Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
File:                     2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json)
Hash identifier:          RrEf3SmTchB41CwAV9Igh+7Z/6z1sR5H9yqw9Qg9nMM=
Subject key identifier:   B2:72:38:75:88:52:AA:E8:96:D3:03:B4:91:9C:70:31:BC:CE:20:70
Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
Certificate issuer:       /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Certificate serial:       0252
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
Manifest number:          024C
Signing time:             Sun 05 Apr 2026 01:53:09 +0000
Manifest this update:     Sun 05 Apr 2026 01:53:08 +0000
Manifest next update:     Sun 12 Apr 2026 01:53:08 +0000
Files and hashes:         1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: PRQ/EuZBC40j0L6xnU8WPkQ1QSb/dwU9uxko2kyTD+s=)
                          2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: lg5BmvJvKTTVfM5jqqI1swljGGFx139JD9z+JtbKwVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
                          rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
        Validity
            Not Before: Apr  5 01:53:08 2026 GMT
            Not After : Apr 12 01:53:08 2026 GMT
        Subject: CN=69d1c084-a31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c8:f3:34:9e:c8:80:f8:cc:93:1e:01:fb:90:
                    93:72:a6:fc:1e:e4:ec:fa:99:33:48:9b:be:dc:55:
                    9f:44:3b:3c:bd:69:a0:1e:63:c2:06:86:8c:79:e4:
                    b6:42:41:83:16:52:f0:63:b7:0e:38:77:99:13:36:
                    4a:a4:7a:64:1d:68:6b:6d:6f:9f:a9:cf:e9:7f:67:
                    38:ec:c5:93:6e:57:a3:2a:cf:1f:83:58:fd:36:ef:
                    73:af:35:e0:5a:5d:9f:58:39:0e:d7:d9:68:45:49:
                    97:8a:8a:d4:e0:c3:b0:a9:0e:ad:54:e8:8c:d7:24:
                    02:bd:97:4d:f2:43:d7:07:e6:f2:81:d0:16:43:15:
                    75:77:97:ff:7b:a9:79:34:86:47:58:84:6e:5b:9e:
                    69:d0:15:c7:2c:58:37:a4:7a:24:33:0b:67:8b:f4:
                    02:8c:a9:21:44:ff:81:21:62:18:3b:eb:98:ae:73:
                    27:7f:c7:d1:b9:3c:c7:ed:dc:f7:bc:1e:5c:a8:7d:
                    59:ea:ad:f1:ca:e4:8b:70:ae:78:f4:b8:ef:81:13:
                    0d:d6:e8:25:18:b0:47:a9:2e:94:f3:07:d3:3f:8c:
                    4a:86:a3:01:9c:6d:dc:0e:3c:46:2a:5f:96:d6:dc:
                    7a:9d:8d:4f:79:56:08:ec:3e:a4:ac:30:7b:f2:05:
                    25:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:72:38:75:88:52:AA:E8:96:D3:03:B4:91:9C:70:31:BC:CE:20:70
            X509v3 Authority Key Identifier:
                keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:7d:12:a9:2c:33:39:e3:e6:ad:4e:6e:a2:ee:27:e9:84:39:
         3f:ec:e2:f3:1b:20:46:e6:4f:af:04:8c:10:29:ac:1c:51:bb:
         b4:6a:72:4c:a9:40:88:bc:f4:50:21:78:fb:29:03:f2:cd:3c:
         3c:25:a9:b4:bf:0a:82:7f:fd:3c:3e:72:5b:5e:ef:50:76:63:
         9f:3e:08:4d:e0:87:d8:9c:39:10:44:f5:bc:99:0d:09:ac:94:
         d4:88:3f:02:2b:de:90:71:22:c2:38:16:6d:b1:ce:6f:93:82:
         ac:93:a1:af:a8:93:de:7c:3f:72:ba:7f:a4:54:bc:11:a9:1b:
         eb:15:99:66:e7:c9:bc:6c:2b:82:d0:df:b5:6c:59:71:74:6f:
         ab:ea:0f:45:a5:f4:ff:fe:94:6e:9d:c5:69:74:90:00:8c:20:
         a4:21:72:f2:73:87:af:9f:98:3f:0c:76:c2:39:19:50:e8:32:
         db:5a:c6:7f:16:3c:de:57:88:0b:dd:0e:af:64:62:41:a8:2e:
         e3:fd:b3:29:21:4b:fa:5d:c9:98:fe:a5:1f:70:73:a9:af:6a:
         b1:3a:67:55:21:d3:15:1a:8c:02:04:f2:f5:17:9b:ea:4a:51:
         59:8a:00:4a:22:2d:3a:6d:c9:61:eb:bf:22:a8:27:70:fb:aa:
         be:b9:18:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:10:14 2026 by rpki-client