Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
File:                     BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json)
Hash identifier:          kYABgL2PVgf+EDuPN70rB29eOI/oQZq8ExwmJqiD+Wk=
Subject key identifier:   1E:5E:0C:67:C6:31:B2:91:DF:A0:E1:FF:FB:7C:94:9F:E8:D2:88:79
Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B
Certificate issuer:       /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
Certificate serial:       04F1
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
Manifest number:          046A
Signing time:             Fri 15 May 2026 00:16:16 +0000
Manifest this update:     Fri 15 May 2026 00:16:16 +0000
Manifest next update:     Fri 22 May 2026 00:16:16 +0000
Files and hashes:         1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: rR2ziEA+Oz6eQgUFxsRO6uNpbW3tnKGAnXrA2nJBBvA=)
                          2: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: glYctxlo8gx3BenqS2wSFdBXN3gLXFdiT5hyE/Vu8Ww=)
                          3: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: eYryKgNZm2qZqdFNNTLzTj59Jc409yodEwjuUOxXoJY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl
                          rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 00:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1265 (0x4f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B
        Validity
            Not Before: May 15 00:16:16 2026 GMT
            Not After : May 22 00:16:16 2026 GMT
        Subject: CN=6a0665d0-7529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:48:b5:2d:d5:f5:1a:14:79:29:df:9a:b4:
                    6a:ba:b9:33:50:ec:4d:c3:23:a5:08:17:56:92:2f:
                    33:0a:df:1e:56:a4:e8:9f:b6:ab:24:c4:90:4d:d1:
                    90:af:0a:7d:8b:48:8c:10:7b:01:07:fc:34:5d:bb:
                    57:a8:70:cf:6b:81:31:7f:48:93:62:c7:40:0d:9e:
                    9e:ae:08:ce:1b:97:7e:6a:c1:67:f1:ef:71:65:19:
                    9b:9a:e9:06:d3:78:65:da:ef:99:05:db:4a:bc:68:
                    57:f2:05:f7:9c:bd:74:90:fa:f7:03:0d:48:1a:0b:
                    d9:e0:a9:20:04:79:e5:40:75:76:24:55:df:0e:3e:
                    cc:b1:72:bd:d5:e4:85:db:c1:9e:eb:fd:16:4b:2f:
                    49:c8:ee:e1:5c:f7:8f:3d:4c:67:3a:4b:16:19:04:
                    c9:44:1a:d5:f8:a4:52:da:65:96:3c:66:25:88:3d:
                    ce:9d:91:64:d0:b6:ed:00:e2:55:6d:d3:9a:3f:93:
                    9f:61:5d:7b:d9:8e:6e:0a:5a:df:e6:7d:dc:32:db:
                    d0:15:6f:ac:11:4f:02:0d:c8:ab:02:3b:eb:fe:76:
                    da:3c:52:c9:09:e8:80:95:7b:4a:83:b2:fd:10:12:
                    c7:84:4c:03:c7:78:4a:22:84:95:6b:e9:1f:61:a9:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5E:0C:67:C6:31:B2:91:DF:A0:E1:FF:FB:7C:94:9F:E8:D2:88:79
            X509v3 Authority Key Identifier:
                keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:63:72:57:77:0a:3e:b7:29:1c:58:ba:84:b6:b5:a1:b1:a7:
         b9:8d:2e:97:fe:fd:4f:62:66:2a:61:68:3e:77:fa:b6:95:f9:
         94:f3:b2:ce:c4:9f:a2:94:b4:58:04:6a:8c:d7:43:2c:e9:6c:
         37:51:f2:7f:1d:c4:f9:42:3b:4f:29:ab:83:ca:0f:00:f1:ad:
         bc:db:0f:80:5e:d6:a9:10:18:0b:3f:18:24:07:8c:ac:84:c5:
         4a:4e:b1:f8:f9:9d:a3:e2:09:22:e0:cf:54:c1:bc:e8:04:61:
         54:c8:cd:09:bb:5a:f4:e5:6f:2d:e1:16:c3:5d:a9:4d:df:28:
         08:be:10:32:1a:c3:93:c3:8c:de:d0:b3:f5:d7:55:bd:c8:a8:
         2d:b6:b1:1e:ee:89:ba:ca:c9:cd:e1:3d:bf:f4:8c:ed:64:7d:
         dc:f9:4c:a1:c1:48:5a:72:71:4b:c0:59:52:9b:46:43:a5:3f:
         a5:c8:1c:81:da:cc:5d:c4:60:7c:70:4d:c5:ec:39:2d:c9:0d:
         1e:53:e8:9c:71:53:9c:36:b8:a7:e6:69:9f:f5:5e:cd:92:6b:
         f1:be:b2:37:87:3a:aa:b7:f1:56:5e:af:69:4f:31:4c:03:02:
         e4:2f:47:c9:46:6f:d8:d8:90:4f:0c:ce:5d:94:3d:a7:61:f4:
         be:0b:b5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:47:03 2026 by rpki-client