Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
File:                     2vWZnAdAuMks1UA3tpsETNValVg.mft (raw, json)
Hash identifier:          H8iuZYQbscYZeAge+LKXP39EzWAbP2peeaq32giECYY=
Subject key identifier:   27:FC:B4:6D:4E:BA:36:53:D4:D6:8C:38:ED:84:30:D5:71:DD:C8:68
Authority key identifier: DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58
Certificate issuer:       /CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
Certificate serial:       02C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
Manifest number:          02C9
Signing time:             Thu 21 May 2026 01:28:03 +0000
Manifest this update:     Thu 21 May 2026 01:28:03 +0000
Manifest next update:     Thu 28 May 2026 01:28:03 +0000
Files and hashes:         1: 2vWZnAdAuMks1UA3tpsETNValVg.crl (hash: 4eZJ4r1NPEFwZEUw+hL+WPpJdkn62ujlEfArjgeb5y8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl
                          rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31A2, serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
        Validity
            Not Before: May 21 01:28:03 2026 GMT
            Not After : May 28 01:28:03 2026 GMT
        Subject: CN=6a0e5fa3-b810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:32:73:a9:d5:18:61:5a:c7:44:06:b8:68:0e:
                    8c:fc:b1:31:8c:52:d1:8c:99:64:6c:e9:57:56:59:
                    6b:2a:57:3d:f2:ef:a2:e2:4d:f6:b2:cc:5f:4c:79:
                    aa:11:60:cf:41:8d:34:23:62:ad:50:13:24:8d:3c:
                    7d:33:dd:1c:7b:e4:ee:ee:0e:64:b7:56:f4:f8:c1:
                    28:8e:29:a1:f3:06:7c:2c:9f:ed:d7:ee:9a:c1:04:
                    bb:bc:bc:13:68:10:b9:35:87:0a:8e:22:5a:1d:73:
                    58:49:46:b4:7d:82:63:46:d2:74:43:fc:22:4a:c1:
                    45:7b:39:77:86:db:9e:4d:f1:68:4e:db:86:7f:f9:
                    e8:99:c0:21:38:f4:fe:68:fd:98:f2:5e:28:92:cd:
                    5a:1f:85:cc:a8:c1:6a:5e:57:5e:7b:b7:96:e5:6c:
                    33:f6:44:cb:67:5c:e0:db:7f:55:47:4b:86:2a:be:
                    71:cc:e0:9b:6e:5f:43:a0:b4:a9:fe:1c:4a:ce:a2:
                    94:d1:7c:87:86:ec:e8:83:0a:e6:f0:64:cc:c3:57:
                    55:25:84:79:d3:85:53:07:d1:00:4b:de:c5:f3:94:
                    6c:7b:78:5b:a2:56:1a:ab:3f:e9:7b:f1:b4:03:a9:
                    46:8f:fe:ec:69:7b:64:a0:76:03:77:25:f7:fa:73:
                    d7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FC:B4:6D:4E:BA:36:53:D4:D6:8C:38:ED:84:30:D5:71:DD:C8:68
            X509v3 Authority Key Identifier:
                keyid:DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f3:2b:16:cb:ec:23:60:7c:de:c9:2e:4d:77:a3:0e:71:f8:
         e0:b4:af:31:9e:03:ce:e6:29:c1:50:3e:5b:12:1f:d0:b0:fa:
         02:fe:ef:e6:72:8a:14:87:84:32:c8:4b:17:d8:1f:11:38:8c:
         24:65:60:50:a1:97:6a:5b:53:51:43:35:62:ef:a0:0b:88:51:
         1f:80:e6:34:b1:11:da:d7:14:2f:8f:eb:07:3e:dc:15:81:40:
         07:9f:b2:92:fa:a0:7e:33:17:aa:66:7a:35:c9:35:53:ba:01:
         29:12:ef:33:32:8d:88:1a:21:dd:b5:d3:7d:a9:ef:43:07:50:
         4c:18:d2:8d:73:1f:c7:c8:98:58:c0:30:21:74:f7:7d:dd:48:
         4d:49:53:e3:c3:e4:7f:58:0b:aa:21:8d:ce:b2:fe:d3:3c:25:
         1a:14:67:c7:d4:54:3d:b3:de:a0:cc:d1:2e:96:25:fc:64:64:
         43:84:d7:b7:d3:9f:18:a6:5e:6b:b5:2c:f9:ea:9d:54:34:aa:
         78:65:0b:23:f4:20:b9:3a:7d:43:48:5a:82:db:b5:89:1a:76:
         98:cc:d0:44:b4:c8:2b:2b:4d:74:74:86:64:e9:2c:e4:73:c7:
         a5:63:a8:4c:92:ef:df:1f:17:1e:8d:88:02:e5:e9:de:1f:f4:
         2e:b6:3e:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMxQTIxMTAvBgNVBAUTKERBRjU5OTlDMDc0MEI4QzkyQ0Q1NDAzN0I2OUIwNDRD
RDU1QTk1NTgwHhcNMjYwNTIxMDEyODAzWhcNMjYwNTI4MDEyODAzWjAYMRYwFAYD
VQQDEw02YTBlNWZhMy1iODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0TJzqdUYYVrHRAa4aA6M/LExjFLRjJlkbOlXVllrKlc98u+i4k32ssxfTHmq
EWDPQY00I2KtUBMkjTx9M90ce+Tu7g5kt1b0+MEojimh8wZ8LJ/t1+6awQS7vLwT
aBC5NYcKjiJaHXNYSUa0fYJjRtJ0Q/wiSsFFezl3htueTfFoTtuGf/nomcAhOPT+
aP2Y8l4oks1aH4XMqMFqXldee7eW5Wwz9kTLZ1zg239VR0uGKr5xzOCbbl9DoLSp
/hxKzqKU0XyHhuzogwrm8GTMw1dVJYR504VTB9EAS97F85Rse3hbolYaqz/pe/G0
A6lGj/7saXtkoHYDdyX3+nPXLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCf8tG1O
ujZT1NaMOO2EMNVx3choMB8GA1UdIwQYMBaAFNr1mZwHQLjJLNVAN7abBEzVWpVY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ERTAzMzMzNjM1
NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVNa3MxVUEzdHBzRVROVmFs
VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ2V1puQWRBdU1rczFVQTN0cHNFVE5WYWxWZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzFBMi9ERTAzMzMzNjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVN
a3MxVUEzdHBzRVROVmFsVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdfMrFsvsI2B83skuTXejDnH44LSvMZ4DzuYpwVA+WxIf0LD6Av7v5nKKFIeE
MshLF9gfETiMJGVgUKGXaltTUUM1Yu+gC4hRH4DmNLER2tcUL4/rBz7cFYFAB5+y
kvqgfjMXqmZ6Nck1U7oBKRLvMzKNiBoh3bXTfanvQwdQTBjSjXMfx8iYWMAwIXT3
fd1ITUlT48Pkf1gLqiGNzrL+0zwlGhRnx9RUPbPeoMzRLpYl/GRkQ4TXt9OfGKZe
a7Us+eqdVDSqeGULI/QguTp9Q0hagtu1iRp2mMzQRLTIKytNdHSGZOks5HPHpWOo
TJLv3x8XHo2IAuXp3h/0LrY+VQ==
-----END CERTIFICATE-----
Generated at Thu May 21 10:20:48 2026 by rpki-client