Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
File:                     bOLX0NlZgNdDytSEhphI26Elwps.mft (raw, json)
Hash identifier:          FiIJRDGSO9QkMm6+NlL9j1yiWlRFYYdjyS87edd6bcQ=
Subject key identifier:   33:92:C1:29:9B:D8:2E:75:04:92:43:85:B1:19:9B:3B:A0:67:A1:A9
Authority key identifier: 6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
Certificate issuer:       /CN=A9120E98/serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
Certificate serial:       01ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
Manifest number:          01E5
Signing time:             Wed 13 May 2026 03:31:49 +0000
Manifest this update:     Wed 13 May 2026 03:31:48 +0000
Manifest next update:     Wed 20 May 2026 03:31:48 +0000
Files and hashes:         1: bOLX0NlZgNdDytSEhphI26Elwps.crl (hash: z30XR7ORMzqUJyp20ZclCm+3LWTJUhvnYZ9bwV0bkg8=)
                          2: 36F3B6A86E5411EEAA31F87AC4F9AE02.roa (hash: pDTxi/uoAFHGF48GS5j39SSpSo1n7kGbSYg7ozTcf7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl
                          rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120E98, serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
        Validity
            Not Before: May 13 03:31:48 2026 GMT
            Not After : May 20 03:31:48 2026 GMT
        Subject: CN=6a03f0a4-5895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e5:10:0a:38:27:32:6f:fd:c2:df:2b:c9:d6:
                    5f:ff:70:f1:32:d6:70:21:d2:80:f7:a6:d4:ee:3a:
                    0c:e3:a3:bf:9a:7a:6a:b8:8a:7a:a7:1c:21:32:33:
                    74:6d:e0:e5:20:e6:b1:1d:b9:f2:1b:39:25:cb:83:
                    76:4e:e7:66:8f:36:81:1c:2f:17:ba:ef:8e:68:e0:
                    dc:d9:2d:67:3a:f8:e2:82:7e:f4:f8:cc:5f:b9:64:
                    04:4b:9a:af:3f:2c:3c:53:d3:41:97:8a:a8:dd:37:
                    73:c0:7b:39:4d:f6:a1:70:9b:20:0c:d6:9b:ed:b0:
                    bd:21:50:6b:44:22:44:89:1d:97:96:92:4f:63:27:
                    05:66:b6:54:28:9e:5a:0f:16:7b:dc:df:55:e9:2e:
                    03:61:70:56:e9:37:ad:6e:f1:62:76:ff:93:b5:7c:
                    94:41:a9:ed:ac:8e:c8:9c:6c:d5:ea:37:57:4a:b9:
                    7e:a1:36:36:1d:92:48:c1:8a:5f:6d:5a:da:6d:33:
                    d5:3b:ad:1b:2a:40:da:82:eb:32:87:e6:38:19:a5:
                    44:35:4b:64:2c:bc:58:99:50:14:da:23:43:b3:d1:
                    ab:02:32:f4:55:56:61:89:82:dc:ef:3f:c7:ea:99:
                    17:bd:aa:84:45:99:d5:c3:1f:ed:b8:0e:da:a3:4a:
                    f7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:92:C1:29:9B:D8:2E:75:04:92:43:85:B1:19:9B:3B:A0:67:A1:A9
            X509v3 Authority Key Identifier:
                keyid:6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:fa:11:e9:be:b0:07:7f:e3:cb:62:92:e3:e9:1e:4e:18:bd:
         6b:da:86:1a:0f:86:21:bb:b4:d7:9b:80:78:65:c9:99:2a:bb:
         47:80:a4:ee:9d:2c:c6:94:4c:d5:c0:92:ac:f9:ec:df:43:aa:
         af:9a:8f:7a:3d:2f:2b:47:a1:60:4a:24:e2:7a:d9:76:9c:fe:
         d7:99:9e:2a:57:5d:1b:70:20:92:9d:e8:63:e3:f8:c0:c4:43:
         01:ba:5a:81:c5:cd:98:05:a3:cd:58:6e:fc:d5:ab:e5:a0:27:
         4d:20:ca:a3:e1:8e:3a:54:d9:2b:f8:d3:23:f0:93:74:70:75:
         d1:d5:65:22:b3:67:ea:ae:dd:5d:78:fb:94:67:85:07:bc:80:
         15:19:fa:cb:df:2b:48:53:df:62:e3:2b:71:c0:8e:b3:94:18:
         fa:a9:08:60:28:03:01:a0:52:49:95:d2:27:08:31:b2:b9:f6:
         f1:2d:dc:b6:f0:52:76:cb:48:56:1e:0c:3b:b3:d2:a1:e9:5e:
         00:c8:0c:f5:d1:a0:6a:d5:eb:23:27:43:1c:f1:1c:84:f5:a0:
         97:23:6b:cc:18:d6:c9:61:f8:e5:49:99:35:94:81:c3:c0:3b:
         38:cd:b1:02:62:41:c1:b5:7c:77:6f:f7:90:94:39:96:e6:cf:
         0e:04:32:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:04 2026 by rpki-client