Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
File:                     024QQmH4GdaND3C7Ka3-jvRjsu0.mft (raw, json)
Hash identifier:          IOpGZ6m6v+q8zNhiIUd8AgiflBHGjT4gKyyfaRPuF7Q=
Subject key identifier:   DB:37:27:99:06:EE:19:59:26:54:C8:BF:46:E1:24:B9:88:3E:66:A4
Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
Certificate issuer:       /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
Manifest number:          0146
Signing time:             Mon 05 Oct 2026 05:44:38 +0000
Manifest this update:     Mon 05 Oct 2026 05:44:37 +0000
Manifest next update:     Mon 12 Oct 2026 05:44:37 +0000
Files and hashes:         1: 024QQmH4GdaND3C7Ka3-jvRjsu0.crl (hash: 4J4d2tedUQEb9iCgm/GyiOO6b5VevP4QBeqOQntswmg=)
                          2: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (hash: dAZeh4PaNuXAEzd+0dD77Ah6jCF4zKP6Ulvpy6g/WpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
                          rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 05:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
        Validity
            Not Before: Oct  5 05:44:37 2026 GMT
            Not After : Oct 12 05:44:37 2026 GMT
        Subject: CN=6ac33945-d7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:aa:52:c3:37:9b:2d:f3:8e:da:b9:1a:b0:
                    ec:f5:71:bc:a9:eb:01:a5:fa:95:a9:8e:3e:69:d0:
                    e2:b3:01:c8:3c:04:6d:3c:8c:d7:e8:41:f1:11:38:
                    92:91:59:1c:61:f5:78:cb:c4:c2:d0:8f:26:d0:56:
                    e7:71:05:f4:72:2c:4b:87:50:4f:a3:27:b9:0c:dd:
                    04:06:75:67:96:01:52:25:52:46:76:1b:00:77:a5:
                    57:9e:ee:e2:95:e9:ba:0e:7e:b0:6e:72:f8:47:f3:
                    c8:80:25:29:19:b7:82:bf:96:50:49:1e:e5:92:ea:
                    23:9c:27:ac:c3:50:40:5a:40:97:f0:8a:a7:2c:b0:
                    a2:14:56:20:ff:6b:06:7d:31:f4:65:22:24:9d:54:
                    51:dd:1e:0d:2d:65:32:ed:aa:f6:f7:39:cf:aa:6b:
                    12:62:33:81:7a:ad:a1:00:a7:5d:25:a7:fb:16:de:
                    5e:47:95:81:76:2c:fe:7c:9a:e4:26:79:18:d2:51:
                    32:51:09:dc:fd:2d:60:2d:db:b6:95:4f:4a:4d:f5:
                    e4:93:af:06:d4:12:c1:50:82:c0:f4:92:a3:86:96:
                    e7:00:59:2a:ac:c6:e2:a3:d4:4d:52:0f:ba:5c:94:
                    3e:69:c2:e0:da:5b:e1:83:1d:8d:57:3f:40:22:e3:
                    d4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:37:27:99:06:EE:19:59:26:54:C8:BF:46:E1:24:B9:88:3E:66:A4
            X509v3 Authority Key Identifier:
                keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:db:fa:72:d9:83:eb:64:61:a8:74:0d:1b:ec:b7:9f:f3:c2:
         8e:30:63:7b:73:06:8d:ec:d3:3c:c8:2d:d4:79:18:79:bf:47:
         b1:ed:65:b8:02:fc:03:db:83:62:a1:24:3e:70:2c:c0:0e:0e:
         7a:19:96:ac:1e:d5:1b:98:d2:ff:00:b0:7d:c3:3b:6b:cf:4c:
         6d:c5:ff:b0:2c:f9:2d:35:b5:d9:e9:1b:ec:dc:81:f3:1f:22:
         f2:21:af:13:71:91:02:1c:64:0a:8b:e5:d1:e5:71:53:c1:c8:
         b4:bd:3b:0f:c2:71:44:be:57:14:4d:dd:8f:cd:3e:ad:ee:0c:
         e8:05:8d:59:a0:2f:22:cd:63:33:d0:8e:71:00:ce:c7:9e:c1:
         37:7a:fe:aa:25:3e:35:7c:7f:90:b0:80:eb:74:1a:d4:72:ec:
         03:e1:71:3b:22:60:aa:34:a9:3e:6d:1d:e5:4e:e2:78:6f:4b:
         2a:bc:28:06:a1:d5:21:e7:14:78:7e:05:bf:71:13:d0:38:f0:
         a2:08:d5:cb:0e:e3:46:12:fa:fc:01:c7:5b:96:df:29:23:89:
         9a:74:ef:fb:37:84:a9:c1:48:f4:39:97:ca:bc:c2:a1:04:ae:
         c4:85:94:70:99:30:f5:e8:f9:e8:1d:79:33:e3:0d:d2:79:a3:
         ac:27:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:50:49 2026 by rpki-client