Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
File:                     BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json)
Hash identifier:          kGC/hmOuB7DKIvSyahQElsMAjVsQGttrLJAauh9dp/o=
Subject key identifier:   52:8B:32:DF:CD:9B:67:78:2A:8A:32:A7:1B:86:9D:D7:46:67:5C:CC
Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
Certificate issuer:       /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Certificate serial:       0403
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
Manifest number:          03F8
Signing time:             Sun 19 Oct 2025 02:26:49 +0000
Manifest this update:     Sun 19 Oct 2025 02:26:48 +0000
Manifest next update:     Sun 26 Oct 2025 02:26:48 +0000
Files and hashes:         1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: FOmFHTpchG5/Bg4OJJddj3qEwZGw63QECPJWJKWL3VM=)
                          2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: yEVRrXufQh+Qc/HqPk/jAvaqGmnT+PN1jZ/kXTfyo9A=)
                          3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: hYiudA2rwhN316Pb5lt+GNf53uhu2FFhMUzTaTRI2hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
                          rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027 (0x403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
        Validity
            Not Before: Oct 19 02:26:48 2025 GMT
            Not After : Oct 26 02:26:48 2025 GMT
        Subject: CN=68f44c69-be94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:25:5e:0e:b1:c4:7e:74:5c:42:e8:dd:cc:85:
                    1d:30:7a:08:2c:48:ee:57:6e:1b:a7:03:dd:5e:f5:
                    65:23:36:73:ff:23:18:b7:09:fd:e5:da:e7:de:4e:
                    66:75:da:ca:d3:a0:f5:ec:e3:a7:45:4c:5b:8c:60:
                    7e:36:73:fb:85:01:f7:31:88:46:c4:c5:7e:10:29:
                    cc:ed:49:84:a2:3f:5b:0d:8d:82:ae:8d:40:5a:6b:
                    5e:19:cd:2e:91:b4:47:86:3b:ae:0b:a3:50:84:36:
                    10:02:26:51:92:70:a6:92:46:66:76:fa:51:46:1c:
                    83:37:24:83:68:b1:e8:1d:71:be:ac:89:1c:95:b0:
                    5c:c3:45:33:e6:42:bf:68:7d:44:b8:f8:be:b4:2c:
                    d2:b0:c6:27:f9:e7:8e:1e:3c:01:26:62:56:e1:e2:
                    d7:7b:55:28:4c:8a:36:18:0c:94:d9:0b:c0:27:48:
                    58:a3:84:ae:c8:21:81:91:a6:d0:07:22:a2:8f:64:
                    f5:6b:a4:f3:55:af:eb:1d:a1:3f:a6:24:88:58:28:
                    79:4d:e3:7e:cb:a9:c6:e7:70:48:b4:af:38:d0:4e:
                    af:18:4d:a4:92:22:bb:c6:fd:d1:0d:a0:a5:02:54:
                    6b:43:65:32:27:60:dc:69:84:6c:20:00:82:d2:44:
                    cc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8B:32:DF:CD:9B:67:78:2A:8A:32:A7:1B:86:9D:D7:46:67:5C:CC
            X509v3 Authority Key Identifier:
                keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e3:d9:e0:3c:a6:b1:0d:6f:67:f3:20:4b:17:ac:98:10:4a:
         3d:e4:36:48:34:59:c8:72:86:6b:ed:7d:95:ba:f1:f7:c1:12:
         b2:69:10:28:98:31:b3:55:e4:df:5c:d0:9c:bc:02:2d:4b:0a:
         7e:13:81:99:f6:ef:66:82:17:d9:8c:34:8a:25:3b:06:36:c1:
         00:1b:fc:88:bd:cd:45:d9:a4:7f:00:57:3b:59:a0:37:0e:62:
         4f:e6:ae:c2:55:82:4e:2e:69:f3:12:79:38:5a:da:07:80:26:
         25:b5:b3:57:aa:02:1b:76:bc:73:6a:5c:df:b5:eb:2b:22:46:
         6d:28:1a:cd:0a:27:a9:da:19:50:82:3d:77:ff:c1:dd:c3:98:
         5f:6b:c3:97:9e:ca:5c:6d:04:24:9b:84:ac:6b:d2:1b:6c:8a:
         3d:76:6a:cc:e2:59:c0:b4:52:bd:49:54:2b:98:e8:ff:75:d7:
         3f:18:53:15:fc:16:40:fd:f8:a3:e9:c1:86:b7:b1:d0:00:31:
         41:eb:37:a6:14:20:b3:aa:bb:fd:66:6d:8e:e4:48:60:98:cc:
         83:11:f5:31:39:82:e7:c2:ea:41:1e:e1:02:ed:8e:f7:0e:33:
         af:22:c4:e6:63:32:ea:88:91:81:d2:33:2a:1a:b7:87:60:25:
         d0:d9:60:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:49 2025 by rpki-client