Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
File:                     bOLX0NlZgNdDytSEhphI26Elwps.mft (raw, json)
Hash identifier:          b/5dcZbItb33pt5kS4n7ZwAGKouR7nKCWcD09dxhi9k=
Subject key identifier:   FE:9F:DE:89:B2:48:E0:F6:CB:7F:5A:A5:A6:5B:ED:E4:68:DE:67:4E
Authority key identifier: 6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
Certificate issuer:       /CN=A9120E98/serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
Certificate serial:       021E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
Manifest number:          0216
Signing time:             Wed 19 Aug 2026 03:31:45 +0000
Manifest this update:     Wed 19 Aug 2026 03:31:44 +0000
Manifest next update:     Wed 26 Aug 2026 03:31:44 +0000
Files and hashes:         1: bOLX0NlZgNdDytSEhphI26Elwps.crl (hash: qJIihHxsltRO6t/MvytO0UUvE5YE/se6qDXOUKXVOg8=)
                          2: 36F3B6A86E5411EEAA31F87AC4F9AE02.roa (hash: pDTxi/uoAFHGF48GS5j39SSpSo1n7kGbSYg7ozTcf7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl
                          rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120E98, serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
        Validity
            Not Before: Aug 19 03:31:44 2026 GMT
            Not After : Aug 26 03:31:44 2026 GMT
        Subject: CN=6a8523a0-9a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ec:e0:9d:1e:39:08:5e:30:5e:67:72:08:0c:
                    fc:fa:b6:72:90:d1:3b:7c:d6:2d:7e:8b:50:2a:da:
                    75:65:0c:35:6f:67:54:3f:73:1a:c5:fc:47:20:03:
                    05:38:13:9e:b7:cd:c5:81:ab:19:75:14:1b:03:6c:
                    53:35:51:a2:92:d4:c8:1f:8c:66:8c:ee:da:e7:08:
                    a8:0c:cf:95:6f:30:68:8d:93:bf:81:b7:1c:95:41:
                    80:23:3a:80:34:d3:c9:15:c8:e4:b4:e6:bc:c9:c5:
                    b6:cd:b2:e3:08:be:0f:8a:e3:00:82:a2:90:92:ea:
                    79:e6:63:16:ee:bb:27:eb:b5:97:56:db:3c:c9:b1:
                    d8:48:f1:3c:0c:fb:67:e5:90:20:48:c5:3c:ef:60:
                    8c:dc:e8:4a:21:d4:20:ee:ee:c8:07:39:60:53:a8:
                    50:43:c6:e0:39:8a:a0:32:28:e0:1e:b1:6c:77:40:
                    ac:1d:7c:01:0c:cd:f0:89:ca:97:3c:47:f3:39:a7:
                    74:4d:42:f7:51:31:3a:e4:c6:17:d1:0b:3d:36:64:
                    50:e2:23:58:9e:71:30:4f:d1:72:2f:f1:fa:74:18:
                    ff:f6:24:a4:c2:8e:d2:73:e9:15:09:12:3a:f3:13:
                    76:76:91:3a:ea:b3:21:54:d6:92:c3:ab:de:53:e9:
                    f3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9F:DE:89:B2:48:E0:F6:CB:7F:5A:A5:A6:5B:ED:E4:68:DE:67:4E
