Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
File:                     bOLX0NlZgNdDytSEhphI26Elwps.mft (raw, json)
Hash identifier:          zKo+SjW/KFvKtfpyVeNaq9MftPGodtT5dtlYVFbrN1s=
Subject key identifier:   F3:1D:A3:71:6F:07:97:97:92:82:15:34:42:08:D0:35:A3:EE:40:B0
Authority key identifier: 6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
Certificate issuer:       /CN=A9120E98/serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
Manifest number:          0155
Signing time:             Sat 09 Aug 2025 04:32:53 +0000
Manifest this update:     Sat 09 Aug 2025 04:32:53 +0000
Manifest next update:     Sat 16 Aug 2025 04:32:52 +0000
Files and hashes:         1: bOLX0NlZgNdDytSEhphI26Elwps.crl (hash: P5aC36wfTOysj3i2DwPBF4U3zRTcLqNPphgunpm7jZA=)
                          2: 36F3B6A86E5411EEAA31F87AC4F9AE02.roa (hash: TgP6m9OEjffqCLWh57vOCQCFFyLSkjZJc7ba7bn55rY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl
                          rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120E98, serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
        Validity
            Not Before: Aug  9 04:32:53 2025 GMT
            Not After : Aug 16 04:32:52 2025 GMT
        Subject: CN=6896cf75-8f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:78:18:77:89:20:91:97:5e:90:f7:21:de:
                    e0:ce:8d:6b:de:3e:ce:c6:a3:2b:7c:83:d7:f6:29:
                    02:91:46:dd:be:72:9d:76:90:5d:8b:98:20:81:46:
                    01:92:d5:46:95:91:fc:93:d5:a9:78:c0:f2:0c:fe:
                    f0:de:66:02:9c:c3:ff:6e:b5:09:df:6c:28:42:76:
                    60:e7:d3:92:d2:0b:4f:b2:63:64:cc:f7:53:77:bf:
                    7a:25:3e:eb:4e:19:bd:28:33:0e:bd:d6:cd:93:27:
                    8a:59:c2:42:51:fe:cf:58:43:14:b2:5a:92:1d:e3:
                    57:e2:5d:1a:6b:0e:6f:a9:55:81:cd:03:8e:a1:79:
                    2a:e7:c0:0f:67:6e:60:38:8b:3b:2b:42:28:e9:6f:
                    ac:9b:01:f5:04:c4:2d:88:8c:ee:59:16:77:ed:f5:
                    a5:f6:60:92:4c:dc:16:8f:2a:b5:af:98:78:4a:2b:
                    a5:20:60:56:00:95:9f:ca:fd:5d:57:38:55:65:12:
                    a5:ea:f8:0e:85:af:b0:85:a1:7b:a6:a0:89:15:1f:
                    1b:79:ff:1b:f0:a0:5b:33:c4:cb:fe:93:6d:31:8c:
                    37:10:ee:cb:52:68:81:89:2c:7c:40:21:06:1e:12:
                    5f:b4:6a:0f:ce:c5:f4:c4:e5:c9:d3:d5:d0:96:31:
                    e3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1D:A3:71:6F:07:97:97:92:82:15:34:42:08:D0:35:A3:EE:40:B0
            X509v3 Authority Key Identifier:
                keyid:6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2a:04:e7:21:aa:34:25:56:77:9b:57:28:5a:f1:1c:4a:46:
         c0:3d:ae:f9:35:75:18:40:ea:27:6a:5d:8d:77:46:5b:23:84:
         2d:35:70:af:de:51:59:60:24:1c:fa:06:e9:fd:5c:de:a8:58:
         77:d0:a9:05:77:57:17:df:bb:21:a0:b2:8a:52:47:44:f8:a9:
         13:7a:b6:93:fb:28:bb:d6:ba:de:f7:60:19:da:f3:c0:dd:0a:
         85:bc:d9:01:14:b6:6b:bc:04:f0:ac:77:4e:3c:6e:4e:e0:f1:
         13:c7:96:88:7c:ca:90:20:17:26:4b:c3:42:74:61:53:13:74:
         f0:8b:03:65:90:09:ef:2d:c9:77:ef:c5:87:42:4d:63:4e:af:
         4a:26:33:ba:33:ed:92:9f:83:cd:0e:be:4e:30:41:04:27:fa:
         34:db:c7:2f:5c:b4:a7:13:25:1b:38:2b:ae:aa:01:5f:15:27:
         4c:ac:c1:a9:c5:a7:d9:d4:b1:7e:57:3b:c1:7e:0d:ab:ba:3c:
         bf:55:85:bc:4d:69:ba:1e:57:38:51:ea:11:cc:81:e8:26:ef:
         40:64:81:7b:13:41:58:ef:4e:4c:22:d5:87:9e:dc:9b:73:3b:
         9f:ad:5e:68:c6:d7:a1:14:79:5c:56:17:76:4c:53:77:c4:29:
         39:19:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:32:53 2025 by rpki-client