Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft
File:                     1BO-Gf_T9trcEjTNxhmyQy6oA08.mft (raw, json)
Hash identifier:          WZJpLEdQfJlcc6uya/rIFqPtgrE8hDVRcs6zP5e2YSE=
Subject key identifier:   3D:F4:B8:8B:9A:1A:9A:21:B3:84:88:39:A0:63:82:BA:AA:B7:61:CC
Authority key identifier: D4:13:BE:19:FF:D3:F6:DA:DC:12:34:CD:C6:19:B2:43:2E:A8:03:4F
Certificate issuer:       /CN=A91913D7/serialNumber=D413BE19FFD3F6DADC1234CDC619B2432EA8034F
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft
Manifest number:          A2
Signing time:             Sun 11 Oct 2026 07:52:34 +0000
Manifest this update:     Sun 11 Oct 2026 07:52:33 +0000
Manifest next update:     Sun 18 Oct 2026 07:52:33 +0000
Files and hashes:         1: 1BO-Gf_T9trcEjTNxhmyQy6oA08.crl (hash: TvjTH6huRzpFXRRNxZx93n1MU/8BAQQcPRD35DAIW+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.crl
                          rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 07:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91913D7, serialNumber=D413BE19FFD3F6DADC1234CDC619B2432EA8034F
        Validity
            Not Before: Oct 11 07:52:33 2026 GMT
            Not After : Oct 18 07:52:33 2026 GMT
        Subject: CN=6acb4042-68d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:d5:d0:1f:bd:39:aa:bb:a1:ff:44:33:59:
                    22:09:6f:bd:ac:22:49:f4:59:1e:22:7b:ca:9f:15:
                    5c:1d:e1:6d:7e:ec:43:12:aa:2d:fa:4f:14:c0:68:
                    67:27:56:8c:f8:36:98:a2:23:96:60:78:dd:18:32:
                    ac:d1:4c:c1:69:c5:2f:c4:68:d1:64:80:8c:ff:5b:
                    1f:ec:f6:65:cd:4f:0c:67:82:0f:f8:45:a0:a7:5d:
                    06:28:e5:ef:f4:05:c8:a6:c9:4c:15:1a:b3:8b:d5:
                    0e:d4:aa:e5:23:01:fd:40:f7:5b:0b:b5:d5:22:03:
                    1b:51:c5:f2:06:8a:77:00:44:02:f8:c0:ec:04:cf:
                    02:f7:65:4a:47:8a:a3:5f:2d:ef:ba:02:71:09:c7:
                    15:73:2c:04:89:24:40:ac:14:6b:f6:c5:c7:f3:83:
                    35:dc:a0:00:46:8e:22:a1:de:7e:8f:b5:5b:a5:07:
                    6c:31:3c:be:64:aa:4c:9b:46:ef:ae:77:80:3b:00:
                    ac:d5:7c:e6:30:fd:fa:42:93:89:da:6f:49:9c:8e:
                    d4:ed:48:8e:6f:9c:c7:16:3a:ef:02:8b:50:81:80:
                    08:df:26:81:06:af:24:89:8f:c4:ee:55:46:21:22:
                    ff:e5:5a:8a:8a:11:c9:94:02:cd:ed:ab:3f:35:be:
                    f7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F4:B8:8B:9A:1A:9A:21:B3:84:88:39:A0:63:82:BA:AA:B7:61:CC
            X509v3 Authority Key Identifier:
