Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
File:                     bOLX0NlZgNdDytSEhphI26Elwps.mft (raw, json)
Hash identifier:          ywMWBz1Whp69DjXV6DUYcHCMJOeaMxZaDmpCzWSohOM=
Subject key identifier:   1B:F2:B7:7A:92:1A:52:57:82:50:0F:CB:CA:A7:50:76:20:CB:CA:1A
Authority key identifier: 6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
Certificate issuer:       /CN=A9120E98/serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
Manifest number:          01BE
Signing time:             Sun 01 Mar 2026 04:38:30 +0000
Manifest this update:     Sun 01 Mar 2026 04:38:30 +0000
Manifest next update:     Sun 08 Mar 2026 04:38:30 +0000
Files and hashes:         1: bOLX0NlZgNdDytSEhphI26Elwps.crl (hash: SG2g14Lcn8P9xYHEM6NIVPSW2iPyphtdBZQTdfIC0KQ=)
                          2: 36F3B6A86E5411EEAA31F87AC4F9AE02.roa (hash: sGfgOeU/fHIH2HrB1IOWJi3rlZbzHtByfN0MLcFepBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl
                          rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:38:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120E98, serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
        Validity
            Not Before: Mar  1 04:38:30 2026 GMT
            Not After : Mar  8 04:38:30 2026 GMT
        Subject: CN=69a3c2c6-91a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fb:be:2e:52:30:a2:e2:4c:96:50:6a:02:88:
                    a6:df:05:45:d1:c5:50:2f:aa:ad:99:27:29:43:54:
                    45:fe:4f:c7:4a:58:91:c4:42:51:01:aa:68:38:17:
                    2f:48:5a:c6:83:91:ea:a9:14:f8:7a:f0:bc:6b:f3:
                    68:ad:c1:19:1d:45:3c:99:54:2e:28:4f:8f:55:64:
                    e8:40:4e:27:e8:0c:83:23:59:1d:5f:f1:de:9b:64:
                    e7:b0:72:5f:89:74:b7:05:69:a0:c0:0a:1a:13:89:
                    2a:d8:5d:15:06:9c:0f:7e:5d:e8:bc:8d:d0:8c:03:
                    6b:cd:71:9e:7a:da:2e:81:54:24:8e:af:05:f7:e8:
                    a5:52:57:17:a0:13:ce:60:39:b1:27:35:80:09:c6:
                    ea:d3:ac:bf:1f:83:23:b9:f8:8f:46:a7:eb:3e:4d:
                    86:03:fa:fa:b2:94:a5:94:69:1a:26:2d:30:89:3f:
                    f9:b3:55:d9:01:30:fb:5a:3f:03:ba:57:e0:6d:ef:
                    d3:3d:7a:fb:2d:cb:92:a6:7f:9b:bf:85:5a:77:bb:
                    73:74:e8:a8:69:ba:e8:24:9d:78:1e:53:ad:7a:55:
                    a5:62:f1:94:2a:3b:14:cc:06:0b:99:0a:1e:ec:ec:
                    99:67:48:6b:5d:fe:da:19:48:02:6b:8c:b4:9c:bc:
                    71:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F2:B7:7A:92:1A:52:57:82:50:0F:CB:CA:A7:50:76:20:CB:CA:1A
            X509v3 Authority Key Identifier:
                keyid:6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:41:1b:f3:0b:f9:ed:30:63:ed:e5:c6:d9:1a:28:19:7b:3b:
         3d:e0:ec:57:00:6c:44:18:ba:93:b9:1d:a5:5f:97:aa:39:a9:
         d3:a2:4a:9f:b6:a6:44:42:8f:5f:3a:01:1f:2a:7c:b6:e4:3c:
         6b:32:c9:d4:1c:8e:3d:f7:e8:3a:fa:06:ae:4f:6f:f0:c3:b3:
         74:55:9a:85:d3:4a:81:63:b1:63:f6:35:6c:3e:42:cf:b5:a7:
         a1:b1:52:ce:bb:8c:59:fc:ae:2a:78:f7:d9:5f:75:6e:2b:ef:
         78:86:9c:f2:8d:e4:9d:9c:4c:61:8e:9e:27:89:b9:32:67:f6:
         d9:6c:fa:a6:f3:65:6e:75:f0:f3:53:68:43:fe:55:fa:4c:c5:
         8e:25:8f:eb:ef:8f:a2:bd:b3:4c:8a:bc:10:f7:fd:8f:e2:71:
         c5:fa:75:3b:e0:30:84:eb:92:34:6e:76:88:1e:05:70:d3:16:
         cd:bc:69:36:ea:37:1f:17:a5:14:b1:fe:2d:23:e0:f4:73:50:
         8c:a1:8c:ac:d0:78:a0:83:1b:21:fe:01:3e:76:31:50:97:27:
         b7:59:a9:af:22:63:78:69:dd:ef:eb:b2:76:3b:24:7d:22:81:
         cb:ea:8e:31:a5:aa:19:60:ec:e7:e7:3e:92:c2:99:64:62:a6:
         94:65:a9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:44:00 2026 by rpki-client