Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
File:                     2vWZnAdAuMks1UA3tpsETNValVg.mft (raw, json)
Hash identifier:          2wcJUWf49Y5HTSx2xI+6mUaq1SXpsbqa2EapXFy25c4=
Subject key identifier:   AB:52:EB:43:76:29:8D:98:57:EC:53:21:13:D6:31:AA:19:6D:75:D7
Authority key identifier: DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58
Certificate issuer:       /CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
Certificate serial:       02AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
Manifest number:          02AC
Signing time:             Wed 25 Mar 2026 01:06:24 +0000
Manifest this update:     Wed 25 Mar 2026 01:06:23 +0000
Manifest next update:     Wed 01 Apr 2026 01:06:23 +0000
Files and hashes:         1: 2vWZnAdAuMks1UA3tpsETNValVg.crl (hash: zj6VQBzDZBBudM+hIzp8PlpMi7nDlXZQ7zH2+LOuZhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl
                          rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31A2, serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
        Validity
            Not Before: Mar 25 01:06:23 2026 GMT
            Not After : Apr  1 01:06:23 2026 GMT
        Subject: CN=69c33510-c666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:da:54:e2:d2:21:54:55:6d:6d:c0:94:99:
                    d3:78:2a:23:6d:87:53:be:3f:b4:d1:d9:05:74:0e:
                    b6:ee:3e:95:62:82:1f:3c:d2:92:dd:c8:05:ee:8f:
                    8d:02:be:66:fc:6d:72:ee:d3:a4:f5:92:11:73:1b:
                    62:b6:7d:94:5e:e9:a6:c3:b5:36:cd:be:8c:24:5a:
                    36:8f:68:10:e9:f6:2b:f9:88:8a:e8:97:a5:82:a2:
                    a0:be:22:42:d2:32:c2:93:e3:e0:91:6e:d3:f0:d3:
                    d2:41:9b:eb:31:0b:17:25:36:a0:02:3d:f8:fb:f6:
                    ec:4e:c0:ba:63:63:b3:89:60:6e:6f:61:7b:91:dd:
                    83:d2:42:0f:9a:59:31:9f:f6:ed:00:f0:81:ae:5d:
                    2b:dc:0f:04:37:19:0c:9e:54:4f:90:53:f1:ca:e0:
                    3d:18:d8:6a:02:59:36:e2:8b:6b:2f:95:64:26:02:
                    f5:95:0c:6b:36:f3:69:27:09:c5:1f:ae:7f:6f:81:
                    e3:28:5f:4c:fe:d0:b5:83:8d:c5:f7:9b:37:ac:69:
                    e1:d7:dd:23:f5:05:b6:0a:fe:1b:69:94:8b:f8:0e:
                    d3:c8:b0:5a:72:31:6d:c5:51:b6:a0:ec:f5:e9:96:
                    20:9b:3a:4b:6f:6e:72:81:6b:62:63:d1:7e:54:82:
                    16:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:52:EB:43:76:29:8D:98:57:EC:53:21:13:D6:31:AA:19:6D:75:D7
            X509v3 Authority Key Identifier:
                keyid:DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a9:7d:c4:4b:1b:48:a9:3f:50:14:e0:a9:98:31:31:03:3f:
         d9:ee:48:5c:bb:95:08:26:72:55:10:52:53:89:1d:e8:32:d3:
         00:5e:95:58:bf:16:b7:0e:4f:dc:17:0a:3d:a6:d5:56:d9:db:
         e3:8f:a1:b9:6d:66:8f:c9:79:4a:53:6a:47:fd:41:62:cd:4b:
         40:da:3a:c4:2e:8f:c3:68:e5:36:27:69:8d:66:26:6b:70:16:
         13:c5:0f:a8:3b:04:b1:86:02:65:48:64:9b:df:fc:fa:b9:db:
         59:cd:79:82:b9:e5:cd:fd:11:d3:54:31:dc:d1:84:39:24:ed:
         ca:be:12:41:59:39:89:6b:01:5e:bf:37:c4:15:bf:80:3c:7f:
         e9:4e:f0:bd:49:bc:c0:3d:3c:10:f2:c0:64:a7:09:68:1b:b4:
         05:27:7c:49:d6:55:a2:e6:95:c5:5d:6d:0f:26:ca:b0:c1:79:
         31:0a:e4:e9:a0:c9:18:6a:7e:0d:53:e0:24:87:47:f3:a6:1f:
         51:3c:40:fb:fa:27:8d:f0:ba:4b:ed:5a:15:07:bd:34:71:91:
         9b:be:88:7e:c3:a2:24:ec:db:36:57:03:39:5d:fd:38:0d:47:
         50:15:47:3f:52:1d:07:5b:ce:ca:f9:37:03:cf:4f:05:38:62:
         2b:0f:92:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMxQTIxMTAvBgNVBAUTKERBRjU5OTlDMDc0MEI4QzkyQ0Q1NDAzN0I2OUIwNDRD
RDU1QTk1NTgwHhcNMjYwMzI1MDEwNjIzWhcNMjYwNDAxMDEwNjIzWjAYMRYwFAYD
VQQDEw02OWMzMzUxMC1jNjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqxPaVOLSIVRVbW3AlJnTeCojbYdTvj+00dkFdA627j6VYoIfPNKS3cgF7o+N
Ar5m/G1y7tOk9ZIRcxtitn2UXummw7U2zb6MJFo2j2gQ6fYr+YiK6JelgqKgviJC
0jLCk+PgkW7T8NPSQZvrMQsXJTagAj34+/bsTsC6Y2OziWBub2F7kd2D0kIPmlkx
n/btAPCBrl0r3A8ENxkMnlRPkFPxyuA9GNhqAlk24otrL5VkJgL1lQxrNvNpJwnF
H65/b4HjKF9M/tC1g43F95s3rGnh190j9QW2Cv4baZSL+A7TyLBacjFtxVG2oOz1
6ZYgmzpLb25ygWtiY9F+VIIWQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtS60N2
KY2YV+xTIRPWMaoZbXXXMB8GA1UdIwQYMBaAFNr1mZwHQLjJLNVAN7abBEzVWpVY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ERTAzMzMzNjM1
NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVNa3MxVUEzdHBzRVROVmFs
VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ2V1puQWRBdU1rczFVQTN0cHNFVE5WYWxWZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzFBMi9ERTAzMzMzNjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVN
a3MxVUEzdHBzRVROVmFsVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ6l9xEsbSKk/UBTgqZgxMQM/2e5IXLuVCCZyVRBSU4kd6DLTAF6VWL8Wtw5P
3BcKPabVVtnb44+huW1mj8l5SlNqR/1BYs1LQNo6xC6Pw2jlNidpjWYma3AWE8UP
qDsEsYYCZUhkm9/8+rnbWc15grnlzf0R01Qx3NGEOSTtyr4SQVk5iWsBXr83xBW/
gDx/6U7wvUm8wD08EPLAZKcJaBu0BSd8SdZVouaVxV1tDybKsMF5MQrk6aDJGGp+
DVPgJIdH86YfUTxA+/onjfC6S+1aFQe9NHGRm76IfsOiJOzbNlcDOV39OA1HUBVH
P1IdB1vOyvk3A89PBThiKw+SiQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:28:47 2026 by rpki-client