Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
File:                     BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json)
Hash identifier:          y6pd+9v8aYHVN87iyulK8C86CZzwjAKRgruQ1k5BOc8=
Subject key identifier:   B8:E2:DF:51:67:E6:F2:8D:8D:37:C5:D0:3B:B7:1A:42:D7:93:2C:8B
Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
Certificate issuer:       /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Certificate serial:       0457
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
Manifest number:          0440
Signing time:             Sun 01 Mar 2026 22:54:39 +0000
Manifest this update:     Sun 01 Mar 2026 22:54:39 +0000
Manifest next update:     Sun 08 Mar 2026 22:54:39 +0000
Files and hashes:         1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: yWYmpXVt9ZV2uUmMK8T2+0q2Cv2BhmrrMxpHTvtWaAs=)
                          2: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: WgDLH6zwMlWEe9MeE1BSAjX17TJI+1Qxqw8qoDpSd48=)
                          3: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: GtQPW+0e7a9FnyPg8T2wu8tuzciWg5rc8/4mZ8GgK5I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
                          rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
        Validity
            Not Before: Mar  1 22:54:39 2026 GMT
            Not After : Mar  8 22:54:39 2026 GMT
        Subject: CN=69a4c3af-9fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:38:14:0d:19:13:85:33:cc:74:0d:90:fe:
                    1b:f0:b7:38:52:0b:98:f8:36:10:7c:4e:df:27:3b:
                    ef:cb:56:71:57:26:dd:13:ca:1b:86:f4:a1:b3:a8:
                    01:55:8d:52:a6:be:c5:34:09:f9:74:6d:37:7a:d4:
                    25:d0:90:c3:7a:18:78:18:1d:0f:96:ac:65:72:de:
                    85:8d:f8:51:cb:b3:55:dc:35:b1:d4:4d:f4:9c:b9:
                    a4:8c:cc:39:af:aa:e8:fb:1f:f6:e8:6c:83:c4:83:
                    05:e6:d5:7f:0c:46:96:98:7f:55:a4:00:17:29:a0:
                    db:58:5d:11:ba:07:fd:ad:ee:1c:50:53:45:96:1e:
                    74:3b:c1:e5:77:a0:ad:d5:87:9f:02:d4:af:4f:60:
                    8e:86:f0:06:37:7d:70:ec:3d:fd:ee:96:3a:a2:d0:
                    28:63:f4:e3:3c:27:97:10:0c:47:8d:2d:35:53:16:
                    12:e3:b3:b5:14:82:99:dd:09:94:11:32:b0:f0:59:
                    a6:19:89:4c:af:f0:7e:0a:46:a6:1b:5e:80:b1:43:
                    ee:80:6d:6c:0e:35:66:f1:5e:0b:3c:76:60:6f:dc:
                    9d:38:77:95:ae:00:a3:ae:c1:32:27:60:59:cb:dd:
                    4c:1c:9f:b5:c6:ab:ff:6e:3c:54:cf:95:ae:b7:13:
                    1b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E2:DF:51:67:E6:F2:8D:8D:37:C5:D0:3B:B7:1A:42:D7:93:2C:8B
            X509v3 Authority Key Identifier:
                keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e0:00:fb:1f:65:50:ce:64:81:5b:a4:31:7b:de:ab:85:9b:
         78:f9:59:ed:08:a2:04:ca:09:a4:92:69:cb:38:12:c0:4a:c1:
         0d:84:df:b6:bd:93:3c:ed:5b:12:25:31:68:d9:a4:75:6a:de:
         bf:8d:b3:25:83:65:5a:e4:00:e9:64:f8:f9:de:cb:4a:50:0b:
         f9:5b:a7:f2:01:d6:15:69:bf:64:27:26:6c:18:5f:56:74:f1:
         fe:53:38:75:59:81:9b:c9:f1:b0:33:4c:2b:4c:1e:3f:42:d1:
         70:75:5d:fb:21:8d:bf:cc:1a:5d:3a:17:74:60:07:c7:ba:92:
         9d:68:45:3e:03:11:e7:b1:0c:73:9b:d3:00:64:2b:96:df:84:
         a9:89:4b:d4:59:e4:2c:03:73:d1:82:19:46:83:a4:0b:8f:9c:
         ae:a5:27:5f:79:bd:bb:4b:d2:0c:bd:62:53:85:de:de:cd:68:
         0a:55:b4:ab:6b:da:4a:f2:a3:80:8d:2b:c4:35:f0:0e:c9:cf:
         4b:79:f6:a2:9f:47:27:04:c0:93:91:57:36:6c:31:6f:1a:00:
         d5:4a:19:82:34:9c:59:29:33:9e:c0:df:34:a4:66:45:48:f7:
         50:5b:50:df:9f:b8:15:73:0d:02:99:2b:51:d4:d2:3b:c0:50:
         2f:c3:1f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:11 2026 by rpki-client