            X509v3 Authority Key Identifier:
                keyid:6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d8:5b:11:a0:be:4a:23:1e:fc:35:69:22:f0:3c:ef:34:88:
         e3:1a:81:a7:8b:9e:1f:5b:70:5d:cc:b6:39:cc:98:34:52:37:
         3b:a4:a9:0b:d4:20:8d:eb:93:bc:9f:61:b9:7a:72:00:65:3d:
         93:e1:71:70:02:6a:5c:18:20:f8:6d:aa:1f:15:4b:81:25:52:
         69:19:cc:b5:a5:2c:4d:84:cc:92:26:dc:a2:2c:67:2a:51:a2:
         ec:46:31:91:a2:5b:97:dd:71:7b:35:ba:6f:89:c1:61:e7:5b:
         d9:e2:7a:57:b4:73:f3:e6:71:b7:a7:e0:05:f3:29:61:81:80:
         59:a5:d3:af:e7:0f:21:94:68:a8:8b:46:1b:8b:9b:2d:41:72:
         9e:ef:37:39:39:28:6f:98:4c:fe:08:cf:16:10:ff:8c:7e:77:
         a1:e0:1d:de:34:6c:45:64:6f:d1:9d:e9:62:85:1e:ea:8e:83:
         41:56:f2:93:34:fc:e2:d7:d1:a3:63:52:a1:f4:ee:6a:11:38:
         ec:8d:a3:10:a8:6f:39:45:eb:5c:91:3a:e4:a6:4d:7f:1b:64:
         f2:2c:78:e4:32:f6:71:66:94:ed:83:f7:05:d0:22:33:c3:b8:
         da:a5:5d:f8:a8:a8:a8:b3:81:ae:12:9f:55:4b:03:1f:10:42:
         2c:f3:76:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBFOTgxMTAvBgNVBAUTKDZDRTJEN0QwRDk1OTgwRDc0M0NBRDQ4NDg2OTg0OERC
QTEyNUMyOUIwHhcNMjYwODE5MDMzMTQ0WhcNMjYwODI2MDMzMTQ0WjAYMRYwFAYD
VQQDEw02YTg1MjNhMC05YTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6uzgnR45CF4wXmdyCAz8+rZykNE7fNYtfotQKtp1ZQw1b2dUP3MaxfxHIAMF
OBOet83FgasZdRQbA2xTNVGiktTIH4xmjO7a5wioDM+VbzBojZO/gbcclUGAIzqA
NNPJFcjktOa8ycW2zbLjCL4PiuMAgqKQkup55mMW7rsn67WXVts8ybHYSPE8DPtn
5ZAgSMU872CM3OhKIdQg7u7IBzlgU6hQQ8bgOYqgMijgHrFsd0CsHXwBDM3wicqX
PEfzOad0TUL3UTE65MYX0Qs9NmRQ4iNYnnEwT9FyL/H6dBj/9iSkwo7Sc+kVCRI6
8xN2dpE66rMhVNaSw6veU+nzJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP6f3omy
SOD2y39apaZb7eRo3mdOMB8GA1UdIwQYMBaAFGzi19DZWYDXQ8rUhIaYSNuhJcKb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEU5OC83NEZENUU4MjZF
NTMxMUVFOUI5MTdFNzlDNEY5QUUwMi9iT0xYME5sWmdOZER5dFNFaHBoSTI2RWx3
cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JPTFgwTmxaZ05kRHl0U0VocGhJMjZFbHdwcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MEU5OC83NEZENUU4MjZFNTMxMUVFOUI5MTdFNzlDNEY5QUUwMi9iT0xYME5sWmdO
ZER5dFNFaHBoSTI2RWx3cHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARdhbEaC+SiMe/DVpIvA87zSI4xqBp4ueH1twXcy2OcyYNFI3O6SpC9QgjeuT
vJ9huXpyAGU9k+FxcAJqXBgg+G2qHxVLgSVSaRnMtaUsTYTMkibcoixnKlGi7EYx
kaJbl91xezW6b4nBYedb2eJ6V7Rz8+Zxt6fgBfMpYYGAWaXTr+cPIZRoqItGG4ub
LUFynu83OTkob5hM/gjPFhD/jH53oeAd3jRsRWRv0Z3pYoUe6o6DQVbykzT84tfR
o2NSofTuahE47I2jEKhvOUXrXJE65KZNfxtk8ix45DL2cWaU7YP3BdAiM8O42qVd
+KioqLOBrhKfVUsDHxBCLPN2Lg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:16:34 2026 by rpki-client