Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.mft
File:                     boeJT2AXn8vHknMo9a7V591-s_A.mft (raw, json)
Hash identifier:          zeQMDzoRQ1eogz829ht5fCzrKJtYyM9Adc+XL4aGocU=
Subject key identifier:   2B:4C:DA:E9:6E:AA:A8:D7:9D:76:1E:C7:74:45:48:70:3B:2C:76:64
Authority key identifier: 6E:87:89:4F:60:17:9F:CB:C7:92:73:28:F5:AE:D5:E7:DD:7E:B3:F0
Certificate issuer:       /CN=A91806BA/serialNumber=6E87894F60179FCBC7927328F5AED5E7DD7EB3F0
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/boeJT2AXn8vHknMo9a7V591-s_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.mft
Manifest number:          25
Signing time:             Mon 27 Apr 2026 08:44:40 +0000
Manifest this update:     Mon 27 Apr 2026 08:44:39 +0000
Manifest next update:     Mon 04 May 2026 08:44:39 +0000
Files and hashes:         1: boeJT2AXn8vHknMo9a7V591-s_A.crl (hash: M8pS+l90FUHRduIQwzWRngKpOJo2uY1g+i/LTCtpUwo=)
                          2: B44E8878129C11F1B0F372353D3D8C67.roa (hash: nVuAqCAmrtCFyjzAaGnxdvmFqZJr1Uq5L661kFJXcwA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.crl
                          rsync://rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/boeJT2AXn8vHknMo9a7V591-s_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 08:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91806BA, serialNumber=6E87894F60179FCBC7927328F5AED5E7DD7EB3F0
        Validity
            Not Before: Apr 27 08:44:39 2026 GMT
            Not After : May  4 08:44:39 2026 GMT
        Subject: CN=69ef21f8-632b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:80:9e:f1:5f:6f:8e:5a:05:ec:36:a0:21:2b:
                    93:e4:90:68:d5:b7:3f:3f:06:fc:22:3a:8a:38:c5:
                    2a:ab:80:81:7f:a3:e7:5b:a2:c4:65:8d:93:32:1a:
                    7f:ad:97:e7:d4:6e:7b:86:56:34:14:4e:2b:fc:26:
                    9b:f0:1d:95:71:a0:93:e7:d7:75:77:20:9a:d8:13:
                    34:ad:3c:27:de:a6:83:c0:e7:82:78:c1:7e:29:ff:
                    07:eb:cc:bc:f6:86:3d:f5:7e:3e:0b:20:e7:06:54:
                    e3:81:15:59:da:3c:86:dc:6a:1b:4d:32:35:88:28:
                    42:1c:b1:b9:e0:f8:92:8d:50:1d:cc:c0:e6:d6:b8:
                    0a:a5:04:b9:a9:29:a3:9e:0e:d1:f9:af:d9:e0:65:
                    d5:54:3d:87:0c:99:56:92:44:8a:ba:cf:3a:64:99:
                    c5:88:1d:0a:0b:75:50:b1:9d:92:6d:77:0c:a1:e2:
                    02:b7:24:39:81:3a:d8:22:40:b3:08:d2:56:42:91:
                    3a:77:64:07:93:4d:16:e8:c0:c7:dc:15:e2:a5:f7:
                    63:c1:9d:ab:a8:fd:b3:f4:5d:aa:a2:b3:06:d3:c9:
                    34:26:30:68:d5:ab:5f:ed:2c:44:f3:30:52:d9:75:
                    04:61:1a:ad:5b:d3:0b:6b:1d:5b:b2:0b:f6:f8:69:
                    15:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4C:DA:E9:6E:AA:A8:D7:9D:76:1E:C7:74:45:48:70:3B:2C:76:64
            X509v3 Authority Key Identifier:
