Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
File:                     bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json)
Hash identifier:          5cW5swmWcS36JmgpEhrfsDROlOyd3hShA6K0J5wAfSw=
Subject key identifier:   C5:98:BD:51:5A:11:BA:F5:14:0D:C5:23:1D:E3:57:61:F6:1F:99:10
Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
Certificate issuer:       /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Certificate serial:       25D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
Manifest number:          25AF
Signing time:             Sat 04 Apr 2026 15:40:46 +0000
Manifest this update:     Sat 04 Apr 2026 15:40:46 +0000
Manifest next update:     Sat 11 Apr 2026 15:40:46 +0000
Files and hashes:         1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: uSaP0BnzFoD88kSvGxb0Bjz2EPPRveJaB8bR47el/kk=)
                          2: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: ytsKFQ+8cerfl+7UcTFTYgkMi9hqaM6qtX9IyVTa6Lc=)
                          3: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: IUfyxffvy3cD3U2/JFftlJFRyd1Vin0nYf/0GsHHPYI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
                          rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9683 (0x25d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
        Validity
            Not Before: Apr  4 15:40:46 2026 GMT
            Not After : Apr 11 15:40:46 2026 GMT
        Subject: CN=69d130fe-4617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c3:c9:8d:32:be:c4:18:88:92:15:4e:f6:6f:
                    1c:84:85:78:41:a6:c7:66:22:4b:d7:86:d7:09:bb:
                    ca:83:58:40:4c:5f:eb:95:e1:b6:1a:e4:ad:46:c0:
                    dd:87:6d:a6:45:03:04:b2:af:6f:8a:34:f4:93:7f:
                    07:c8:f7:9c:fb:12:a4:81:8f:03:0e:11:96:5d:b5:
                    80:d4:67:20:df:48:ad:17:8e:29:f4:d4:80:24:52:
                    b3:b3:b9:c5:42:22:a4:b4:12:c3:f8:57:b4:7f:0b:
                    31:45:a0:f7:15:bc:24:2b:ce:da:8a:36:a6:62:a1:
                    93:da:70:f3:db:18:8b:be:22:14:30:79:86:43:5f:
                    2a:e1:6d:d5:f5:9e:95:3d:2d:34:08:0f:ef:85:b1:
                    a7:e2:c7:98:a5:d9:8e:10:ae:5b:55:63:9a:fe:30:
                    37:5a:ab:94:1c:e0:c7:66:6c:6f:3e:c8:f2:4f:91:
                    b2:07:9b:29:b5:f0:3c:43:c2:9c:aa:85:cb:c6:11:
                    7d:9b:83:a8:1e:d5:ed:94:48:45:07:32:6b:cd:da:
                    95:69:4a:3f:87:60:99:af:b3:bf:51:df:45:05:71:
                    77:a7:49:e3:13:66:30:7c:51:b0:6e:7b:63:99:d9:
                    be:26:82:d3:79:a5:d6:af:87:55:1b:7c:95:73:80:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:98:BD:51:5A:11:BA:F5:14:0D:C5:23:1D:E3:57:61:F6:1F:99:10
            X509v3 Authority Key Identifier:
                keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e9:53:4d:00:65:76:c3:4a:ef:b4:72:f2:d5:eb:ff:a8:bd:
         ce:9e:c1:0b:71:fc:c2:b5:0e:1e:2c:36:9b:fc:b9:32:9d:b3:
         3a:6f:f4:96:d2:9d:97:8a:a8:ad:fe:16:18:c1:d3:67:b6:eb:
         b8:6c:67:8a:cb:43:6b:0f:bd:7c:e7:99:23:2e:0a:d3:ce:03:
         8c:3e:28:b1:14:3b:2c:3d:d9:27:df:c0:68:28:86:dd:c5:66:
         56:ab:c0:fe:59:cb:a5:a8:3a:ee:53:56:17:4d:11:9f:f6:9e:
         f8:ed:76:78:58:d5:01:9b:d9:f5:6a:25:a3:7e:36:6d:f7:72:
         7f:d4:68:bd:1b:1e:32:5c:19:92:32:f5:6e:ae:d8:a5:e8:85:
         46:aa:31:a8:d9:f4:88:1f:9d:45:b1:17:6a:ab:d7:a2:11:cc:
         01:4b:ff:c5:d7:61:f4:82:27:64:60:40:7b:54:e4:ee:c0:02:
         a3:6f:ea:0a:de:b8:47:60:08:0a:d6:07:22:64:42:b3:07:4b:
         0e:05:c2:49:fe:ae:ff:9f:32:a3:1f:0c:31:55:bf:db:eb:d3:
         bf:3c:c3:09:26:14:c1:d3:df:b4:a5:b0:0a:35:27:1c:b7:8a:
         80:a6:03:84:47:95:2a:fd:00:ff:44:01:f2:12:04:8e:d1:3b:
         fc:14:4f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:58:46 2026 by rpki-client