Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
File:                     bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json)
Hash identifier:          36bR6w64A7I7g7oGon3HIy8qF+O9bsSOoR9+JBOm6sc=
Subject key identifier:   11:87:47:CD:02:B3:57:61:24:51:90:AE:70:9E:37:38:BA:DA:97:17
Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
Certificate issuer:       /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Certificate serial:       25EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
Manifest number:          25CA
Signing time:             Thu 28 May 2026 15:40:14 +0000
Manifest this update:     Thu 28 May 2026 15:40:13 +0000
Manifest next update:     Thu 04 Jun 2026 15:40:13 +0000
Files and hashes:         1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: 4FvwGqGQaLPGCfiPPRox3b/abUYVr9SxhGTEpW/OXdY=)
                          2: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: ytsKFQ+8cerfl+7UcTFTYgkMi9hqaM6qtX9IyVTa6Lc=)
                          3: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: IUfyxffvy3cD3U2/JFftlJFRyd1Vin0nYf/0GsHHPYI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
                          rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 15:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9710 (0x25ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
        Validity
            Not Before: May 28 15:40:13 2026 GMT
            Not After : Jun  4 15:40:13 2026 GMT
        Subject: CN=6a1861de-7439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fb:ee:cf:e0:41:85:29:40:68:f0:31:e0:9a:
                    65:7e:61:1e:9b:82:2d:3d:aa:f8:51:50:1c:7b:ff:
                    de:4c:ae:b3:ee:cd:70:d5:3e:3f:c9:85:47:83:17:
                    d7:d2:ff:97:25:3d:45:ba:7a:f2:83:8f:d1:e5:77:
                    df:e1:66:e8:60:8e:e2:28:c4:d5:2b:81:f2:4a:c9:
                    d0:3d:81:8a:76:4c:f1:79:05:fe:6a:1f:af:54:9d:
                    5b:aa:d9:81:91:5c:49:49:eb:d1:a4:e4:8a:d4:21:
                    ef:c0:cc:f4:2c:87:6e:f9:32:7f:92:59:69:41:ad:
                    d4:d5:9a:58:f1:1f:2e:c0:9b:12:a4:1f:6a:1c:01:
                    35:10:f8:ad:57:38:73:83:4a:dd:ca:d3:06:ae:6a:
                    f6:48:c2:b6:38:71:3b:e0:5a:8a:05:53:9a:bc:a2:
                    f1:34:15:88:ad:f8:5a:c7:04:f5:d0:ae:ea:b6:2e:
                    bc:b1:dd:0a:65:7b:8c:d5:b7:65:80:49:71:4b:93:
                    9b:14:13:35:cb:cb:3c:8c:91:18:17:41:f7:0f:6c:
                    35:7e:3e:d2:9f:b4:e6:69:01:f5:12:95:3d:68:6c:
                    37:5c:8c:03:86:41:42:23:f0:8f:3b:44:67:69:d6:
                    30:05:29:12:e9:99:a4:34:80:d2:1f:d8:31:39:66:
                    45:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:87:47:CD:02:B3:57:61:24:51:90:AE:70:9E:37:38:BA:DA:97:17
            X509v3 Authority Key Identifier:
                keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:15:dc:7b:ac:84:d7:20:4b:9d:1b:2e:86:81:dd:ff:6b:c7:
         7b:e8:c9:29:f5:4e:41:5d:57:aa:08:75:bd:20:14:4b:1b:04:
         c0:ee:fe:c5:77:b8:83:c2:c8:d8:1d:e9:b4:86:e1:a7:da:b2:
         94:db:d4:3c:21:e7:df:0b:81:39:69:41:08:2a:e3:a1:ae:cd:
         c2:5b:68:80:1e:47:52:b7:37:3f:d3:ba:ec:86:bc:50:d8:ca:
         da:b9:d2:0d:09:4b:81:50:e8:e5:89:da:b2:67:69:ec:01:d1:
         8c:00:06:f6:d4:a7:6d:42:b9:5f:bf:a0:98:e0:e9:cc:ff:10:
         a5:88:1e:e1:44:8e:e9:2f:51:62:20:df:aa:93:26:81:fc:36:
         84:65:ef:56:67:60:76:d5:97:cc:f8:8f:9c:1b:c3:c0:5d:8b:
         80:86:2e:2f:7e:04:2c:4e:8f:d7:e6:c4:81:66:e0:95:2c:c5:
         9d:83:9e:83:2c:cc:f0:37:1c:a2:1e:f4:ca:89:7e:ba:ab:6c:
         1e:e7:3a:76:1d:be:4f:6c:52:3c:47:68:12:b6:2a:5d:e0:f1:
         5e:18:fd:fb:0e:9e:22:46:73:92:a9:be:c4:cf:2c:0d:fd:42:
         5a:79:c7:cd:af:72:55:c9:6a:5a:ec:d6:cc:88:d3:b4:bb:6d:
         dc:be:f7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 17:06:10 2026 by rpki-client