                keyid:6E:87:89:4F:60:17:9F:CB:C7:92:73:28:F5:AE:D5:E7:DD:7E:B3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/boeJT2AXn8vHknMo9a7V591-s_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91806BA/6F75CE3C129C11F185AAFA333D3D8C67/boeJT2AXn8vHknMo9a7V591-s_A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:64:1e:f6:5f:a1:a4:97:e6:ad:48:db:42:76:a3:f2:a2:d6:
         86:1a:38:43:95:7e:7c:b7:35:d0:86:15:f4:59:73:5e:3b:a3:
         8f:4d:26:7b:15:3a:56:32:b9:3b:b7:d7:70:08:a1:5c:9c:e4:
         77:a8:63:d7:8d:37:10:5c:ad:66:5e:a7:dd:f3:2c:53:8b:77:
         c7:c9:ce:49:dd:18:52:f2:cd:a9:43:1e:78:26:13:c3:37:2f:
         b8:12:4d:37:37:2c:eb:03:8f:af:a2:fc:68:f8:55:5c:dc:13:
         f2:3a:fb:4d:8d:8a:9a:58:46:36:3e:0f:ac:e7:7a:00:dd:3e:
         b7:b6:41:2d:78:1e:be:57:d3:a7:fb:39:94:7b:3b:33:0e:ae:
         4d:f6:92:4e:07:1f:58:ab:54:94:52:49:b4:be:26:56:cb:53:
         25:62:4a:e7:8e:1a:96:a7:07:c9:96:39:54:da:c8:98:7d:00:
         b1:2f:79:a5:5f:c1:c1:33:4d:9e:fe:40:f9:eb:74:8d:83:95:
         47:ba:b8:8c:9c:fa:41:01:64:ea:e3:4f:71:b7:1a:2a:70:e9:
         39:e8:c6:22:63:1f:38:f4:bd:5e:04:9b:52:bd:8b:10:07:f2:
         4d:56:3f:4f:d5:a6:10:3d:6c:a2:fa:77:42:89:e6:58:22:85:
         52:57:ca:d7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MDZCQTExMC8GA1UEBRMoNkU4Nzg5NEY2MDE3OUZDQkM3OTI3MzI4RjVBRUQ1RTdE
RDdFQjNGMDAeFw0yNjA0MjcwODQ0MzlaFw0yNjA1MDQwODQ0MzlaMBgxFjAUBgNV
BAMTDTY5ZWYyMWY4LTYzMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYgJ7xX2+OWgXsNqAhK5PkkGjVtz8/BvwiOoo4xSqrgIF/o+dbosRljZMyGn+t
l+fUbnuGVjQUTiv8JpvwHZVxoJPn13V3IJrYEzStPCfepoPA54J4wX4p/wfrzLz2
hj31fj4LIOcGVOOBFVnaPIbcahtNMjWIKEIcsbng+JKNUB3MwObWuAqlBLmpKaOe
DtH5r9ngZdVUPYcMmVaSRIq6zzpkmcWIHQoLdVCxnZJtdwyh4gK3JDmBOtgiQLMI
0lZCkTp3ZAeTTRbowMfcFeKl92PBnauo/bP0XaqiswbTyTQmMGjVq1/tLETzMFLZ
dQRhGq1b0wtrHVuyC/b4aRU7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUK0za6W6q
qNeddh7HdEVIcDssdmQwHwYDVR0jBBgwFoAUboeJT2AXn8vHknMo9a7V591+s/Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwNkJBLzZGNzVDRTNDMTI5
QzExRjE4NUFBRkEzMzNEM0Q4QzY3L2JvZUpUMkFYbjh2SGtuTW85YTdWNTkxLXNf
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYm9lSlQyQVhuOHZIa25NbzlhN1Y1OTEtc19BLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw
NkJBLzZGNzVDRTNDMTI5QzExRjE4NUFBRkEzMzNEM0Q4QzY3L2JvZUpUMkFYbjh2
SGtuTW85YTdWNTkxLXNfQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC5ZB72X6Gkl+atSNtCdqPyotaGGjhDlX58tzXQhhX0WXNeO6OPTSZ7FTpWMrk7
t9dwCKFcnOR3qGPXjTcQXK1mXqfd8yxTi3fHyc5J3RhS8s2pQx54JhPDNy+4Ek03
NyzrA4+vovxo+FVc3BPyOvtNjYqaWEY2Pg+s53oA3T63tkEteB6+V9On+zmUezsz
Dq5N9pJOBx9Yq1SUUkm0viZWy1MlYkrnjhqWpwfJljlU2siYfQCxL3mlX8HBM02e
/kD563SNg5VHuriMnPpBAWTq409xtxoqcOk56MYiYx849L1eBJtSvYsQB/JNVj9P
1aYQPWyi+ndCieZYIoVSV8rX
-----END CERTIFICATE-----
Generated at Wed Apr 29 10:22:02 2026 by rpki-client