Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
File:                     024QQmH4GdaND3C7Ka3-jvRjsu0.mft (raw, json)
Hash identifier:          W6vRvGlZCSFl7ybqdAC8MPalk6Fk4aHMmkfWcikIPsw=
Subject key identifier:   53:F3:2D:74:84:EC:7F:D1:D9:1E:17:FD:6B:D8:F5:43:98:4F:52:C3
Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
Certificate issuer:       /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
Manifest number:          D9
Signing time:             Tue 03 Mar 2026 06:12:22 +0000
Manifest this update:     Tue 03 Mar 2026 06:12:21 +0000
Manifest next update:     Tue 10 Mar 2026 06:12:21 +0000
Files and hashes:         1: 024QQmH4GdaND3C7Ka3-jvRjsu0.crl (hash: 9NhjOkaSAoTdfTabje6OnMGM27tpR7jH98kzUeFQOBg=)
                          2: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (hash: dAZeh4PaNuXAEzd+0dD77Ah6jCF4zKP6Ulvpy6g/WpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
                          rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
        Validity
            Not Before: Mar  3 06:12:21 2026 GMT
            Not After : Mar 10 06:12:21 2026 GMT
        Subject: CN=69a67bc6-0837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:57:a3:c8:ff:ac:ad:f9:54:c8:37:3e:5b:
                    6a:38:59:ef:5d:cf:9e:03:ea:92:33:c6:d1:76:9b:
                    8e:55:ad:d9:2d:36:34:98:24:26:53:14:6d:60:47:
                    b1:f9:bc:16:03:20:59:e1:47:e9:01:9d:a5:54:c2:
                    46:0d:6d:c5:58:ca:09:9c:bd:49:04:f6:50:cf:02:
                    2a:80:96:60:00:05:d9:98:1a:79:86:14:32:ce:42:
                    2a:95:0b:8a:1b:96:0c:53:9f:80:14:ef:a0:a8:19:
                    52:24:70:24:87:87:32:21:92:db:99:aa:94:8e:36:
                    a6:91:9b:9a:49:b0:c5:e5:f9:71:13:6c:7b:a3:57:
                    4e:6d:09:e6:ef:bb:a2:a6:7f:1c:40:d9:48:7a:f8:
                    1e:21:6a:40:11:eb:d4:69:ad:f8:c4:ed:28:e0:e1:
                    1d:29:86:50:95:aa:ec:cd:83:75:c0:af:f6:38:19:
                    31:e2:0c:56:a2:db:74:c7:6b:91:60:f6:35:48:72:
                    87:f4:5e:38:e4:1e:e6:f6:32:18:00:1c:04:a6:84:
                    ea:f2:f1:d6:6e:8e:f9:5f:ab:eb:05:b2:d1:86:ff:
                    e2:51:38:b9:d7:e8:da:98:9e:0b:22:f6:c3:44:25:
                    e3:c0:f5:b2:51:dd:3d:ff:5d:e4:98:34:7c:b1:8e:
                    ca:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F3:2D:74:84:EC:7F:D1:D9:1E:17:FD:6B:D8:F5:43:98:4F:52:C3
            X509v3 Authority Key Identifier:
                keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5c:c6:0f:ec:2c:8c:2e:40:bd:5a:7e:6b:e2:11:db:8d:7a:
         56:26:d6:3d:71:8f:19:41:3d:7f:dc:87:6e:eb:19:cc:a3:6a:
         28:a7:12:98:6b:0b:6b:15:f4:78:75:c4:57:6c:40:ca:19:bc:
         a5:ec:b8:cb:80:a1:95:9f:36:fd:1a:81:7f:12:ab:3d:5c:7e:
         15:d1:b6:de:b0:c2:b2:cf:4c:78:76:6d:b3:21:79:aa:b5:30:
         61:eb:ee:0a:c9:ef:f1:3d:9c:3e:94:c6:84:2e:48:47:74:a5:
         20:1c:1d:81:d4:1e:a2:7b:6a:9c:16:1e:a5:58:e4:67:04:f0:
         12:7a:31:ef:0c:c7:2b:3f:0b:a7:37:e2:6e:f4:d2:ad:10:ce:
         d2:1d:13:b1:1c:55:8d:a5:5d:54:12:50:db:56:a5:a6:9b:fc:
         1b:39:c8:bb:10:df:0f:9a:00:45:15:86:0a:24:96:64:c4:37:
         c0:72:8c:6d:28:0b:d4:ba:93:8e:6a:53:b4:cc:94:98:e8:02:
         22:c9:c9:a3:84:7a:47:c9:30:17:ce:b3:21:ce:e3:58:a0:21:
         80:39:a2:0e:a3:d4:8e:cc:bd:ac:45:09:f2:a5:e2:49:97:2d:
         48:f0:78:70:8a:6d:05:ac:bc:7e:1c:28:77:68:0b:e4:10:c9:
         90:35:47:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:37:21 2026 by rpki-client