Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
File:                     2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json)
Hash identifier:          GJef+R9GzKudTUEYVHlT4RmhjNFMimLmtyVluh8lhMI=
Subject key identifier:   FA:5A:BF:88:C9:C6:E3:5E:76:E5:61:CB:27:85:CE:56:C7:5E:50:BB
Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
Certificate issuer:       /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Certificate serial:       02BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
Manifest number:          02B4
Signing time:             Sun 25 Oct 2026 01:42:42 +0000
Manifest this update:     Sun 25 Oct 2026 01:42:42 +0000
Manifest next update:     Sun 01 Nov 2026 01:42:42 +0000
Files and hashes:         1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: R8DfaawSRTphJ1lWA3D/AbdZwlza7FIHbL658hFihPc=)
                          2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 4E7B7eClCEG5d3gzWwa9hz6tdWf+XUY9sPo6EaTao1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
                          rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 01:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
        Validity
            Not Before: Oct 25 01:42:42 2026 GMT
            Not After : Nov  1 01:42:42 2026 GMT
        Subject: CN=6add5e92-8287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:be:6c:46:46:66:c7:b7:ee:dd:57:4b:c7:
                    77:71:fa:4d:73:ec:08:38:03:92:07:32:5b:33:46:
                    89:fd:0c:b0:aa:4e:c9:ab:3c:89:bd:07:ec:bb:38:
                    9d:9c:26:5d:ba:c8:5a:a4:11:d8:b8:d1:10:1e:ff:
                    76:52:e8:f7:86:5b:2c:6a:7e:c4:1a:ad:60:f5:6f:
                    a6:1e:cb:d5:d7:39:ee:a8:1c:70:06:27:0a:fc:32:
                    fa:42:ec:f1:6f:38:67:e4:a5:90:80:7f:42:bc:8d:
                    3d:58:95:eb:1c:70:ba:ac:f4:7f:69:44:f9:21:6a:
                    bf:27:19:b0:a5:b2:44:65:d0:13:53:2d:26:f9:7c:
                    7a:6f:16:53:a3:5e:d8:0a:6a:a8:3a:91:07:51:4f:
                    97:7d:19:37:5f:e6:b5:da:30:54:26:32:42:00:9a:
                    26:b2:b9:b7:17:38:fb:49:0e:1d:69:f1:c0:55:df:
                    05:ec:dc:a7:97:26:9f:49:64:3c:bb:df:7f:e9:2e:
                    3b:cb:47:fa:db:0b:86:c8:8d:18:88:8b:32:da:07:
                    a8:6b:28:3d:11:9f:38:b8:7e:92:20:7a:7c:db:cf:
                    fc:af:0d:01:0e:50:3a:08:9e:d0:9b:01:d0:f6:39:
                    c0:92:fe:63:31:03:72:6a:8b:9a:3c:81:48:91:bf:
                    77:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5A:BF:88:C9:C6:E3:5E:76:E5:61:CB:27:85:CE:56:C7:5E:50:BB
            X509v3 Authority Key Identifier:
                keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:30:ba:f1:50:2a:f2:7f:27:a9:c6:84:46:f4:56:bc:46:4f:
         f2:1c:0e:4b:5b:03:99:5c:0f:b2:a8:01:fa:61:e7:b8:7c:3e:
         50:ab:cf:37:e6:19:08:5e:ba:0b:d7:ac:1e:93:b8:f5:ad:8f:
         88:8e:d4:8d:f2:69:29:93:e2:11:c5:32:78:1e:88:d6:f2:f7:
         00:5e:8b:d0:76:8c:5f:45:e5:ed:f4:0b:5f:61:f3:9f:f9:9b:
         dc:7a:7d:8e:a2:6e:c6:5d:91:07:6c:aa:f4:ce:9f:d6:8c:6f:
         cc:4e:11:6f:4b:8d:d8:f0:a9:1f:4a:80:7e:77:81:7a:6a:a8:
         20:b0:ec:44:b7:3f:41:0c:6c:db:28:5b:f6:21:9e:07:85:7c:
         c1:dd:95:e3:54:2f:e0:79:b2:0a:db:5f:79:9c:f2:05:b9:fb:
         03:b5:99:e2:46:69:2d:a7:e4:b8:31:47:14:17:3d:19:29:9c:
         1f:9c:87:36:71:78:56:81:25:df:de:09:4c:2d:50:cc:40:9c:
         22:5b:34:fc:94:12:24:e7:31:cc:e1:67:b3:7f:21:57:58:15:
         90:75:36:a2:a3:cc:2b:21:25:6e:cb:52:51:d3:41:5c:70:fe:
         f0:bf:68:34:fa:cd:8c:b2:9e:4c:fb:a4:af:db:77:87:3b:e2:
         0b:11:7f:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz
MjMwRjQzM0UwHhcNMjYxMDI1MDE0MjQyWhcNMjYxMTAxMDE0MjQyWjAYMRYwFAYD
VQQDEw02YWRkNWU5Mi04Mjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArcC+bEZGZse37t1XS8d3cfpNc+wIOAOSBzJbM0aJ/Qywqk7JqzyJvQfsuzid
nCZdushapBHYuNEQHv92Uuj3hlssan7EGq1g9W+mHsvV1znuqBxwBicK/DL6Quzx
bzhn5KWQgH9CvI09WJXrHHC6rPR/aUT5IWq/JxmwpbJEZdATUy0m+Xx6bxZTo17Y
CmqoOpEHUU+XfRk3X+a12jBUJjJCAJomsrm3Fzj7SQ4dafHAVd8F7NynlyafSWQ8
u99/6S47y0f62wuGyI0YiIsy2geoayg9EZ84uH6SIHp828/8rw0BDlA6CJ7QmwHQ
9jnAkv5jMQNyaouaPIFIkb93NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPpav4jJ
xuNeduVhyyeFzlbHXlC7MB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD
MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RTM3NC80MDYwMzU2MkFDMzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1
dkx6QXBXclVvV2d5TVBRejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqjC68VAq8n8nqcaERvRWvEZP8hwOS1sDmVwPsqgB+mHnuHw+UKvPN+YZCF66
C9esHpO49a2PiI7UjfJpKZPiEcUyeB6I1vL3AF6L0HaMX0Xl7fQLX2Hzn/mb3Hp9
jqJuxl2RB2yq9M6f1oxvzE4Rb0uN2PCpH0qAfneBemqoILDsRLc/QQxs2yhb9iGe
B4V8wd2V41Qv4HmyCttfeZzyBbn7A7WZ4kZpLafkuDFHFBc9GSmcH5yHNnF4VoEl
394JTC1QzECcIls0/JQSJOcxzOFns38hV1gVkHU2oqPMKyElbstSUdNBXHD+8L9o
NPrNjLKeTPukr9t3hzviCxF/ug==
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:50:23 2026 by rpki-client