                keyid:D4:13:BE:19:FF:D3:F6:DA:DC:12:34:CD:C6:19:B2:43:2E:A8:03:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:5c:52:41:ac:07:3d:18:d8:9e:64:dc:b3:66:96:6f:6b:67:
         47:35:2f:af:4a:be:d6:03:64:97:7b:16:b5:7d:2f:7d:09:e0:
         67:86:35:93:30:86:69:d0:e9:3d:22:1e:8a:7d:6d:54:f1:bc:
         d8:7a:89:63:94:f7:e8:9a:92:43:af:ab:ad:82:33:da:e3:80:
         53:a4:fc:56:b9:5e:55:71:84:0c:ba:5b:2a:e2:41:fb:6f:89:
         bd:ab:cd:f2:af:79:72:63:61:4e:7b:64:de:b4:6c:e4:db:71:
         32:4b:2c:31:8d:79:2a:d7:31:4d:8e:c6:68:ef:f8:9a:f8:7e:
         47:f8:67:4a:63:7b:18:aa:87:52:78:e7:ea:73:36:05:6f:e8:
         da:89:cc:5d:39:73:ed:02:23:cf:84:2e:e0:db:d3:ef:bc:8d:
         d2:83:10:3c:fa:a7:99:91:03:92:f6:00:4a:1b:ec:9b:91:62:
         11:18:89:2a:17:4a:82:3d:0b:e8:73:01:85:75:bb:d4:bf:c7:
         65:a5:d5:8d:5d:82:64:51:44:09:63:75:8f:6b:09:64:52:3a:
         46:df:17:3e:c3:6d:a7:2d:d2:1b:f7:96:50:d5:db:7e:a1:e2:
         e1:bb:e8:e4:96:5c:83:5b:74:8f:03:cf:c9:04:08:77:27:30:
         b0:fb:eb:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTEzRDcxMTAvBgNVBAUTKEQ0MTNCRTE5RkZEM0Y2REFEQzEyMzRDREM2MTlCMjQz
MkVBODAzNEYwHhcNMjYxMDExMDc1MjMzWhcNMjYxMDE4MDc1MjMzWjAYMRYwFAYD
VQQDEw02YWNiNDA0Mi02OGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAshbV0B+9Oaq7of9EM1kiCW+9rCJJ9FkeInvKnxVcHeFtfuxDEqot+k8UwGhn
J1aM+DaYoiOWYHjdGDKs0UzBacUvxGjRZICM/1sf7PZlzU8MZ4IP+EWgp10GKOXv
9AXIpslMFRqzi9UO1KrlIwH9QPdbC7XVIgMbUcXyBop3AEQC+MDsBM8C92VKR4qj
Xy3vugJxCccVcywEiSRArBRr9sXH84M13KAARo4iod5+j7VbpQdsMTy+ZKpMm0bv
rneAOwCs1XzmMP36QpOJ2m9JnI7U7UiOb5zHFjrvAotQgYAI3yaBBq8kiY/E7lVG
ISL/5VqKihHJlALN7as/Nb73QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD30uIua
Gpohs4SIOaBjgrqqt2HMMB8GA1UdIwQYMBaAFNQTvhn/0/ba3BI0zcYZskMuqANP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTNENy83OTEzMjRCOENF
OEExMUYwQUI0QkQ3NjlDNEY5QUUwMi8xQk8tR2ZfVDl0cmNFalROeGhteVF5Nm9B
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFCTy1HZl9UOXRyY0VqVE54aG15UXk2b0EwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTNENy83OTEzMjRCOENFOEExMUYwQUI0QkQ3NjlDNEY5QUUwMi8xQk8tR2ZfVDl0
cmNFalROeGhteVF5Nm9BMDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALlxSQawHPRjYnmTcs2aWb2tnRzUvr0q+1gNkl3sWtX0vfQngZ4Y1kzCGadDp
PSIein1tVPG82HqJY5T36JqSQ6+rrYIz2uOAU6T8VrleVXGEDLpbKuJB+2+JvavN
8q95cmNhTntk3rRs5NtxMkssMY15KtcxTY7GaO/4mvh+R/hnSmN7GKqHUnjn6nM2
BW/o2onMXTlz7QIjz4Qu4NvT77yN0oMQPPqnmZEDkvYAShvsm5FiERiJKhdKgj0L
6HMBhXW71L/HZaXVjV2CZFFECWN1j2sJZFI6Rt8XPsNtpy3SG/eWUNXbfqHi4bvo
5JZcg1t0jwPPyQQIdycwsPvrkg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 21:11:44 2026 by rpki-client