Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
File:                     BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json)
Hash identifier:          hAHckfpg+s7uwm9iU1S9lkNARKwP72Wc1DJyUQ2gXCc=
Subject key identifier:   26:FB:2E:57:38:DC:11:32:61:08:89:19:7A:B3:55:C0:29:1D:27:B6
Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
Certificate issuer:       /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Certificate serial:       04D8
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
Manifest number:          0451
Signing time:             Fri 27 Mar 2026 00:01:01 +0000
Manifest this update:     Fri 27 Mar 2026 00:01:01 +0000
Manifest next update:     Fri 03 Apr 2026 00:01:01 +0000
Files and hashes:         1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: E7+MlbDjIrLzyy7e03rQA1KGjOr3gWsTeZ2mAgCFKUg=)
                          2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: eYryKgNZm2qZqdFNNTLzTj59Jc409yodEwjuUOxXoJY=)
                          3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: glYctxlo8gx3BenqS2wSFdBXN3gLXFdiT5hyE/Vu8Ww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
                          rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240 (0x4d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
        Validity
            Not Before: Mar 27 00:01:01 2026 GMT
            Not After : Apr  3 00:01:01 2026 GMT
        Subject: CN=69c5c8bd-1a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b9:83:53:81:59:15:3a:b5:26:9c:b4:d7:be:
                    9c:16:db:e7:b0:8f:be:70:30:48:81:b9:33:e9:0f:
                    22:29:f5:a1:69:82:ae:b1:d8:2c:09:5f:27:99:f3:
                    5a:b8:01:a0:ab:1b:b3:09:27:22:b1:01:10:60:6d:
                    b8:b4:ba:a2:43:5d:78:aa:90:20:ac:d9:82:17:29:
                    3b:3d:b8:8b:e4:a4:48:8c:40:52:f2:63:53:3a:49:
                    92:72:cc:fc:1f:eb:9b:4e:a3:0e:18:74:f9:05:12:
                    f2:5f:a6:30:a0:db:c1:23:a7:9b:24:63:48:74:92:
                    69:ce:10:fc:38:90:67:92:0c:f2:7c:a8:0b:f7:7f:
                    09:51:7b:52:81:e3:9e:84:28:e1:c8:c8:c7:3a:b5:
                    d4:9c:2d:87:ab:57:8c:39:d2:b8:fa:ac:66:0b:42:
                    d3:eb:c0:f4:86:e7:2e:d1:9e:ec:70:f4:ea:f2:51:
                    98:52:42:b3:96:25:08:f2:2b:48:c7:61:f3:25:a7:
                    a4:c3:07:78:15:56:57:36:46:3f:ff:32:e5:49:93:
                    68:43:2a:da:eb:fb:68:6b:4a:64:b6:a2:17:09:6f:
                    4e:60:78:65:7b:32:ce:b1:13:6e:e6:ac:4c:8e:db:
                    33:a3:ee:16:ae:68:e6:7c:5d:d4:65:7c:50:47:ae:
                    c5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FB:2E:57:38:DC:11:32:61:08:89:19:7A:B3:55:C0:29:1D:27:B6
            X509v3 Authority Key Identifier:
                keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:3a:a5:cd:42:f2:42:9b:66:20:0f:5f:3f:b3:03:3d:9f:b9:
         5c:d2:1e:25:1e:28:fa:23:1f:4c:70:0a:41:51:61:10:da:6f:
         9b:23:c3:cb:8e:35:31:4b:de:7e:1b:ce:1e:17:b1:12:28:56:
         57:95:86:1b:c9:9e:f2:33:68:2d:e0:9c:36:4b:b4:f2:b8:7e:
         21:28:7a:74:12:6c:c7:9b:86:fc:42:64:0b:5d:98:e0:c0:48:
         c6:d9:fc:73:70:0e:94:d1:e1:e8:51:07:9e:16:f2:93:e3:dc:
         55:47:1b:43:5d:9b:15:59:4b:97:7f:65:5b:74:93:b7:03:55:
         6b:65:3e:eb:41:dc:cb:8a:a8:40:81:05:2f:53:4e:88:71:f1:
         1a:c3:5c:17:64:91:98:4a:61:11:cd:82:47:40:b1:f9:57:68:
         fe:ab:19:6c:d8:07:c3:f3:31:33:4b:10:03:89:3c:9b:ba:2e:
         34:24:bd:ca:11:58:e7:73:2f:88:13:96:ac:ff:f1:f5:bf:bf:
         13:8f:61:fc:cb:82:1c:9e:eb:04:4c:18:ae:17:5d:5f:8a:e6:
         90:21:42:36:5d:6b:c8:6c:da:00:1a:7c:96:4d:86:b9:7d:b6:
         0a:11:d8:6f:01:b5:a8:c6:ab:75:80:a6:1b:71:ed:2f:68:6b:
         3a:78:58:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:21:28 2026 by rpki-client