Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
File:                     024QQmH4GdaND3C7Ka3-jvRjsu0.mft (raw, json)
Hash identifier:          Wx0r88wfDPwYfB8MxsD8DDKcDeaVnnw7JX2hQIasSLY=
Subject key identifier:   2A:FD:7D:E9:40:BE:D0:38:C2:57:B1:FB:8B:AF:3E:10:3E:EF:13:E5
Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
Certificate issuer:       /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
Manifest number:          D6
Signing time:             Sun 01 Mar 2026 07:49:30 +0000
Manifest this update:     Sun 01 Mar 2026 07:49:30 +0000
Manifest next update:     Sun 08 Mar 2026 07:49:30 +0000
Files and hashes:         1: 024QQmH4GdaND3C7Ka3-jvRjsu0.crl (hash: 4Je1+uZocwUjnqPWQbY22MYkb5SZvH8c6ycBPKsjyoc=)
                          2: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (hash: e5hGL0HB5luNnJLrnQAuAjoBKICv2cCV8dxAwYGWnTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
                          rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
        Validity
            Not Before: Mar  1 07:49:30 2026 GMT
            Not After : Mar  8 07:49:30 2026 GMT
        Subject: CN=69a3ef8a-3264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:15:56:f6:e6:02:eb:cc:7a:c2:e2:15:02:
                    7a:1b:c2:49:82:2f:db:cc:fc:1d:19:af:40:94:f1:
                    79:b8:ef:0c:ed:3b:fa:2b:77:f6:a8:bc:9e:a2:d6:
                    0f:22:3d:72:9f:3e:6b:21:c3:f5:71:23:80:15:ac:
                    39:11:98:71:38:99:6f:fc:2f:45:6b:79:4f:e5:25:
                    7e:89:83:0c:b2:89:c8:1a:55:92:be:91:3a:48:6e:
                    bb:36:19:3e:cd:b4:e5:63:6c:95:7c:7a:58:b5:a0:
                    0e:38:ef:15:39:4d:20:a8:e6:49:6c:bf:45:49:55:
                    26:bb:e6:26:68:1e:69:ec:a1:e0:93:08:57:d0:f1:
                    31:a6:26:38:ef:5f:0c:ad:70:ae:40:ff:30:20:fc:
                    f0:e0:d3:92:e5:1f:11:7e:08:9e:77:23:72:32:e6:
                    9c:8c:80:88:63:b5:9a:8d:37:1c:90:2c:cd:00:94:
                    64:ed:d9:8e:84:80:45:24:09:31:ed:5a:9f:45:95:
                    62:8e:9b:b6:0b:0a:15:29:20:03:23:9f:b8:4f:c9:
                    1f:fb:79:6f:95:0d:7a:ab:7b:3d:03:16:8e:59:d7:
                    49:fa:1c:50:6f:87:43:4a:60:3f:0d:49:45:e8:2a:
                    8a:8b:89:f9:95:85:a8:e2:ed:02:7d:69:d9:a9:79:
                    ba:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FD:7D:E9:40:BE:D0:38:C2:57:B1:FB:8B:AF:3E:10:3E:EF:13:E5
            X509v3 Authority Key Identifier:
                keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e9:45:21:e3:c8:af:3a:bb:87:62:72:6c:08:61:7f:01:27:
         fc:0d:f8:32:37:49:46:74:96:24:1e:3f:81:a5:ad:e9:c5:54:
         3a:a1:fd:de:1e:09:57:8c:e5:44:da:64:71:81:ea:4b:d9:44:
         fd:da:7c:8c:8b:b8:43:8e:09:52:63:d0:36:46:bf:b4:21:67:
         29:3d:b0:21:04:bb:2c:43:cc:bb:6f:00:4d:06:c4:ab:80:a5:
         9e:d8:75:79:7c:fd:46:ff:b7:a5:52:fe:42:9f:7d:70:a3:6c:
         20:67:61:28:0e:d7:4a:26:7e:3c:81:be:aa:b5:8a:fc:fa:9d:
         66:82:1e:06:d1:18:f5:71:5e:41:c5:cc:f5:6d:dc:08:69:ce:
         af:64:01:a8:65:d3:51:c7:b9:58:85:18:df:7f:79:df:4a:5e:
         c5:94:93:bb:2d:6a:d2:a4:83:d3:2a:e1:cb:2b:7e:91:15:2a:
         c4:81:04:f2:7b:c0:a0:c3:3b:9d:c3:8b:9b:31:ca:60:4b:b3:
         ad:f3:5f:56:6a:2f:1e:0e:9b:8b:ed:57:27:de:b8:e6:22:14:
         4e:2f:c1:f8:48:3d:73:2d:4e:3d:86:73:5a:2b:f7:85:71:34:
         4a:47:22:9d:73:b6:4f:e3:9d:4e:1c:7d:fe:5e:13:34:4f:40:
         59:b0:a0:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjE1REMxMTAvBgNVBAUTKEQzNkUxMDQyNjFGODE5RDY4RDBGNzBCQjI5QURGRThF
RjQ2M0IyRUQwHhcNMjYwMzAxMDc0OTMwWhcNMjYwMzA4MDc0OTMwWjAYMRYwFAYD
VQQDEw02OWEzZWY4YS0zMjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuzsVVvbmAuvMesLiFQJ6G8JJgi/bzPwdGa9AlPF5uO8M7Tv6K3f2qLyeotYP
Ij1ynz5rIcP1cSOAFaw5EZhxOJlv/C9Fa3lP5SV+iYMMsonIGlWSvpE6SG67Nhk+
zbTlY2yVfHpYtaAOOO8VOU0gqOZJbL9FSVUmu+YmaB5p7KHgkwhX0PExpiY4718M
rXCuQP8wIPzw4NOS5R8RfgiedyNyMuacjICIY7WajTcckCzNAJRk7dmOhIBFJAkx
7VqfRZVijpu2CwoVKSADI5+4T8kf+3lvlQ16q3s9AxaOWddJ+hxQb4dDSmA/DUlF
6CqKi4n5lYWo4u0CfWnZqXm6eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCr9felA
vtA4wlex+4uvPhA+7xPlMB8GA1UdIwQYMBaAFNNuEEJh+BnWjQ9wuymt/o70Y7Lt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTVEQy80RkVDMUMwNENF
RUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi8wMjRRUW1INEdkYU5EM0M3S2EzLWp2Umpz
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzAyNFFRbUg0R2RhTkQzQzdLYTMtanZSanN1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTVEQy80RkVDMUMwNENFRUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi8wMjRRUW1INEdk
YU5EM0M3S2EzLWp2UmpzdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAelFIePIrzq7h2JybAhhfwEn/A34MjdJRnSWJB4/gaWt6cVUOqH93h4JV4zl
RNpkcYHqS9lE/dp8jIu4Q44JUmPQNka/tCFnKT2wIQS7LEPMu28ATQbEq4Clnth1
eXz9Rv+3pVL+Qp99cKNsIGdhKA7XSiZ+PIG+qrWK/PqdZoIeBtEY9XFeQcXM9W3c
CGnOr2QBqGXTUce5WIUY339530pexZSTuy1q0qSD0yrhyyt+kRUqxIEE8nvAoMM7
ncOLmzHKYEuzrfNfVmovHg6bi+1XJ9645iIUTi/B+Eg9cy1OPYZzWiv3hXE0Skci
nXO2T+OdThx9/l4TNE9AWbCgSg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:23:59 2026 by rpki-client