Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft
File:                     1BO-Gf_T9trcEjTNxhmyQy6oA08.mft (raw, json)
Hash identifier:          V4qVpkfzwFW6ejwGYy1ybb/nZNGkDdjCu1LBwKdIlQw=
Subject key identifier:   1C:E0:83:69:FE:88:8E:A4:E7:51:6C:22:C4:1C:D5:84:CB:F7:6F:25
Authority key identifier: D4:13:BE:19:FF:D3:F6:DA:DC:12:34:CD:C6:19:B2:43:2E:A8:03:4F
Certificate issuer:       /CN=A91913D7/serialNumber=D413BE19FFD3F6DADC1234CDC619B2432EA8034F
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft
Manifest number:          A3
Signing time:             Tue 13 Oct 2026 07:56:41 +0000
Manifest this update:     Tue 13 Oct 2026 07:56:41 +0000
Manifest next update:     Tue 20 Oct 2026 07:56:41 +0000
Files and hashes:         1: 1BO-Gf_T9trcEjTNxhmyQy6oA08.crl (hash: bOk70r29gMSWcF1Zkv4FvRL4W1QlfsOOcdsG7E2fSEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.crl
                          rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 07:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91913D7, serialNumber=D413BE19FFD3F6DADC1234CDC619B2432EA8034F
        Validity
            Not Before: Oct 13 07:56:41 2026 GMT
            Not After : Oct 20 07:56:41 2026 GMT
        Subject: CN=6acde439-3e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:a0:22:c4:24:1f:30:e1:0e:c8:db:e9:c8:
                    1e:2d:5b:cd:0a:f0:fc:59:08:85:ba:3b:32:94:fd:
                    7e:77:9e:d3:8c:49:54:89:25:47:8b:84:08:a8:10:
                    cf:7b:4b:bf:c2:77:3e:ff:d2:93:a3:8f:62:36:01:
                    0e:49:c9:53:46:7e:6e:bf:43:45:ea:aa:52:bd:97:
                    bc:64:30:60:8a:6b:dd:af:e3:52:27:ce:44:97:88:
                    88:01:32:56:9a:83:be:4e:20:b8:db:6e:18:ce:71:
                    3b:27:78:78:d9:d5:d8:99:11:01:1d:cd:24:b8:22:
                    30:43:7a:f8:fb:42:44:35:5f:17:83:47:57:98:31:
                    b5:d3:2c:94:18:b1:3b:59:98:01:16:4c:45:e9:a9:
                    c3:a1:04:da:31:47:e6:a6:99:11:c7:1b:cd:e9:2d:
                    e2:5c:b7:77:1d:da:8a:ce:3f:cf:73:6b:82:2e:59:
                    40:ef:a1:bc:8b:ad:6f:9f:8b:f3:77:27:fb:21:a7:
                    ba:83:8b:0e:bf:36:1e:d9:50:48:10:20:c6:4d:c3:
                    1d:b0:74:5c:cc:be:a8:83:ba:3e:70:c1:31:92:f6:
                    8a:91:30:61:2f:dd:16:4e:bc:af:1b:73:c2:60:76:
                    82:61:ec:db:93:bb:97:3f:a0:5b:19:e1:e6:63:8f:
                    00:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E0:83:69:FE:88:8E:A4:E7:51:6C:22:C4:1C:D5:84:CB:F7:6F:25
            X509v3 Authority Key Identifier:
