBoBU46t/M/XvRGoHDEkujvFHvkVpEeZbd4pNa
Y7z9C291htljcpPJ11jZ54n4CT4sQetexuA4r30Oicfn34Xm4HPiTfhxjn3OZQ65
Q/+29OL25gB+406+wibDL0RSzWpm5P7U4AVn0oMg0z2oYMt3EiFFwK75Gi6mkldT
BGGD2wo0VP1EHEr0/kEyT0bPBqKZTlejV9S87wkzhuQDfcZpQsPWRCZi+5vSOytY
5yA8VpNmwrbRnmRXle6D5eM49QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCxnPkXt
e8zOUHN7tzqXZXkqQBZSMB8GA1UdIwQYMBaAFEjpC3O0n6Ot9eyRpczSPa0108SO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDIyOC82QjREMkRBODUw
QUMxMUVCQUYxNzhFM0VDNEY5QUUwMi9TT2tMYzdTZm82MzE3Skdsek5JOXJUWFR4
STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NPa0xjN1NmbzYzMTdKR2x6Tkk5clRYVHhJNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDIyOC82QjREMkRBODUwQUMxMUVCQUYxNzhFM0VDNEY5QUUwMi9TT2tMYzdTZm82
MzE3Skdsek5JOXJUWFR4STQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb+f02nybVH0237V4HCUtGcfNLNSYxR3zZdvcdO4F2iQcn6CzlAzgAd3ILv8m
+kSMr7yruY6phqku7C2Fc/gCeyMkkY3gAJgtSO6jdaP/jooAkglhHHeCiXU8JDGg
IyM86FHgSjekcgQd2OrCja6m/r6zjGTmuxxl3lNHPmaZqYMJ/bbPO9z81lgcQrt3
Eh6AnfbZqd0PI73ecuF/rB/CD34pUjcL1UP4WVn+wC5Xsb5tpa0/0j9RqLFMx/ZX
DhHNyAS7at3CIABHjvuAjQyguBxBwbkp2WxKh6PQPZ5gi2M094Hyw+itsCGKAFjQ
p655rpkmYO16wxocv3ndfu2MfQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:50:44 2026 by rpki-client