Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
File:                     BoQptByg8Segp10v_LJsA6lfYHE.mft (raw, json)
Hash identifier:          odZc9PV6gJr53mVzQ2qReWRXXgG8UKGzwi4Cr69MoQA=
Subject key identifier:   72:50:88:96:35:3E:DD:1A:BE:4D:CC:8F:71:F0:93:9D:CD:93:47:69
Authority key identifier: 06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71
Certificate issuer:       /CN=A91CCABB/serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
Manifest number:          4D
Signing time:             Mon 11 May 2026 08:29:38 +0000
Manifest this update:     Mon 11 May 2026 08:29:37 +0000
Manifest next update:     Mon 18 May 2026 08:29:37 +0000
Files and hashes:         1: BoQptByg8Segp10v_LJsA6lfYHE.crl (hash: K3Xbyyv238Ez/dGSWnPpUt93FyM0Q/G5Y/SLh0CWtas=)
                          2: BE1ACA36DD7911F088A95D31386F56BC.roa (hash: wFVA3jy/rKVpvXwLeuTYWtSknure16Z8S/vPIwlvU8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl
                          rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCABB, serialNumber=068429B41CA0F127A0A75D2FFCB26C03A95F6071
        Validity
            Not Before: May 11 08:29:37 2026 GMT
            Not After : May 18 08:29:37 2026 GMT
        Subject: CN=6a019372-6298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:26:bb:3b:40:68:88:38:a7:1e:63:89:1a:88:
                    3e:f0:e9:5c:fc:2b:34:2b:c0:8f:d9:40:d8:03:41:
                    4f:54:8e:ce:9f:1c:7a:d7:b2:5e:c9:8e:39:ba:39:
                    51:73:62:7c:55:48:ae:34:9a:b7:0f:e5:fa:d2:35:
                    12:48:6d:52:8e:ca:16:a0:25:64:44:4d:5f:ce:7b:
                    08:bc:42:f6:4b:df:30:8f:a0:be:38:63:fc:b5:87:
                    9b:e8:03:a7:9e:d5:40:45:00:09:19:ad:0b:61:ed:
                    66:64:c2:a0:83:6f:56:6f:df:c2:73:77:5e:92:95:
                    9e:da:25:0e:b8:9f:d7:b4:44:56:a8:8e:23:5f:4e:
                    20:63:46:30:9f:ca:02:55:88:5d:93:d3:ad:fb:58:
                    92:23:f6:df:e9:30:6b:cd:aa:46:76:ce:1e:d6:65:
                    1b:12:94:71:b2:ec:8a:6c:49:d5:78:fa:8e:60:da:
                    70:35:89:92:a2:8c:90:34:f0:81:ff:ff:4e:b2:8b:
                    0d:c1:c9:93:02:bc:04:87:a6:2c:3c:af:13:d0:cc:
                    93:dc:75:8a:e7:a7:ee:40:9b:cf:fa:dd:60:90:16:
                    61:bd:ff:67:41:e1:46:96:a6:42:54:e1:6d:96:71:
                    99:76:54:50:28:46:f8:65:6b:33:74:15:71:44:73:
                    cf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:50:88:96:35:3E:DD:1A:BE:4D:CC:8F:71:F0:93:9D:CD:93:47:69
            X509v3 Authority Key Identifier:
                keyid:06:84:29:B4:1C:A0:F1:27:A0:A7:5D:2F:FC:B2:6C:03:A9:5F:60:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BoQptByg8Segp10v_LJsA6lfYHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCABB/403B0D8EDD7811F0A586B128386F56BC/BoQptByg8Segp10v_LJsA6lfYHE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:71:13:fb:b9:94:84:9e:ad:65:63:ef:1b:52:81:16:48:c5:
         0e:ad:2f:82:ad:a8:dc:57:f8:17:b8:49:ae:07:eb:b4:9e:b6:
         4c:7b:7d:1d:27:d9:63:e6:e5:30:2a:f5:ec:b0:63:23:e2:ce:
         24:5e:fc:69:3a:18:9d:7f:e9:da:27:a0:ec:89:38:80:4f:a4:
         9d:37:58:f8:6a:4f:b9:e5:c8:ec:51:13:ce:e4:e2:1a:41:90:
         6e:97:8d:98:07:ce:08:b7:98:e1:61:62:d0:df:15:1b:9b:01:
         ed:f7:9f:07:c5:78:a8:e9:3a:f4:ef:24:fd:b5:65:24:16:34:
         b6:aa:4a:e8:81:8d:a7:cf:23:f1:02:74:f0:74:33:c5:80:fd:
         cf:a0:5c:ce:b6:0e:a4:c8:17:33:61:c1:b2:9d:04:6a:5b:6c:
         c5:13:8c:a7:17:bc:d1:52:17:49:cf:e7:5f:01:f4:b7:4d:b2:
         e3:15:9b:b2:da:e8:89:47:7d:2e:1e:23:5e:6a:90:88:34:ae:
         a5:ea:57:ed:54:48:f4:6c:27:2c:2c:60:0b:09:9d:9c:d5:78:
         b2:b8:21:f2:d1:2d:b2:83:b5:6e:9f:a3:24:29:e9:02:b0:77:
         35:ea:62:f9:a3:37:b6:53:81:fc:f1:3c:07:85:a8:87:1b:f3:
         e5:3e:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:26:27 2026 by rpki-client