                keyid:D4:13:BE:19:FF:D3:F6:DA:DC:12:34:CD:C6:19:B2:43:2E:A8:03:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BO-Gf_T9trcEjTNxhmyQy6oA08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/791324B8CE8A11F0AB4BD769C4F9AE02/1BO-Gf_T9trcEjTNxhmyQy6oA08.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e1:e8:b7:0a:6b:30:a1:48:4a:8a:f0:7c:8e:68:01:88:dc:
         d3:d0:1f:06:3f:0a:3c:54:ff:6d:21:e5:79:62:79:2f:96:ce:
         96:e7:81:6a:00:e6:95:06:9e:94:cd:18:c8:a7:27:74:d7:9a:
         56:c0:f2:e7:84:d0:bf:b1:60:00:fe:51:4a:24:97:99:b9:02:
         67:e7:4b:46:cb:d1:c9:cc:76:67:48:06:1a:fe:a8:c1:68:0b:
         38:96:69:5d:4c:ab:03:a2:88:59:c2:7b:5d:3b:1d:d9:93:d0:
         ed:a8:19:57:38:98:28:2a:a1:89:20:51:6c:27:1c:e5:e3:30:
         ec:7d:68:5d:dd:89:e8:2f:76:48:a2:d6:4d:2e:dc:f2:b9:e5:
         df:87:67:06:4d:20:95:e6:d6:46:6f:cb:b3:88:a7:ee:54:d9:
         38:e9:39:21:e0:16:39:d5:37:db:f3:61:76:c8:c7:2f:86:27:
         b5:33:92:80:28:0a:d0:b7:9e:82:56:a7:1e:8d:6b:78:82:41:
         c6:b4:21:1d:db:7b:2e:85:01:59:d5:58:fe:a0:a7:1a:5f:ef:
         46:3a:2c:c1:75:3f:dd:3f:9e:93:31:83:7c:7e:94:cd:0e:7c:
         7f:d7:ee:7b:84:5e:e0:0c:b3:13:66:98:5f:d2:16:28:f8:c1:
         df:66:ee:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTEzRDcxMTAvBgNVBAUTKEQ0MTNCRTE5RkZEM0Y2REFEQzEyMzRDREM2MTlCMjQz
MkVBODAzNEYwHhcNMjYxMDEzMDc1NjQxWhcNMjYxMDIwMDc1NjQxWjAYMRYwFAYD
VQQDEw02YWNkZTQzOS0zZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxMagIsQkHzDhDsjb6cgeLVvNCvD8WQiFujsylP1+d57TjElUiSVHi4QIqBDP
e0u/wnc+/9KTo49iNgEOSclTRn5uv0NF6qpSvZe8ZDBgimvdr+NSJ85El4iIATJW
moO+TiC4224YznE7J3h42dXYmREBHc0kuCIwQ3r4+0JENV8Xg0dXmDG10yyUGLE7
WZgBFkxF6anDoQTaMUfmppkRxxvN6S3iXLd3HdqKzj/Pc2uCLllA76G8i61vn4vz
dyf7Iae6g4sOvzYe2VBIECDGTcMdsHRczL6og7o+cMExkvaKkTBhL90WTryvG3PC
YHaCYezbk7uXP6BbGeHmY48AsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBzgg2n+
iI6k51FsIsQc1YTL928lMB8GA1UdIwQYMBaAFNQTvhn/0/ba3BI0zcYZskMuqANP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTNENy83OTEzMjRCOENF
OEExMUYwQUI0QkQ3NjlDNEY5QUUwMi8xQk8tR2ZfVDl0cmNFalROeGhteVF5Nm9B
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFCTy1HZl9UOXRyY0VqVE54aG15UXk2b0EwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTNENy83OTEzMjRCOENFOEExMUYwQUI0QkQ3NjlDNEY5QUUwMi8xQk8tR2ZfVDl0
cmNFalROeGhteVF5Nm9BMDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM+HotwprMKFISorwfI5oAYjc09AfBj8KPFT/bSHleWJ5L5bOlueBagDmlQae
lM0YyKcndNeaVsDy54TQv7FgAP5RSiSXmbkCZ+dLRsvRycx2Z0gGGv6owWgLOJZp
XUyrA6KIWcJ7XTsd2ZPQ7agZVziYKCqhiSBRbCcc5eMw7H1oXd2J6C92SKLWTS7c
8rnl34dnBk0glebWRm/Ls4in7lTZOOk5IeAWOdU32/NhdsjHL4YntTOSgCgK0Lee
glanHo1reIJBxrQhHdt7LoUBWdVY/qCnGl/vRjoswXU/3T+ekzGDfH6UzQ58f9fu
e4Re4AyzE2aYX9IWKPjB32buPQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 22:56:06 2026 by rpki-client