Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
File:                     BoQptByg8Segp10v_LJsA6lfYHE.mft (raw, json)
Hash identifier:          xCRk3hgJn674Hts2SBfQASbT4OM5pdQkUxNKBuyeXT0=
Subject key identifier:   E8:84:D8:38:C7:D9:67:A8:F6:2F:C5:6A:7D:24:E8:AD:2F:7A:24:CC
Authority key identifier: 06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71
Certificate issuer:       /CN=A91CCABB/serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
Manifest number:          29
Signing time:             Sun 01 Mar 2026 10:15:05 +0000
Manifest this update:     Sun 01 Mar 2026 10:15:04 +0000
Manifest next update:     Sun 08 Mar 2026 10:15:04 +0000
Files and hashes:         1: BoQptByg8Segp10v_LJsA6lfYHE.crl (hash: YLmsEHESpKFeHxjYMwnBMeAx8vr7/TpKGXSbizDJlQY=)
                          2: BE1ACA36DD7911F088A95D31386F56BC.roa (hash: wFVA3jy/rKVpvXwLeuTYWtSknure16Z8S/vPIwlvU8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl
                          rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCABB, serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
        Validity
            Not Before: Mar  1 10:15:04 2026 GMT
            Not After : Mar  8 10:15:04 2026 GMT
        Subject: CN=69a411a9-6071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f6:43:f4:35:05:25:d7:70:07:1e:1c:af:91:
                    02:8d:6d:f1:7b:74:cf:82:7c:8b:fe:e4:f4:15:78:
                    51:b0:27:dc:af:6f:d7:11:47:aa:a5:60:99:9c:14:
                    ef:08:f2:15:34:09:b4:d3:ab:8d:54:06:f8:d3:de:
                    6c:10:61:17:3a:11:01:0b:ab:74:0b:60:48:06:62:
                    25:aa:b5:4d:97:bb:c3:11:24:88:9e:9d:ac:7c:c4:
                    2f:20:1a:39:dd:5f:0c:e8:d4:35:e5:0a:8b:fd:ce:
                    b4:a2:fe:55:8d:3d:7c:b1:3f:b7:56:ce:5c:e3:2f:
                    8e:27:1d:aa:00:19:c9:2a:c6:83:60:93:b9:ad:91:
                    d9:a5:8f:22:60:79:6c:b4:7c:55:23:2f:c3:13:a5:
                    7e:c2:a7:26:bf:e2:60:50:1a:c5:49:07:15:90:69:
                    50:bc:c0:cb:35:3d:f8:4d:5b:fb:23:30:52:6d:13:
                    b3:93:43:04:de:7f:0b:35:bc:9e:1e:10:18:9c:8f:
                    59:83:5f:19:56:b4:3c:6e:4a:92:7a:84:9f:97:20:
                    af:84:f9:84:a8:19:07:36:a3:67:26:bd:32:0b:e2:
                    73:81:43:7a:03:71:8b:b2:3f:e1:3c:a4:bc:6f:e9:
                    b0:6f:cd:90:c6:4d:69:cb:d4:fb:ed:c2:b0:c0:e9:
                    ce:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:84:D8:38:C7:D9:67:A8:F6:2F:C5:6A:7D:24:E8:AD:2F:7A:24:CC
            X509v3 Authority Key Identifier:
                keyid:06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2e:28:5f:e3:19:43:cc:7d:da:a5:87:26:91:39:91:62:b4:
         fa:e3:5d:d8:d9:da:f4:92:2c:10:74:1a:48:21:f8:b6:9e:13:
         d7:7d:6f:01:78:06:5d:e1:3a:56:eb:a7:c9:1f:c1:0c:61:ae:
         94:d0:cc:b6:c7:ff:c6:fa:13:bd:69:45:15:01:ef:e6:4c:ae:
         ea:26:25:c7:91:04:ce:9c:89:0f:29:d6:64:c5:e2:04:b9:fc:
         e7:ef:87:fc:62:8e:ef:6f:eb:f4:ca:85:fd:96:09:f3:30:f8:
         70:5d:e5:63:85:02:fc:bf:35:b0:d3:0b:3c:c5:db:6d:c1:d2:
         b0:ae:e6:9b:d2:71:47:5e:95:56:ee:9e:9a:78:93:c3:ff:b1:
         e1:81:8f:c6:11:89:03:f5:d4:91:b5:fc:bd:44:31:ab:b0:cc:
         78:68:13:54:83:83:ac:a4:76:ba:83:6c:30:02:7b:82:28:ff:
         9a:73:73:2c:bb:29:23:fd:e2:30:2a:5a:85:c6:bf:1b:6a:9c:
         b3:d4:b7:96:37:f5:f9:78:0b:6a:25:c7:54:b7:4a:43:34:2d:
         61:d4:26:bd:4c:a4:4e:36:3d:58:b9:05:4b:95:74:e7:42:6e:
         b7:7d:76:5b:66:20:53:2a:5c:4e:46:73:d8:7d:3f:5b:12:50:
         a9:27:c9:02
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
Q0FCQjExMC8GA1UEBRMoMDY4NDI5QjQxQ0EwRjEyN0EwQTc1RDJGRkNCMjZDMDNB
OTVGNjA3MTAeFw0yNjAzMDExMDE1MDRaFw0yNjAzMDgxMDE1MDRaMBgxFjAUBgNV
BAMTDTY5YTQxMWE5LTYwNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDE9kP0NQUl13AHHhyvkQKNbfF7dM+CfIv+5PQVeFGwJ9yvb9cRR6qlYJmcFO8I
8hU0CbTTq41UBvjT3mwQYRc6EQELq3QLYEgGYiWqtU2Xu8MRJIienax8xC8gGjnd
Xwzo1DXlCov9zrSi/lWNPXyxP7dWzlzjL44nHaoAGckqxoNgk7mtkdmljyJgeWy0
fFUjL8MTpX7Cpya/4mBQGsVJBxWQaVC8wMs1PfhNW/sjMFJtE7OTQwTefws1vJ4e
EBicj1mDXxlWtDxuSpJ6hJ+XIK+E+YSoGQc2o2cmvTIL4nOBQ3oDcYuyP+E8pLxv
6bBvzZDGTWnL1PvtwrDA6c67AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6ITYOMfZ
Z6j2L8VqfSTorS96JMwwHwYDVR0jBBgwFoAUBoQptByg8Segp10v/LJsA6lfYHEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQUJCLzQwM0IwRDhFREQ3
ODExRjBBNTg2QjEyODM4NkY1NkJDL0JvUXB0QnlnOFNlZ3AxMHZfTEpzQTZsZllI
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQm9RcHRCeWc4U2VncDEwdl9MSnNBNmxmWUhFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND
QUJCLzQwM0IwRDhFREQ3ODExRjBBNTg2QjEyODM4NkY1NkJDL0JvUXB0QnlnOFNl
Z3AxMHZfTEpzQTZsZllIRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBgLihf4xlDzH3apYcmkTmRYrT6413Y2dr0kiwQdBpIIfi2nhPXfW8BeAZd4TpW
66fJH8EMYa6U0My2x//G+hO9aUUVAe/mTK7qJiXHkQTOnIkPKdZkxeIEufzn74f8
Yo7vb+v0yoX9lgnzMPhwXeVjhQL8vzWw0ws8xdttwdKwruab0nFHXpVW7p6aeJPD
/7HhgY/GEYkD9dSRtfy9RDGrsMx4aBNUg4OspHa6g2wwAnuCKP+ac3Msuykj/eIw
KlqFxr8bapyz1LeWN/X5eAtqJcdUt0pDNC1h1Ca9TKRONj1YuQVLlXTnQm63fXZb
ZiBTKlxORnPYfT9bElCpJ8kC
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:05:36 2026 by rpki-client