Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
File:                     bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json)
Hash identifier:          r4d5t1yE+s5toGhR1H629aBLARXI9+fP+s3/5xzHDzY=
Subject key identifier:   99:F2:8C:FC:13:C8:FB:94:BC:4E:1A:96:62:3C:08:BA:9D:60:95:07
Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
Certificate issuer:       /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Certificate serial:       260A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
Manifest number:          25E6
Signing time:             Wed 22 Jul 2026 15:48:11 +0000
Manifest this update:     Wed 22 Jul 2026 15:48:11 +0000
Manifest next update:     Wed 29 Jul 2026 15:48:11 +0000
Files and hashes:         1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: 0u+M2ya2bICbySrvvZCVfhMT8r7/Fnh/o7Mn36CtlL8=)
                          2: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: IUfyxffvy3cD3U2/JFftlJFRyd1Vin0nYf/0GsHHPYI=)
                          3: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: ytsKFQ+8cerfl+7UcTFTYgkMi9hqaM6qtX9IyVTa6Lc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
                          rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9738 (0x260a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
        Validity
            Not Before: Jul 22 15:48:11 2026 GMT
            Not After : Jul 29 15:48:11 2026 GMT
        Subject: CN=6a60e63b-4f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:e9:f3:c4:67:be:e5:24:1b:e9:3e:29:b5:
                    27:d7:61:11:1d:7a:7f:14:46:67:52:b8:ef:b0:98:
                    e8:b2:ea:5f:11:8b:68:b5:c8:14:b3:5a:31:ad:69:
                    a7:36:0a:3e:58:03:26:bc:39:99:19:8d:10:79:0f:
                    48:05:c8:1f:21:a7:85:bf:97:86:ea:c8:98:7b:f6:
                    9f:3d:c6:03:14:36:f1:60:d1:25:f6:ff:91:7f:3e:
                    9f:7c:f1:81:87:08:14:e2:a4:a7:bb:c2:83:77:a4:
                    5a:1c:9f:97:2e:a9:da:d5:cb:b6:e0:95:ca:da:ab:
                    9a:79:97:d4:c9:ca:1e:21:cb:b2:2a:64:67:57:a6:
                    a5:7a:bd:b4:b9:a5:6f:50:85:1c:0b:dc:66:e1:73:
                    b7:58:d7:25:84:3a:4c:15:d6:80:0a:38:72:a3:6b:
                    bc:f8:6f:e9:d3:44:48:e7:2d:b1:c4:f9:b3:e5:44:
                    31:ac:3a:a1:6e:86:65:f2:2e:0f:de:35:b9:f5:56:
                    36:7d:f7:6d:a9:a1:25:ee:86:c3:de:f1:2d:22:c3:
                    2c:d4:51:fb:7f:25:a0:55:46:1b:1a:6b:28:e9:6b:
                    3e:92:19:bf:f2:1b:5e:ae:00:37:14:91:bd:47:84:
                    5d:18:46:06:bf:d8:2c:66:ec:87:bf:0a:0a:cd:4d:
                    ba:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F2:8C:FC:13:C8:FB:94:BC:4E:1A:96:62:3C:08:BA:9D:60:95:07
            X509v3 Authority Key Identifier:
                keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:9f:42:a0:3c:89:db:f6:e1:ac:0a:3a:0c:1a:75:d1:23:52:
         be:e1:eb:59:eb:8c:76:1a:66:d5:3f:6f:c4:af:ce:c5:ad:ad:
         43:09:b0:98:97:6e:04:b4:3b:8d:97:11:19:c2:a6:6d:4a:33:
         52:b3:4f:18:11:a4:8c:a2:3a:08:cc:bf:a6:90:84:a0:bd:f9:
         aa:3a:97:82:20:c7:d6:2b:71:94:f4:ce:d7:d8:79:bf:ca:83:
         88:3c:31:02:c6:1e:20:4b:8e:8b:d6:73:c2:15:a0:00:fd:62:
         1d:27:24:f7:7c:d1:cc:b8:c7:3b:88:3b:a1:55:da:89:f5:87:
         15:63:a4:e5:71:a0:f6:2d:92:6e:42:43:c5:30:d6:0a:1e:c4:
         cd:fc:a7:8d:0a:0c:7e:eb:0c:8f:39:a1:09:e0:f9:3c:0f:93:
         a7:24:3a:d7:b0:1e:5a:ee:f6:ed:d7:ec:1a:f8:2b:50:64:f9:
         32:05:6e:7a:dc:22:50:60:3c:3f:cf:65:fe:3f:03:e1:8c:eb:
         61:00:dd:dd:cd:8a:79:79:8d:ea:66:35:d7:2b:00:fe:de:f1:
         0b:5d:21:94:bd:27:c6:61:f3:9a:48:41:98:54:56:c8:3f:24:
         ba:23:50:40:09:1b:3a:20:6c:9f:ac:64:8c:ab:f7:c0:34:d7:
         ca:53:3d:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjkzM0ExMTAvBgNVBAUTKDZFOEVBMUUzMjQwQzBCQjNEMTNCNEQyNzVDNkMwMzI2
QTU2OEVDODcwHhcNMjYwNzIyMTU0ODExWhcNMjYwNzI5MTU0ODExWjAYMRYwFAYD
VQQDEw02YTYwZTYzYi00ZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvQjp88RnvuUkG+k+KbUn12ERHXp/FEZnUrjvsJjosupfEYtotcgUs1oxrWmn
Ngo+WAMmvDmZGY0QeQ9IBcgfIaeFv5eG6siYe/afPcYDFDbxYNEl9v+Rfz6ffPGB
hwgU4qSnu8KDd6RaHJ+XLqna1cu24JXK2quaeZfUycoeIcuyKmRnV6aler20uaVv
UIUcC9xm4XO3WNclhDpMFdaACjhyo2u8+G/p00RI5y2xxPmz5UQxrDqhboZl8i4P
3jW59VY2ffdtqaEl7obD3vEtIsMs1FH7fyWgVUYbGmso6Ws+khm/8htergA3FJG9
R4RdGEYGv9gsZuyHvwoKzU26AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnyjPwT
yPuUvE4almI8CLqdYJUHMB8GA1UdIwQYMBaAFG6OoeMkDAuz0TtNJ1xsAyalaOyH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTMzQS81M0ZFMUVGQTJC
NjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3UFJPMDBuWEd3REpxVm83
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JvNmg0eVFNQzdQUk8wMG5YR3dESnFWbzdJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTMzQS81M0ZFMUVGQTJCNjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3
UFJPMDBuWEd3REpxVm83SWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtp9CoDyJ2/bhrAo6DBp10SNSvuHrWeuMdhpm1T9vxK/Oxa2tQwmwmJduBLQ7
jZcRGcKmbUozUrNPGBGkjKI6CMy/ppCEoL35qjqXgiDH1itxlPTO19h5v8qDiDwx
AsYeIEuOi9ZzwhWgAP1iHSck93zRzLjHO4g7oVXaifWHFWOk5XGg9i2SbkJDxTDW
Ch7EzfynjQoMfusMjzmhCeD5PA+TpyQ617AeWu727dfsGvgrUGT5MgVuetwiUGA8
P89l/j8D4YzrYQDd3c2KeXmN6mY11ysA/t7xC10hlL0nxmHzmkhBmFRWyD8kuiNQ
QAkbOiBsn6xkjKv3wDTXylM9HQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:49:56 2026 by rpki-client