Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
File:                     bOLX0NlZgNdDytSEhphI26Elwps.mft (raw, json)
Hash identifier:          CZRjMJeRn3OOje+uJbiQzPZoRTvrC0efs3r0ebivXq8=
Subject key identifier:   B6:E2:E7:0D:0A:6E:06:E2:D8:9D:45:FF:4D:57:5A:20:67:1F:D6:E7
Authority key identifier: 6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
Certificate issuer:       /CN=A9120E98/serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
Certificate serial:       01DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
Manifest number:          01D2
Signing time:             Sun 05 Apr 2026 03:09:58 +0000
Manifest this update:     Sun 05 Apr 2026 03:09:58 +0000
Manifest next update:     Sun 12 Apr 2026 03:09:58 +0000
Files and hashes:         1: bOLX0NlZgNdDytSEhphI26Elwps.crl (hash: gKOgir0uPKSM6ugy6eeHXiuzy/q+qvqdABG+pJPfzIw=)
                          2: 36F3B6A86E5411EEAA31F87AC4F9AE02.roa (hash: pDTxi/uoAFHGF48GS5j39SSpSo1n7kGbSYg7ozTcf7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl
                          rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:09:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120E98, serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
        Validity
            Not Before: Apr  5 03:09:58 2026 GMT
            Not After : Apr 12 03:09:58 2026 GMT
        Subject: CN=69d1d286-c709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e5:70:1c:56:d1:33:df:eb:d1:26:7d:73:85:
                    fc:d2:51:14:db:77:19:10:5c:32:f8:94:8f:08:41:
                    e5:1e:a2:db:82:4f:6b:fa:26:c2:ff:e2:ac:76:8a:
                    f0:28:1d:a2:06:25:de:93:20:a2:c6:2e:8c:20:d1:
                    48:aa:2f:4e:f1:e0:02:4f:ba:3f:23:42:af:52:aa:
                    fe:f4:6b:74:e6:11:25:ea:39:40:b3:8a:f7:72:c6:
                    e9:5a:e9:d6:51:3c:6e:0f:40:43:05:59:bf:8d:a1:
                    8e:a7:7a:a6:ee:f2:fb:9a:72:37:ab:87:44:f0:ac:
                    9a:b7:b7:5b:7c:e1:ad:4a:c1:6f:95:74:a9:69:8d:
                    4e:21:68:20:28:42:30:03:52:af:2e:5d:b4:fc:72:
                    a2:66:0a:7b:03:de:dc:dc:8b:03:93:05:a4:6f:13:
                    b0:8a:3c:0a:e7:98:ab:2b:e0:78:69:6a:13:a4:d9:
                    ea:d6:0d:f3:d6:12:79:50:c4:a3:58:b2:e3:4a:6d:
                    6d:7a:03:f6:7b:ba:52:47:46:7f:4c:0f:29:b2:ac:
                    20:a8:74:f0:25:6b:47:0a:b2:94:8a:84:31:54:13:
                    38:63:af:2a:17:f7:c5:9d:17:38:fd:94:1d:21:d5:
                    59:1f:ac:dd:f7:00:de:0c:c5:57:13:fa:d3:21:ae:
                    39:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E2:E7:0D:0A:6E:06:E2:D8:9D:45:FF:4D:57:5A:20:67:1F:D6:E7
            X509v3 Authority Key Identifier:
                keyid:6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f9:37:20:48:22:c1:04:46:e3:e2:eb:a3:da:5e:19:7f:28:
         a3:e6:de:68:cc:37:6a:99:6f:7b:77:3f:0b:96:bf:0b:b0:0a:
         24:54:68:af:ac:52:c5:9c:0a:5d:43:2d:3a:53:77:70:0c:a1:
         d0:d4:50:8e:9b:62:9b:5e:ea:c2:4b:d5:42:c9:1c:1d:78:27:
         fd:2d:d0:35:e1:d7:25:10:89:44:a0:10:d1:85:4a:f9:6d:82:
         43:52:6a:37:1e:33:61:89:30:5f:64:4b:7d:b7:0d:af:fb:0a:
         50:33:e0:4e:6f:85:08:f2:04:13:41:ed:fd:43:4a:f6:6c:27:
         57:1a:ea:b2:7b:ec:73:de:2c:47:74:ce:d5:3a:34:32:44:2e:
         12:a7:ca:e7:3e:df:f1:2f:a0:1f:38:05:c4:21:c4:c4:c4:b4:
         e7:a7:f1:92:0b:b5:88:1d:49:03:bd:6e:15:3b:c7:b2:c5:ce:
         f9:a4:21:db:ae:03:08:cf:e4:ae:9b:80:fc:89:cb:0f:a8:ea:
         6e:61:4e:1e:ea:30:68:32:88:07:da:33:6f:cc:c7:57:e5:af:
         09:dd:83:d0:b1:25:06:6e:4d:f8:6d:55:bd:b8:ec:bd:d9:ec:
         62:c3:6d:03:51:2b:d1:8c:fd:d1:c7:03:2b:6a:75:de:eb:a4:
         e5:c6:b9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:19:42 2026 by rpki-client