Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
File:                     024QQmH4GdaND3C7Ka3-jvRjsu0.mft (raw, json)
Hash identifier:          0toKqEtELQ7Q2aG6fo0lXWF3J9jBZB20GfrC/ajufRw=
Subject key identifier:   58:EA:8C:AC:1D:C4:0C:CD:9D:77:37:D5:02:62:74:51:13:17:3C:15
Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
Certificate issuer:       /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Certificate serial:       0148
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
Manifest number:          0140
Signing time:             Wed 23 Sep 2026 05:14:20 +0000
Manifest this update:     Wed 23 Sep 2026 05:14:20 +0000
Manifest next update:     Wed 30 Sep 2026 05:14:20 +0000
Files and hashes:         1: 024QQmH4GdaND3C7Ka3-jvRjsu0.crl (hash: 56l+37T9wRrqE06HJMAewEUNuPq9hwUgyzvf0/thIb4=)
                          2: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (hash: dAZeh4PaNuXAEzd+0dD77Ah6jCF4zKP6Ulvpy6g/WpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
                          rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
        Validity
            Not Before: Sep 23 05:14:20 2026 GMT
            Not After : Sep 30 05:14:20 2026 GMT
        Subject: CN=6ab3602c-94e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:44:83:5d:64:26:72:a5:fa:44:e2:5c:2b:d8:
                    06:5f:f0:c0:0a:e3:d1:a8:21:dd:8c:6f:b2:f6:39:
                    4b:c3:53:1d:9a:f1:71:1a:16:99:b3:28:a6:25:a7:
                    ae:14:14:d9:a1:c6:ab:91:38:f1:3b:d8:80:01:ba:
                    cf:87:6c:0d:cc:0b:02:2a:8f:0d:d9:bd:51:01:75:
                    cc:7b:fd:1d:ca:52:07:0f:26:8a:0a:dd:7a:aa:8b:
                    51:c8:a9:97:2f:1a:af:2d:2c:96:4a:cd:e8:15:67:
                    76:6b:67:2d:20:0e:d8:3f:ef:a0:df:09:c7:f9:0c:
                    c5:f2:65:90:7b:50:9d:b3:f5:b9:fe:36:9b:89:d1:
                    db:7e:45:57:5c:e1:14:6d:4c:6b:ce:0d:92:35:f2:
                    f2:29:a2:85:a5:62:14:23:95:f4:65:ef:47:d6:83:
                    38:e0:c4:a3:a6:9c:7c:15:b2:bd:48:51:6b:cc:7d:
                    34:e6:83:40:86:2d:e1:5c:3f:68:80:b4:b6:f0:1e:
                    d8:ac:ed:93:a9:bb:0f:93:1f:ac:f8:7a:31:98:86:
                    76:38:30:bb:9d:3e:da:32:9d:09:1f:c5:29:db:8a:
                    12:d8:d4:03:3f:65:37:8c:f8:7e:62:e6:1e:bb:f0:
                    65:17:28:3e:04:f6:1e:ce:a1:57:a9:df:91:88:f8:
                    05:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EA:8C:AC:1D:C4:0C:CD:9D:77:37:D5:02:62:74:51:13:17:3C:15
            X509v3 Authority Key Identifier:
                keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:18:51:03:47:cd:2e:ff:e6:09:80:56:f2:5f:bd:f6:79:b4:
         96:df:ad:c0:f8:2c:63:95:db:6f:96:7c:2f:0e:47:3b:7a:73:
         ce:1d:69:34:ad:4e:e2:e3:bb:fa:4f:0d:a1:34:38:c3:ad:a8:
         da:4b:59:0c:4d:b3:d4:f7:2d:24:2e:c7:f5:b4:d7:9b:79:b8:
         30:27:61:ba:b6:be:7b:d4:2c:c3:31:6e:5d:b2:50:3a:06:b5:
         e1:e4:83:db:4a:1a:7b:84:4a:11:53:7b:94:96:eb:19:4d:8d:
         e8:e3:7f:8c:6b:a3:3f:c7:2e:1c:64:a5:ef:c2:a5:87:85:0e:
         a8:21:e3:8f:c7:df:52:be:22:87:bc:e9:09:e5:25:6b:3e:a8:
         ad:37:73:73:a4:43:88:dd:37:f4:a0:f0:29:09:e9:ab:d7:d5:
         06:be:18:27:72:0b:c9:45:41:45:15:ee:13:45:f4:25:79:30:
         16:f1:e0:00:bd:5b:37:6f:d3:ad:06:66:4e:40:8c:28:61:0e:
         14:b6:c9:e2:09:5e:be:83:3e:93:21:7c:a5:0e:88:ad:a7:9c:
         30:dd:85:30:12:5d:82:5c:ba:b6:08:1b:d7:a7:82:61:b2:2b:
         ce:ac:9b:5f:80:30:61:dc:97:18:24:e0:f7:86:fc:3e:8f:27:
         c9:c0:ee:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:20:05 2026 by rpki-client