Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
File:                     2vWZnAdAuMks1UA3tpsETNValVg.mft (raw, json)
Hash identifier:          3P8vdLcYgnB2c6zLZfKGcZLf6y4pvTqVn0pzzDMX7oQ=
Subject key identifier:   5F:5D:E6:DF:E2:33:9A:B0:9B:33:4E:35:09:B2:5B:62:DA:B0:BB:D0
Authority key identifier: DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58
Certificate issuer:       /CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
Certificate serial:       02B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
Manifest number:          02B2
Signing time:             Sun 05 Apr 2026 01:12:03 +0000
Manifest this update:     Sun 05 Apr 2026 01:12:03 +0000
Manifest next update:     Sun 12 Apr 2026 01:12:03 +0000
Files and hashes:         1: 2vWZnAdAuMks1UA3tpsETNValVg.crl (hash: kui32ZEaHZsZchu13AypeL9g+rguPZbck1/M+WEFkdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl
                          rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690 (0x2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31A2, serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
        Validity
            Not Before: Apr  5 01:12:03 2026 GMT
            Not After : Apr 12 01:12:03 2026 GMT
        Subject: CN=69d1b6e3-7b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fe:50:14:53:ba:37:5a:ea:74:83:eb:ef:68:
                    2e:6b:f3:a2:72:04:b7:1d:5d:fd:c7:f1:4a:95:4e:
                    6d:a8:68:cc:b1:6f:bb:2c:b7:86:02:29:90:a3:2b:
                    d5:d2:d1:ec:67:2c:be:28:2e:fd:f5:2a:4b:65:23:
                    05:f9:a8:18:9c:9e:eb:d5:40:df:60:e9:6c:77:80:
                    8b:3c:d9:ee:a6:ce:07:7b:37:a4:15:36:cd:29:bf:
                    14:aa:2e:99:1f:87:a0:ba:1a:76:07:66:9a:db:ae:
                    8b:a2:48:9e:c5:04:98:8d:c2:be:86:6c:01:53:a1:
                    0c:c8:dc:19:20:86:88:58:7a:2e:60:f8:f6:27:cd:
                    0f:d4:21:e1:ba:79:89:47:c0:73:de:82:b3:17:bf:
                    d8:46:40:58:df:59:b0:ec:86:a0:df:17:6a:fd:fe:
                    3d:8a:6a:ac:7c:2d:a4:5b:de:7b:da:b0:ac:d0:7f:
                    eb:4b:f3:49:32:b4:bf:3f:56:bc:ab:aa:2d:26:0e:
                    4b:c2:88:82:bd:ae:91:21:c4:b6:fa:e1:24:97:e8:
                    79:67:8b:d7:71:35:55:0c:ad:ad:d5:d4:04:c8:71:
                    4c:dc:ff:78:83:83:98:a1:f5:bf:d5:65:6a:4d:c1:
                    ae:be:06:a9:d6:87:6c:5f:dc:15:68:fc:49:22:e2:
                    f1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5D:E6:DF:E2:33:9A:B0:9B:33:4E:35:09:B2:5B:62:DA:B0:BB:D0
            X509v3 Authority Key Identifier:
                keyid:DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:94:88:70:02:94:78:28:e9:ac:b9:86:7e:85:20:3e:da:a5:
         a7:08:60:4d:ae:d9:1f:ce:4d:a7:2a:7a:14:08:65:87:0c:8b:
         de:03:30:6b:30:53:0e:0c:5b:55:01:80:0a:e4:76:50:45:b3:
         c3:46:92:ca:a4:2d:d1:bc:20:8d:c8:c1:bb:fb:21:5c:ad:f5:
         7f:a8:93:32:3c:e1:10:bb:3e:01:52:e0:fc:e7:f6:dd:e7:2e:
         20:fa:37:04:d6:0b:08:80:38:99:84:64:94:fd:39:ed:dc:71:
         46:b7:14:07:cb:07:50:69:ff:f9:cc:be:74:3a:9d:d6:c8:a0:
         dd:6c:8e:30:86:27:7b:9e:08:34:4c:3d:51:43:6c:e3:c6:f0:
         11:48:f7:d2:43:37:75:08:aa:d2:3a:44:b1:4f:61:8a:6e:a9:
         5b:69:43:c0:42:7d:98:d2:57:55:e0:20:fc:aa:90:2e:d3:35:
         5c:74:c7:28:3a:0a:66:f6:03:50:a5:64:4c:14:d8:c8:4a:c3:
         42:66:41:de:ce:9f:fd:14:f7:b7:53:48:8b:13:ba:ea:84:e6:
         dc:c5:03:52:78:06:c2:06:2a:17:44:46:63:1e:e3:4a:da:51:
         fe:d6:6f:de:6a:13:9f:cd:10:1b:36:ad:55:c6:5a:bb:6a:1e:
         ce:52:56:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:01 2026 by rpki-client