Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
File:                     2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft (raw, json)
Hash identifier:          q2lSiSJvttcwnNZpbq3v8EL9KQ7anqmZ7FTVeAW0ZCE=
Subject key identifier:   8A:19:F7:4A:FF:4B:87:4B:C9:27:64:A6:F1:C3:71:F6:99:1E:59:2D
Authority key identifier: D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4
Certificate issuer:       /CN=A91487B2/serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4
Certificate serial:       04D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
Manifest number:          04D0
Signing time:             Tue 24 Mar 2026 23:30:16 +0000
Manifest this update:     Tue 24 Mar 2026 23:30:15 +0000
Manifest next update:     Tue 31 Mar 2026 23:30:15 +0000
Files and hashes:         1: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl (hash: p6F3LkW7inXdqbK1CkmxDiiyDlxn0kobBoAixaTcuXE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1233 (0x4d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91487B2, serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4
        Validity
            Not Before: Mar 24 23:30:15 2026 GMT
            Not After : Mar 31 23:30:15 2026 GMT
        Subject: CN=69c31e88-f12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:9f:52:48:80:73:1a:cc:68:35:41:31:4b:
                    05:a2:1c:f0:cb:df:5b:58:eb:e8:e2:63:c4:34:b4:
                    99:c6:6a:73:6d:84:f0:37:17:3a:dd:cf:6b:76:29:
                    b6:f2:d5:aa:1c:b8:29:21:c3:a8:7b:9f:eb:b1:4b:
                    9e:6e:7b:4b:3d:d4:ae:13:9c:53:44:02:c8:4c:10:
                    60:8e:6e:e1:92:dd:24:ff:40:22:eb:9a:0f:1b:0c:
                    53:37:e5:7d:78:9f:77:a5:74:ae:cc:11:38:0d:e4:
                    61:27:ca:4a:14:2d:d6:09:fb:2f:70:bf:37:3c:c6:
                    dd:6d:23:21:f5:1c:d0:78:4d:5c:46:0e:c6:67:69:
                    0b:d1:98:56:bd:82:10:6f:06:39:a6:8f:3c:5b:03:
                    2a:66:8b:00:b3:82:02:6a:c7:7f:33:0b:9e:cf:f8:
                    51:fe:ce:d9:6d:c9:8f:67:50:e6:70:e5:3f:ff:b8:
                    ce:d8:d1:2c:29:dc:b5:d7:47:c5:67:1a:bc:cb:51:
                    89:5c:bb:d2:8b:b8:aa:31:32:ed:49:5c:67:e7:63:
                    62:d7:84:79:e1:46:cb:7f:cd:9f:23:1b:a4:87:8f:
                    3d:cd:54:33:fe:f6:9b:37:3e:2f:b1:49:c5:3a:06:
                    e5:42:17:ee:07:38:d9:b2:77:a6:f9:31:f7:7c:8b:
                    0b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:19:F7:4A:FF:4B:87:4B:C9:27:64:A6:F1:C3:71:F6:99:1E:59:2D
            X509v3 Authority Key Identifier:
                keyid:D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b6:91:57:00:5e:dd:c3:64:1a:0d:7d:7d:c1:38:28:6f:e9:
         43:48:21:ba:06:ab:5d:ba:0c:e5:53:f4:94:18:78:18:52:14:
         a6:38:fc:48:9a:30:9f:82:8a:fa:60:d0:33:f3:57:48:f4:79:
         88:ff:23:e1:05:e7:5b:d8:7b:dc:6c:c0:df:a4:d4:1f:7c:ce:
         74:8f:a6:9c:89:bc:1b:7f:3f:b3:a5:6c:8d:ee:c4:fa:7e:e4:
         3f:f7:11:ed:2d:2c:64:9a:6b:13:10:0e:1d:1b:de:c9:3f:1e:
         63:28:8b:29:f3:09:64:fb:f7:db:a7:cc:7d:4a:99:02:7f:9f:
         8f:a9:4e:95:cc:4c:64:4d:44:03:7e:57:9f:40:ec:9e:35:5a:
         58:21:43:da:b0:9f:81:22:b4:9d:9f:d9:80:9e:4c:f0:73:a1:
         69:1c:51:d6:c4:0d:f9:3d:07:f7:e8:c9:e2:e2:f8:b1:47:9a:
         79:26:ca:db:8f:0e:82:34:88:6c:ef:a9:7e:46:43:2c:b8:f2:
         b0:42:0c:07:9e:96:4b:55:2f:c9:e0:25:aa:e9:b6:99:f1:08:
         a5:83:28:46:8b:78:38:59:4e:63:ce:28:93:c8:29:f7:5f:22:
         56:38:ce:cc:a8:3f:f1:de:89:f7:bc:af:28:db:4a:41:18:45:
         6c:90:d0:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg3QjIxMTAvBgNVBAUTKEQ5NkJGNTZBQjYzRkFFRjAxNjlDMEQyOUQ2NEE1NDc4
MUMwNkIyRTQwHhcNMjYwMzI0MjMzMDE1WhcNMjYwMzMxMjMzMDE1WjAYMRYwFAYD
VQQDEw02OWMzMWU4OC1mMTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvoafUkiAcxrMaDVBMUsFohzwy99bWOvo4mPENLSZxmpzbYTwNxc63c9rdim2
8tWqHLgpIcOoe5/rsUuebntLPdSuE5xTRALITBBgjm7hkt0k/0Ai65oPGwxTN+V9
eJ93pXSuzBE4DeRhJ8pKFC3WCfsvcL83PMbdbSMh9RzQeE1cRg7GZ2kL0ZhWvYIQ
bwY5po88WwMqZosAs4ICasd/Mwuez/hR/s7ZbcmPZ1DmcOU//7jO2NEsKdy110fF
Zxq8y1GJXLvSi7iqMTLtSVxn52Ni14R54UbLf82fIxukh489zVQz/vabNz4vsUnF
OgblQhfuBzjZsnem+TH3fIsLRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIoZ90r/
S4dLySdkpvHDcfaZHlktMB8GA1UdIwQYMBaAFNlr9Wq2P67wFpwNKdZKVHgcBrLk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdCMi83NDZEQjZGMjVE
NjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2QVduQTBwMWtwVWVCd0dz
dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJXdjFhcllfcnZBV25BMHAxa3BVZUJ3R3N1US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODdCMi83NDZEQjZGMjVENjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2
QVduQTBwMWtwVWVCd0dzdVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEraRVwBe3cNkGg19fcE4KG/pQ0ghugarXboM5VP0lBh4GFIUpjj8SJown4KK
+mDQM/NXSPR5iP8j4QXnW9h73GzA36TUH3zOdI+mnIm8G38/s6Vsje7E+n7kP/cR
7S0sZJprExAOHRveyT8eYyiLKfMJZPv326fMfUqZAn+fj6lOlcxMZE1EA35Xn0Ds
njVaWCFD2rCfgSK0nZ/ZgJ5M8HOhaRxR1sQN+T0H9+jJ4uL4sUeaeSbK248OgjSI
bO+pfkZDLLjysEIMB56WS1UvyeAlqum2mfEIpYMoRot4OFlOY84ok8gp918iVjjO
zKg/8d6J97yvKNtKQRhFbJDQsg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:36 2026 by rpki-client