Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
File:                     2Y9v2wB__4PhEwj61Voer6g4dM4.mft (raw, json)
Hash identifier:          x1rFf1zfAVhss6S9tZLBP2q2TMd6QtaNyahk0PbVUiM=
Subject key identifier:   23:5A:08:4C:78:2B:7C:9A:7A:4A:22:FE:F5:3D:D5:04:F4:07:DB:FE
Authority key identifier: D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
Certificate issuer:       /CN=A91D8601/serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
Manifest number:          24
Signing time:             Wed 25 Mar 2026 08:00:57 +0000
Manifest this update:     Wed 25 Mar 2026 08:00:56 +0000
Manifest next update:     Wed 01 Apr 2026 08:00:56 +0000
Files and hashes:         1: 2Y9v2wB__4PhEwj61Voer6g4dM4.crl (hash: uWt3Lsawmm+2Mb7iGtQdbLrDDN12N3LnjIrnX8rJkqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
                          rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8601, serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
        Validity
            Not Before: Mar 25 08:00:56 2026 GMT
            Not After : Apr  1 08:00:56 2026 GMT
        Subject: CN=69c39638-de3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:5b:c1:cd:7d:37:f5:9b:3f:a7:98:a1:b7:
                    a8:5c:58:19:b3:3b:39:88:e0:18:93:a5:c1:5c:8a:
                    15:fd:8c:cb:83:bf:60:03:3a:67:e4:1b:34:3f:cc:
                    22:09:5d:4e:c5:cf:9b:8e:aa:d3:83:7b:3d:d8:46:
                    5e:93:c6:c8:d8:3f:89:ab:c8:09:4c:13:68:2e:7e:
                    96:ae:5e:a8:1e:e3:9f:05:03:1f:fc:cc:91:ae:8a:
                    63:c3:74:da:45:81:57:b0:73:9b:8a:d1:d9:f1:e7:
                    f1:59:3a:b8:ea:c5:c6:30:ce:30:7f:56:b5:d6:79:
                    01:c3:ae:3b:db:8c:ad:3b:33:00:4f:6a:cc:6e:b1:
                    65:66:2f:81:20:a0:9e:58:50:33:fe:23:42:fa:5c:
                    39:cd:53:ea:c9:9c:ee:38:c0:4b:14:52:3f:26:47:
                    ac:1f:13:08:fb:64:aa:0b:6e:b0:21:c6:92:85:c7:
                    97:ab:3e:b8:ae:37:d4:22:fc:92:cc:a9:8c:64:cf:
                    d9:ce:3f:a4:2f:44:c4:cc:86:c5:d9:f7:5b:6b:0f:
                    6b:89:8c:86:e1:eb:1a:b8:99:59:b6:0e:3b:7a:ec:
                    17:d3:f0:56:41:78:5e:75:e5:a6:5a:b6:bc:d1:bd:
                    25:6c:e0:c4:8f:96:7a:e0:d2:4c:19:68:51:85:67:
                    4e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5A:08:4C:78:2B:7C:9A:7A:4A:22:FE:F5:3D:D5:04:F4:07:DB:FE
            X509v3 Authority Key Identifier:
                keyid:D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:01:6b:63:e9:7f:c2:2b:91:bd:33:a2:76:a8:c4:89:45:44:
         25:5e:d0:90:c2:94:d2:0c:49:c8:7f:b7:60:ab:17:64:f2:e1:
         61:f2:38:f9:b7:a7:cb:1f:3c:c7:67:c7:e7:9f:53:43:15:57:
         d6:a8:6d:aa:04:d0:e4:e3:fd:cc:26:4b:80:22:82:9d:99:45:
         76:f3:ba:fa:40:88:71:ac:a1:41:dc:8b:b2:c0:8e:39:07:9f:
         53:8b:36:80:f0:25:19:86:22:c6:14:e3:97:19:8a:75:5f:c1:
         d7:4a:d4:ee:62:25:b0:b5:6d:40:c9:2c:77:ee:61:87:e1:5e:
         36:0b:17:45:3f:c1:d4:f3:9a:5c:bc:e1:fe:aa:56:95:ca:5d:
         c4:b4:22:87:19:a8:6c:de:a2:b8:d6:b2:69:15:2f:c7:eb:b1:
         9b:f4:f3:dc:c9:93:24:97:83:c5:9d:50:81:46:6a:17:60:fa:
         00:07:c8:9a:7a:cb:39:79:13:de:65:55:23:88:d8:de:70:a4:
         aa:d8:41:fc:f7:08:0f:09:11:77:c1:d0:2b:ca:65:f6:09:79:
         d7:9d:6d:5b:bb:aa:ff:73:db:03:84:7b:96:58:6f:5a:be:35:
         3e:b3:ce:4c:6b:bf:53:e8:8b:05:dd:86:8d:5c:9a:b4:2d:8e:
         fb:85:b7:63
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
ODYwMTExMC8GA1UEBRMoRDk4RjZGREIwMDdGRkY4M0UxMTMwOEZBRDU1QTFFQUZB
ODM4NzRDRTAeFw0yNjAzMjUwODAwNTZaFw0yNjA0MDEwODAwNTZaMBgxFjAUBgNV
BAMTDTY5YzM5NjM4LWRlM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5z1vBzX039Zs/p5iht6hcWBmzOzmI4BiTpcFcihX9jMuDv2ADOmfkGzQ/zCIJ
XU7Fz5uOqtODez3YRl6TxsjYP4mryAlME2gufpauXqge458FAx/8zJGuimPDdNpF
gVewc5uK0dnx5/FZOrjqxcYwzjB/VrXWeQHDrjvbjK07MwBPasxusWVmL4EgoJ5Y
UDP+I0L6XDnNU+rJnO44wEsUUj8mR6wfEwj7ZKoLbrAhxpKFx5erPriuN9Qi/JLM
qYxkz9nOP6QvRMTMhsXZ91trD2uJjIbh6xq4mVm2Djt67BfT8FZBeF515aZatrzR
vSVs4MSPlnrg0kwZaFGFZ05TAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUI1oITHgr
fJp6SiL+9T3VBPQH2/4wHwYDVR0jBBgwFoAU2Y9v2wB//4PhEwj61Voer6g4dM4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4NjAxLzU5NEIyQzNDRjZB
RjExRjA4OTZBQkM1RjQzNkY1NkJDLzJZOXYyd0JfXzRQaEV3ajYxVm9lcjZnNGRN
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMlk5djJ3Ql9fNFBoRXdqNjFWb2VyNmc0ZE00LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4
NjAxLzU5NEIyQzNDRjZBRjExRjA4OTZBQkM1RjQzNkY1NkJDLzJZOXYyd0JfXzRQ
aEV3ajYxVm9lcjZnNGRNNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAuAWtj6X/CK5G9M6J2qMSJRUQlXtCQwpTSDEnIf7dgqxdk8uFh8jj5t6fLHzzH
Z8fnn1NDFVfWqG2qBNDk4/3MJkuAIoKdmUV287r6QIhxrKFB3IuywI45B59TizaA
8CUZhiLGFOOXGYp1X8HXStTuYiWwtW1AySx37mGH4V42CxdFP8HU85pcvOH+qlaV
yl3EtCKHGahs3qK41rJpFS/H67Gb9PPcyZMkl4PFnVCBRmoXYPoAB8iaess5eRPe
ZVUjiNjecKSq2EH89wgPCRF3wdArymX2CXnXnW1bu6r/c9sDhHuWWG9avjU+s85M
a79T6IsF3YaNXJq0LY77hbdj
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:28 2026 by rpki-client