Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
File:                     bOLX0NlZgNdDytSEhphI26Elwps.mft (raw, json)
Hash identifier:          nkRlR3xVG4yp3C3071srLLs5vEWkiAgPrpHfS7mnGPk=
Subject key identifier:   91:F0:EF:4E:4B:8B:01:EF:4C:69:E0:81:EA:71:11:57:74:3D:9F:9C
Authority key identifier: 6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
Certificate issuer:       /CN=A9120E98/serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
Manifest number:          015C
Signing time:             Sat 23 Aug 2025 04:13:05 +0000
Manifest this update:     Sat 23 Aug 2025 04:13:04 +0000
Manifest next update:     Sat 30 Aug 2025 04:13:04 +0000
Files and hashes:         1: bOLX0NlZgNdDytSEhphI26Elwps.crl (hash: JzUHbBdLE/s8+Uti+8+10tBh2lPz4ZPQ/xdOQ/9Vrsc=)
                          2: 36F3B6A86E5411EEAA31F87AC4F9AE02.roa (hash: TgP6m9OEjffqCLWh57vOCQCFFyLSkjZJc7ba7bn55rY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl
                          rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120E98, serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
        Validity
            Not Before: Aug 23 04:13:04 2025 GMT
            Not After : Aug 30 04:13:04 2025 GMT
        Subject: CN=68a93fd1-b487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:5f:14:39:5b:f2:8e:9d:fb:d5:69:33:5d:
                    73:84:88:08:d8:ae:4c:6e:b6:69:e5:36:c6:ae:75:
                    21:08:b2:b6:27:6f:cd:67:ed:52:8a:16:5e:64:27:
                    77:25:f2:c6:db:f1:b9:be:db:41:df:f8:0d:2e:66:
                    b1:1a:37:27:da:fc:b6:94:81:66:82:f3:b8:b1:b1:
                    fb:18:1d:95:fd:38:02:5b:66:86:da:81:b7:1f:1c:
                    f0:52:39:24:cc:96:86:4c:8f:9f:2e:0d:47:ce:7e:
                    16:33:92:c9:32:c6:07:a4:fe:bb:7b:18:3f:40:d3:
                    53:22:86:65:39:8c:1d:d5:d2:29:a7:46:76:03:05:
                    92:0d:8d:66:90:2a:ed:ae:47:d2:38:34:7c:25:de:
                    ed:3c:73:6a:1a:eb:93:9f:95:a7:09:e2:7e:dc:5e:
                    0b:2f:b3:17:8e:e2:0b:e6:75:ec:0a:5a:95:36:83:
                    c4:07:09:6b:92:aa:05:d5:f1:66:b7:b8:b6:a0:4b:
                    7b:d1:a4:9a:a2:2f:a7:c5:c3:a9:7d:52:d7:d0:77:
                    95:03:bd:0f:0d:d2:b0:28:28:d9:dc:58:64:83:e8:
                    a0:cf:5d:af:7d:98:7a:bd:85:00:c0:8b:a7:16:b9:
                    4f:43:bf:46:f9:ff:e6:63:cb:d2:2b:df:0a:01:63:
                    8d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F0:EF:4E:4B:8B:01:EF:4C:69:E0:81:EA:71:11:57:74:3D:9F:9C
            X509v3 Authority Key Identifier:
                keyid:6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:87:4c:83:36:90:a5:05:37:36:0d:17:cd:d9:f7:fe:d4:cf:
         57:2b:6a:f5:f8:0e:17:16:d4:9e:3d:7b:45:e6:7e:2c:1c:62:
         0f:b5:5a:c0:30:fe:d8:1c:c7:b8:d1:b2:37:4b:e7:0a:37:d1:
         f7:a2:29:c4:be:e7:73:3c:98:45:ee:3e:20:ee:f2:e6:5e:5b:
         6d:92:ea:de:73:77:e2:f7:dd:f1:30:d9:86:b4:39:ef:45:21:
         f6:3c:fd:de:d9:52:82:56:e2:39:91:8f:fa:9f:4a:9c:b6:f4:
         6f:b4:70:25:a7:78:50:e3:97:50:cf:8b:b4:94:f4:52:ae:89:
         bf:aa:8c:7b:e8:8a:da:7f:2b:29:49:a3:ce:e1:c7:e0:48:b8:
         21:68:3f:1f:00:4d:6d:70:85:1d:2b:fc:9a:25:10:1f:b5:4f:
         52:75:26:3e:dc:a6:37:86:27:f0:9f:69:41:0e:27:62:a7:0e:
         76:6c:3d:8c:f6:e3:50:e5:73:42:a5:13:f8:7e:59:b0:d4:c4:
         f5:0b:2b:00:cb:d2:80:53:1e:84:a5:7b:81:d3:e1:37:55:6d:
         89:76:c4:26:04:74:54:b3:34:56:f4:97:cb:2a:67:03:af:92:
         b7:57:74:40:c8:19:d1:29:11:7e:65:a8:76:69:3a:5f:76:e4:
         eb:95:58:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:06:28 2025 by rpki-client