Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
File:                     24aQ9k5_gyrPw6am6EIdQXfIlPY.mft (raw, json)
Hash identifier:          dL2ywEz9U8K1YCQur+nAQM3s3aGxRz577+aF/lYdN3I=
Subject key identifier:   A0:3D:8A:02:9A:37:98:BA:8E:00:F6:D3:8B:16:26:22:1B:29:B7:EF
Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6
Certificate issuer:       /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6
Certificate serial:       020B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
Manifest number:          0208
Signing time:             Sun 01 Mar 2026 03:46:33 +0000
Manifest this update:     Sun 01 Mar 2026 03:46:32 +0000
Manifest next update:     Sun 08 Mar 2026 03:46:32 +0000
Files and hashes:         1: 24aQ9k5_gyrPw6am6EIdQXfIlPY.crl (hash: 3zASI8+8hOKZNk6znUctyO493Xi2+/ly2pRs6dgM7RM=)
                          2: 6B5723D8F89F11ED8F29921CC4F9AE02.roa (hash: SdXEUbD7bDMQhTYpbl9h+rsPxGL65X2f3Ma+s3etM2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl
                          rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0FAA, serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6
        Validity
            Not Before: Mar  1 03:46:32 2026 GMT
            Not After : Mar  8 03:46:32 2026 GMT
        Subject: CN=69a3b699-5836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:ac:1e:21:33:56:5d:1a:95:ce:a5:69:e8:
                    8a:22:c4:50:cd:ff:c1:bf:ff:43:aa:3c:27:ce:e3:
                    34:3f:e2:d0:fb:9a:72:b1:19:e2:2f:1c:57:7d:e1:
                    7f:9f:31:0a:00:08:ef:17:ef:1b:d9:84:f7:63:16:
                    a3:4f:44:50:c9:04:6d:1d:e2:9d:7c:1a:4d:62:69:
                    86:1a:ce:82:5e:7f:72:21:8e:2c:7c:ee:d2:3c:0d:
                    7c:c8:b2:56:b4:45:e6:cd:d9:59:3a:ba:86:a0:e2:
                    55:2b:2e:39:14:34:cc:fe:1f:0b:ab:76:d2:40:93:
                    03:25:25:6b:2e:1c:13:18:59:d5:96:86:96:4e:52:
                    7c:b0:3c:24:1e:cc:9a:4a:bb:82:61:29:d1:e2:6a:
                    98:fe:07:e2:c9:2e:d0:3e:99:ff:01:2b:22:fd:48:
                    6e:5e:b9:87:55:23:81:33:ef:d9:ee:c3:cb:b1:74:
                    19:83:f4:3e:59:ce:9e:f1:56:a7:e9:a2:6d:5b:3a:
                    e6:db:32:00:58:36:a1:e2:4c:c1:bf:20:e5:dd:4f:
                    09:1e:ac:f1:50:68:83:1b:50:bd:6c:81:14:4d:cb:
                    40:a1:05:7f:b6:b6:cd:9d:b8:9a:09:df:d2:2d:cc:
                    6d:0e:ef:77:30:f9:bc:6e:ad:da:ee:4c:84:e9:a8:
                    ca:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3D:8A:02:9A:37:98:BA:8E:00:F6:D3:8B:16:26:22:1B:29:B7:EF
            X509v3 Authority Key Identifier:
                keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:76:72:ba:f8:83:ac:3f:f1:53:58:f4:bc:97:26:07:94:23:
         d6:4b:74:66:d7:8c:1a:83:15:5d:39:df:67:98:7c:0a:3b:52:
         19:b7:ba:fc:f2:49:fb:3a:11:03:e2:8a:9b:12:a0:69:4c:51:
         ff:71:98:97:03:ea:27:7c:b5:42:be:e4:2d:71:b1:64:e2:34:
         90:56:b2:03:ad:74:09:71:2b:3a:99:2e:ec:58:19:27:d5:65:
         0c:e0:55:9e:9e:fb:6f:47:02:bf:7e:1e:91:26:53:8a:4f:7e:
         0b:f1:0b:ef:68:43:db:60:99:52:2e:27:fd:9f:e9:a9:3f:45:
         61:84:41:64:ea:6e:01:bd:87:c0:5a:82:8e:a7:97:97:ed:f5:
         1f:38:f2:bc:09:fa:ff:28:55:36:85:71:c2:dc:f2:4c:58:33:
         20:61:ef:59:9e:13:00:3c:0a:fb:20:39:1e:d3:1f:b2:89:8c:
         fe:b2:1a:74:b4:e8:cb:a4:c3:2b:b8:04:ec:a9:5d:15:ee:3b:
         7e:ec:fc:93:c6:1f:e0:13:3c:f6:97:62:ad:df:54:63:64:76:
         37:d9:88:c5:21:58:25:ad:5b:53:f7:ee:cd:af:90:65:40:a5:
         dc:85:0c:67:10:91:e2:78:d4:2e:bd:5a:62:8b:9c:1b:18:ae:
         d5:51:7c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:38:46 2026 by rpki-client