Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
File:                     DS1vMynFa_bo-UG9_adJbb4lMOU.mft (raw, json)
Hash identifier:          +a3BUQ1ujgsp8rJzJmVfLzsdaauhWFD9ZFdFJzzsRgw=
Subject key identifier:   D3:98:AE:1C:9D:A4:82:97:BF:DF:66:80:D2:AD:11:89:7E:56:59:7A
Authority key identifier: 0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5
Certificate issuer:       /CN=A915479A/serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
Manifest number:          0136
Signing time:             Sat 03 Oct 2026 06:13:20 +0000
Manifest this update:     Sat 03 Oct 2026 06:13:19 +0000
Manifest next update:     Sat 10 Oct 2026 06:13:19 +0000
Files and hashes:         1: DS1vMynFa_bo-UG9_adJbb4lMOU.crl (hash: IOJV1uVxOOu7s2pjGdSCfdSwPfhsLkPO01R+rBIHy2c=)
                          2: 8836D872E37B11EFB4D75458C4F9AE02.roa (hash: AB3/bfeVD+zx9JPQDfLkzjvvihkm85QjiqRQVWmZktU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl
                          rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915479A, serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5
        Validity
            Not Before: Oct  3 06:13:19 2026 GMT
            Not After : Oct 10 06:13:19 2026 GMT
        Subject: CN=6ac09d00-a700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:e9:c4:51:4c:14:d4:9b:c1:06:a4:18:f4:
                    d6:63:9a:24:9b:64:a1:b0:c8:16:71:6f:40:83:79:
                    19:fd:ed:9d:14:fb:41:3c:bf:67:65:b8:56:2f:ce:
                    de:e0:bd:77:14:da:b1:47:90:db:5e:33:0b:a6:d6:
                    41:bd:9f:38:6f:ea:db:4e:ce:99:13:cb:a0:a7:53:
                    43:ad:d9:7a:a2:be:7e:74:d1:11:ae:d6:b1:26:07:
                    bd:22:bf:77:b7:98:26:9a:99:1d:bf:a9:ce:fa:e1:
                    3b:29:66:22:f5:f9:84:55:e5:5d:21:1b:9b:b5:03:
                    96:b5:07:20:8c:a3:bc:86:4d:17:08:f1:55:2b:32:
                    b9:2e:d7:30:52:3b:76:bb:f6:4c:89:f4:54:40:4a:
                    b8:6a:59:6e:3e:71:88:e3:9a:86:a1:dd:90:6d:a5:
                    26:14:2a:7e:6c:c9:9f:97:8a:0e:d7:d7:a1:21:a1:
                    f0:1b:f6:8d:7f:a0:a8:6f:00:31:63:f4:a2:a5:1d:
                    db:74:37:ac:83:10:60:cc:cc:0d:5b:52:b4:ff:8c:
                    0e:3d:3e:52:b1:41:43:d2:33:04:9d:ec:a6:79:5d:
                    d2:82:3a:4c:78:9c:85:68:77:d2:54:74:51:78:a5:
                    c4:13:da:af:22:ab:d7:3e:17:49:2f:95:84:01:d8:
                    81:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:98:AE:1C:9D:A4:82:97:BF:DF:66:80:D2:AD:11:89:7E:56:59:7A
            X509v3 Authority Key Identifier:
                keyid:0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f4:85:d8:bb:9a:b2:49:20:a4:ed:9d:3f:45:56:18:5b:04:
         4a:ac:e2:e9:51:43:10:49:a5:09:95:0d:81:1b:22:09:13:be:
         e7:bd:d8:bf:a8:15:bd:25:34:a2:ae:45:7f:00:39:ce:ac:fe:
         29:d0:85:3a:db:1e:fc:4d:3b:39:c7:c2:d2:0b:52:c4:5c:cf:
         1f:ad:07:4d:6d:8f:81:d3:bb:da:65:8d:c5:38:87:4c:74:cf:
         30:d4:e4:28:82:37:cf:0c:1c:29:b8:ac:c3:60:e1:01:00:d6:
         37:2b:83:1a:c8:9f:78:00:e1:7a:e4:7c:e1:99:27:ea:31:d1:
         61:03:67:c6:08:aa:51:f0:bd:98:5a:a0:0c:8b:fd:19:a4:be:
         38:7d:87:86:96:c1:29:7f:83:20:9b:99:65:e3:5f:d8:9c:a1:
         57:43:6d:ab:8f:f4:cb:45:36:b6:5c:69:6b:97:b7:4e:72:c3:
         64:8a:a0:57:f3:b2:96:b4:ad:ef:72:08:4d:53:fa:90:27:67:
         f0:a6:92:21:e2:7a:a3:83:87:9e:91:a1:af:3a:04:58:ac:7a:
         3a:8e:94:2e:d5:4a:6d:cb:35:26:bb:24:5f:43:ba:58:0d:05:
         fa:1f:5b:b0:20:2b:54:e8:7b:9c:db:bf:fb:03:e5:28:cf:4f:
         1b:c1:7e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:13:40 2026 by rpki-client