Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
File:                     bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json)
Hash identifier:          oANL40w5bpazUdo8Ez4IPRNXzU30+B278rfnB96v5wk=
Subject key identifier:   C8:86:6C:FB:5E:38:BA:71:98:DA:AA:58:7E:E8:D6:66:DE:F0:56:8F
Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
Certificate issuer:       /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Certificate serial:       25C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
Manifest number:          259D
Signing time:             Mon 02 Mar 2026 00:03:06 +0000
Manifest this update:     Mon 02 Mar 2026 00:03:05 +0000
Manifest next update:     Mon 09 Mar 2026 00:03:05 +0000
Files and hashes:         1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: sCfQYeQm/qv7x5KnoWiQ9x5MlVFDSlsNMTSE9akB6KM=)
                          2: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: IUfyxffvy3cD3U2/JFftlJFRyd1Vin0nYf/0GsHHPYI=)
                          3: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: ytsKFQ+8cerfl+7UcTFTYgkMi9hqaM6qtX9IyVTa6Lc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
                          rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9665 (0x25c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
        Validity
            Not Before: Mar  2 00:03:05 2026 GMT
            Not After : Mar  9 00:03:05 2026 GMT
        Subject: CN=69a4d3ba-9019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:8d:fa:75:fd:26:d5:f0:bf:65:a6:e4:51:
                    a2:71:7a:be:5d:a0:de:8f:03:f5:14:d6:3e:9c:63:
                    83:0c:8e:ba:1f:e0:35:19:6e:91:3f:5a:eb:2a:bc:
                    e5:f1:a5:3c:a7:49:4f:22:ab:c1:23:26:42:49:eb:
                    44:ae:b5:e2:ff:84:b0:c6:dd:28:7f:f8:4d:6c:6d:
                    ea:91:05:83:85:73:f7:5e:e0:c9:c0:da:ef:13:1f:
                    0e:08:99:c3:20:f7:d6:68:6d:53:03:5e:f5:b2:53:
                    98:36:fa:d7:1a:e5:8c:e6:29:11:33:c8:1b:b9:bc:
                    0e:9c:fe:cb:ea:4a:81:38:a6:b4:12:32:14:02:97:
                    47:02:00:c4:88:6c:ef:de:5b:93:a3:73:e8:c3:03:
                    2b:be:1b:69:db:54:a1:73:b4:b8:cd:1b:d7:a4:6c:
                    1e:75:e4:11:4c:d1:60:24:28:26:78:29:6b:1d:40:
                    1a:78:54:5a:5d:fb:b0:69:87:6f:c2:2d:b6:e7:be:
                    c9:bd:ab:d0:8a:dd:b2:0d:1a:cc:fe:8a:5e:85:fb:
                    e0:b5:38:9f:a8:47:5a:ba:57:0f:36:f3:23:6e:84:
                    8f:c2:93:22:bd:75:af:80:9f:8b:04:13:7d:34:02:
                    3d:fe:8c:73:20:de:d0:4b:fe:cf:0e:df:74:47:da:
                    6a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:86:6C:FB:5E:38:BA:71:98:DA:AA:58:7E:E8:D6:66:DE:F0:56:8F
            X509v3 Authority Key Identifier:
                keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2e:4d:0a:e7:c0:7f:5a:54:4c:34:29:a2:32:b5:4c:4c:e7:
         92:2a:83:62:4b:1c:2b:a8:fb:75:62:22:c0:a6:60:be:ff:4d:
         3e:f6:c6:ee:e8:3c:2c:80:1e:71:09:52:94:8a:5f:db:8b:d9:
         78:e0:19:88:95:bf:17:3b:fa:be:32:2c:60:88:e2:2a:16:60:
         5a:e6:e1:13:98:75:60:ca:0f:00:b0:fe:37:7b:c0:62:95:d3:
         d6:23:27:c4:92:c7:e2:74:35:c4:96:4a:a1:3e:ee:70:66:4f:
         55:58:74:c0:4a:ff:3f:30:f8:c0:78:06:34:77:26:b4:49:e8:
         e7:61:13:f6:8a:69:c5:47:91:0f:b2:b2:91:b3:7c:0d:82:90:
         ca:c9:c6:6a:76:1d:a2:f2:40:b1:26:b2:80:5e:56:19:0d:ce:
         24:7a:ee:ca:f4:9b:15:57:0e:fa:d6:08:1d:38:ac:18:b0:ed:
         85:73:79:ac:58:f0:89:47:4e:5c:2a:55:2a:36:ae:6b:9c:6b:
         5e:b2:c2:a5:f2:62:96:05:cb:e8:b7:08:78:26:55:7e:87:2f:
         2f:a2:e3:a9:a6:5e:72:62:3d:18:27:f0:c7:87:9e:c3:ac:b1:
         ec:90:11:e8:08:9d:84:51:4d:53:1f:17:6e:eb:a7:ac:3d:c6:
         09:52:07:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:10:45 2026 by rpki-client