Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.mft
File:                     boeJT2AXn8vHknMo9a7V591-s_A.mft (raw, json)
Hash identifier:          9TSGDLuH82n4u4Vgu7a2WkwF+xgZD8FDo8sdSVI9B3c=
Subject key identifier:   65:E2:BB:F2:B8:A2:F0:6F:CD:51:68:78:12:B2:64:6D:38:CB:D4:EA
Authority key identifier: 6E:87:89:4F:60:17:9F:CB:C7:92:73:28:F5:AE:D5:E7:DD:7E:B3:F0
Certificate issuer:       /CN=A91806BA/serialNumber=6E87894F60179FCBC7927328F5AED5E7DD7EB3F0
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/boeJT2AXn8vHknMo9a7V591-s_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.mft
Manifest number:          6F
Signing time:             Mon 21 Sep 2026 07:57:19 +0000
Manifest this update:     Mon 21 Sep 2026 07:57:19 +0000
Manifest next update:     Mon 28 Sep 2026 07:57:19 +0000
Files and hashes:         1: boeJT2AXn8vHknMo9a7V591-s_A.crl (hash: yr/Pimi7R1F4wNpcU8Yf2p22e6/CXYsFqMkqDIhxQKg=)
                          2: B44E8878129C11F1B0F372353D3D8C67.roa (hash: nVuAqCAmrtCFyjzAaGnxdvmFqZJr1Uq5L661kFJXcwA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.crl
                          rsync://rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/boeJT2AXn8vHknMo9a7V591-s_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91806BA, serialNumber=6E87894F60179FCBC7927328F5AED5E7DD7EB3F0
        Validity
            Not Before: Sep 21 07:57:19 2026 GMT
            Not After : Sep 28 07:57:19 2026 GMT
        Subject: CN=6ab0e35f-2452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:b3:d5:02:c8:c4:09:99:b4:8c:86:8d:72:
                    c3:b7:5e:f5:d4:11:a4:24:b5:47:01:21:8c:bd:24:
                    0a:93:5b:7d:90:d8:27:2c:52:4e:60:e7:15:5f:7a:
                    61:7c:d4:0d:15:de:37:07:e9:a7:c3:3e:4d:68:e5:
                    b6:11:c9:66:b1:af:06:f7:57:79:ee:e5:12:cb:a2:
                    01:a6:e0:45:61:81:c8:5a:7d:a5:16:8e:ad:83:d4:
                    c4:e6:65:06:f3:16:f4:3f:a2:08:98:1f:4d:49:d7:
                    d5:f1:49:8f:14:90:90:15:03:88:8d:c5:1f:0d:d8:
                    d4:09:80:a7:66:f3:58:47:60:58:01:e2:a7:68:74:
                    3b:10:ce:76:ce:c1:3a:4c:96:ad:27:8e:d9:cf:45:
                    2e:2f:04:54:7e:69:7b:e4:9f:32:31:62:85:6e:fc:
                    3c:f1:69:aa:a3:e9:01:f5:9d:0d:24:9e:3e:e5:3f:
                    6d:1b:6e:37:9d:1c:f1:db:b2:2a:d0:5a:a8:5e:11:
                    aa:4c:0c:60:51:da:9a:fd:d1:30:5a:06:1d:b5:bc:
                    9f:49:59:84:08:f2:5e:e3:4a:4c:65:85:10:b7:55:
                    11:f8:5d:ae:50:bd:07:ac:d5:64:3c:28:5f:c4:7e:
                    4a:dd:bc:7e:4e:bf:98:3e:19:f4:c9:a1:7b:fd:0e:
                    0e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E2:BB:F2:B8:A2:F0:6F:CD:51:68:78:12:B2:64:6D:38:CB:D4:EA
            X509v3 Authority Key Identifier:
                keyid:6E:87:89:4F:60:17:9F:CB:C7:92:73:28:F5:AE:D5:E7:DD:7E:B3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/boeJT2AXn8vHknMo9a7V591-s_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:90:d0:99:61:fa:ce:18:ef:b5:7b:fb:1f:49:b3:67:90:c5:
         91:d0:80:19:29:50:e3:29:11:44:f8:f9:87:e8:5e:2e:e9:10:
         8b:eb:6b:c2:86:1d:cb:f0:92:0c:ca:7d:1d:58:55:9c:b1:4e:
         2b:9d:9b:72:0f:b2:13:c1:1b:26:c3:96:79:49:65:61:e8:d3:
         89:4e:77:ae:0d:68:85:f3:a5:b4:f0:fa:68:38:f0:9d:40:c2:
         23:1d:6e:89:43:40:49:79:29:88:bb:18:e8:d2:77:a9:fb:b6:
         7a:33:65:27:2b:a4:46:44:8a:f2:8c:10:55:23:2b:58:88:42:
         85:41:c0:9d:04:6f:4d:a3:bd:68:9b:9c:e0:8c:b8:b3:e6:95:
         a5:a2:6f:85:b9:e3:fc:ca:5f:3d:9c:cc:2a:9b:63:99:ad:cd:
         d2:63:80:3e:dd:24:7a:39:0b:ff:8f:2a:f2:94:b8:f2:8f:9d:
         89:a4:9a:c1:40:2e:b3:f2:35:d8:9a:12:e2:05:c9:f2:a7:be:
         b0:53:23:c5:91:04:55:3e:1b:31:fa:36:ce:5c:11:a0:22:c0:
         56:8f:1a:58:e4:36:e4:15:ae:84:42:78:91:73:7a:b9:e9:20:
         7e:a6:88:fc:cf:b0:7e:07:08:c4:b9:ad:e4:9c:4c:c9:5d:ba:
         58:fd:4a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:55:47 2026 by rpki-client