Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
File:                     bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json)
Hash identifier:          JHarXPima45dzdagi7MZRKz7+YOigKkTjpNcSukQl5U=
Subject key identifier:   C7:6E:E6:D1:EE:FD:15:F1:00:6E:AC:B8:DA:6D:F3:E1:5F:5B:0C:32
Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
Certificate issuer:       /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Certificate serial:       260D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
Manifest number:          25E9
Signing time:             Tue 28 Jul 2026 15:49:20 +0000
Manifest this update:     Tue 28 Jul 2026 15:49:20 +0000
Manifest next update:     Tue 04 Aug 2026 15:49:20 +0000
Files and hashes:         1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: oqCc6gHdaGEYZFnhEwk2xdCg2uFFBAQcQYC1CoWVOhY=)
                          2: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: ytsKFQ+8cerfl+7UcTFTYgkMi9hqaM6qtX9IyVTa6Lc=)
                          3: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: IUfyxffvy3cD3U2/JFftlJFRyd1Vin0nYf/0GsHHPYI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
                          rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9741 (0x260d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
        Validity
            Not Before: Jul 28 15:49:20 2026 GMT
            Not After : Aug  4 15:49:20 2026 GMT
        Subject: CN=6a68cf80-9d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:da:d1:d4:d1:ae:0d:54:2f:86:ca:1c:92:fb:
                    3e:17:7f:0d:9e:19:4c:d2:1d:31:a3:e7:14:47:07:
                    97:ba:e4:70:7c:db:70:72:0e:dc:51:85:95:6a:1a:
                    1f:21:e4:77:30:06:7c:73:31:e4:b5:4f:63:0b:cd:
                    b0:72:37:ea:cd:78:39:c4:42:13:20:bf:dd:ac:dc:
                    a2:76:4c:c1:cc:17:cd:f3:06:5f:ed:f6:4e:5d:21:
                    87:82:38:10:44:7f:1f:dd:3e:8e:67:15:86:cb:ed:
                    2e:ca:10:68:96:f6:cf:d8:2c:31:4c:01:08:14:15:
                    e4:90:62:e5:1a:33:5b:a1:54:e9:96:9f:45:dd:ff:
                    e6:68:76:22:99:60:f6:fd:70:bb:4f:3f:36:e1:2d:
                    ac:ab:68:51:4c:a0:d8:21:4e:51:ba:44:77:bb:83:
                    d0:ca:b7:15:b8:14:74:b2:43:87:86:af:a5:35:ea:
                    68:bf:61:70:73:23:a1:f5:d8:73:4b:86:4f:48:dd:
                    32:d1:05:65:ed:23:ba:15:22:b1:9c:e3:48:ea:bf:
                    28:0a:31:b9:2c:27:c5:47:69:b4:fb:e8:b6:f0:68:
                    29:86:0c:4f:2c:5a:86:99:dd:94:04:0f:d6:17:46:
                    8c:ad:fc:09:a0:1a:64:32:7c:a3:6a:29:39:d9:6f:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6E:E6:D1:EE:FD:15:F1:00:6E:AC:B8:DA:6D:F3:E1:5F:5B:0C:32
            X509v3 Authority Key Identifier:
                keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:78:de:de:73:a3:6c:52:c7:71:b9:bd:8c:2f:79:8d:3e:55:
         79:f4:dc:da:4b:cc:91:cf:91:72:d8:70:4c:81:5b:cb:db:ab:
         8a:7a:4c:e7:43:07:9e:3f:4e:09:68:b8:d7:93:19:2f:93:ff:
         92:9d:e4:29:c3:84:db:10:7b:8d:7f:34:de:cf:f8:8c:2b:ea:
         df:bc:f6:6b:60:05:89:af:b3:f7:cc:e8:16:31:64:7b:77:0b:
         a8:b3:f7:af:24:60:b6:8e:0c:b0:0e:d3:b5:84:dc:86:d5:dd:
         a3:7b:1b:27:77:41:1e:c2:c7:20:0a:d9:52:ac:a3:6c:31:91:
         9e:01:cf:4e:00:dc:28:92:0f:83:80:33:f6:89:f1:59:86:c1:
         7c:75:72:75:41:0a:6e:0d:a6:98:78:91:2f:ed:96:54:f9:20:
         03:9e:34:c6:c3:68:d6:2e:56:70:bb:7d:79:7d:e8:17:82:c8:
         1f:eb:c5:6e:3e:3f:b5:97:bb:6d:3c:37:b6:42:b0:91:06:48:
         b6:db:16:41:78:0d:22:09:73:0c:16:9f:73:c3:c6:24:21:79:
         5a:92:cf:77:36:b3:b6:60:63:b4:a0:1e:84:32:93:9f:21:aa:
         e5:99:bf:1d:f0:cf:6b:33:d4:d9:44:68:b7:8e:ce:e3:f4:a0:
         25:39:10:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:18:12 2026 by rpki-client