Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
File:                     2vWZnAdAuMks1UA3tpsETNValVg.mft (raw, json)
Hash identifier:          bqc2agD4E3Owe29Hy4RAirsqRHPvxdKFYS0Q8hSTxUM=
Subject key identifier:   82:D5:7D:EC:33:C2:24:F3:24:27:21:35:30:E2:21:56:D1:86:BF:D8
Authority key identifier: DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58
Certificate issuer:       /CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
Certificate serial:       02D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
Manifest number:          02D7
Signing time:             Sat 13 Jun 2026 01:21:07 +0000
Manifest this update:     Sat 13 Jun 2026 01:21:06 +0000
Manifest next update:     Sat 20 Jun 2026 01:21:06 +0000
Files and hashes:         1: 2vWZnAdAuMks1UA3tpsETNValVg.crl (hash: z35+P9sjrZhs6yfRqQAb6MlJh4kiS58BsPzJeFg2CdY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl
                          rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31A2, serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558
        Validity
            Not Before: Jun 13 01:21:06 2026 GMT
            Not After : Jun 20 01:21:06 2026 GMT
        Subject: CN=6a2cb082-f6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1f:54:2f:14:86:80:93:57:83:9d:8c:4d:69:
                    51:39:a8:75:91:2a:48:67:b7:e2:6d:30:d1:9c:cf:
                    eb:32:76:b9:72:cf:5b:2b:1d:ba:9f:45:bf:72:1c:
                    31:99:fd:02:6f:3c:e1:44:45:f9:0a:d3:5c:90:57:
                    a7:7e:31:f9:b8:db:5f:e9:9e:ae:1d:ec:1a:97:f1:
                    52:3f:d7:81:6a:a2:06:b1:f3:17:2e:99:38:b4:7b:
                    5b:6d:a4:e1:cf:88:c3:10:4d:58:20:6a:c3:21:c2:
                    cc:6b:a6:f1:f0:bb:7d:5d:46:fb:66:eb:c1:e5:b6:
                    7b:be:cc:d2:aa:5c:2b:de:d7:13:27:ef:5a:90:87:
                    4a:f8:a2:fb:d6:3d:05:36:f8:9f:09:08:82:d5:f3:
                    fb:2d:e3:42:9a:d5:45:c8:61:59:04:01:80:86:71:
                    b3:d6:17:d2:90:98:ad:9c:82:6a:0a:b0:a9:a0:8c:
                    82:31:25:b0:7a:96:9a:c2:e8:61:e4:76:a9:87:73:
                    90:f9:ff:29:c1:54:35:0e:59:a3:4a:6e:6a:1e:08:
                    3d:4a:5d:fe:cb:73:8b:7e:89:6f:18:4a:60:70:b5:
                    e4:8e:83:a0:c3:c2:ed:49:a9:48:75:0f:8e:58:fa:
                    e5:f9:d7:4f:e5:6d:fe:0a:f5:5d:1b:27:ea:5d:87:
                    64:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D5:7D:EC:33:C2:24:F3:24:27:21:35:30:E2:21:56:D1:86:BF:D8
            X509v3 Authority Key Identifier:
                keyid:DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:78:1f:6c:b2:d2:f1:5f:6c:34:cf:14:a7:a1:36:ba:6b:24:
         d6:9a:c5:be:cd:77:f9:0e:b0:9e:33:d8:db:03:6e:8c:85:46:
         79:64:7a:aa:e2:f1:c4:54:a4:61:ed:be:e6:56:49:82:09:75:
         f0:32:ff:1d:60:60:57:8b:1b:f1:02:3d:58:fd:4a:ce:f2:fb:
         23:36:5a:4e:03:39:1e:b1:5e:a5:d9:d5:83:9b:ed:f2:1c:6c:
         94:7b:df:44:5d:61:4b:bd:91:49:4a:b7:e3:61:e2:72:f9:19:
         6f:c6:1b:e3:db:f0:2e:de:06:c5:db:69:02:45:de:1c:46:88:
         63:17:d6:fa:0e:7a:13:1c:a2:7e:66:13:a0:66:f7:58:41:dd:
         b0:36:3d:b3:5f:88:13:db:e7:89:24:2f:8b:a8:ab:a3:37:a7:
         de:94:2e:f3:03:ad:83:03:23:4d:2f:33:44:c1:f6:9c:a1:4f:
         d3:6a:0b:3a:5a:fe:0c:05:2b:5a:39:dd:1d:b8:04:85:b3:5a:
         ac:98:d4:b1:91:a4:8e:a7:b2:b4:2d:9f:f4:8f:f3:25:7f:ad:
         9b:77:ee:19:48:46:37:90:f8:49:79:df:17:bd:04:2e:3e:57:
         d4:ab:a8:af:1c:9f:2f:bc:93:89:d5:d4:5f:d0:93:02:b3:83:
         ff:af:bf:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMxQTIxMTAvBgNVBAUTKERBRjU5OTlDMDc0MEI4QzkyQ0Q1NDAzN0I2OUIwNDRD
RDU1QTk1NTgwHhcNMjYwNjEzMDEyMTA2WhcNMjYwNjIwMDEyMTA2WjAYMRYwFAYD
VQQDEw02YTJjYjA4Mi1mNmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwB9ULxSGgJNXg52MTWlROah1kSpIZ7fibTDRnM/rMna5cs9bKx26n0W/chwx
mf0CbzzhREX5CtNckFenfjH5uNtf6Z6uHewal/FSP9eBaqIGsfMXLpk4tHtbbaTh
z4jDEE1YIGrDIcLMa6bx8Lt9XUb7ZuvB5bZ7vszSqlwr3tcTJ+9akIdK+KL71j0F
NvifCQiC1fP7LeNCmtVFyGFZBAGAhnGz1hfSkJitnIJqCrCpoIyCMSWwepaawuhh
5Haph3OQ+f8pwVQ1DlmjSm5qHgg9Sl3+y3OLfolvGEpgcLXkjoOgw8LtSalIdQ+O
WPrl+ddP5W3+CvVdGyfqXYdktwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFILVfewz
wiTzJCchNTDiIVbRhr/YMB8GA1UdIwQYMBaAFNr1mZwHQLjJLNVAN7abBEzVWpVY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ERTAzMzMzNjM1
NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVNa3MxVUEzdHBzRVROVmFs
VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ2V1puQWRBdU1rczFVQTN0cHNFVE5WYWxWZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzFBMi9ERTAzMzMzNjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVN
a3MxVUEzdHBzRVROVmFsVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAngfbLLS8V9sNM8Up6E2umsk1prFvs13+Q6wnjPY2wNujIVGeWR6quLxxFSk
Ye2+5lZJggl18DL/HWBgV4sb8QI9WP1KzvL7IzZaTgM5HrFepdnVg5vt8hxslHvf
RF1hS72RSUq342HicvkZb8Yb49vwLt4GxdtpAkXeHEaIYxfW+g56ExyifmYToGb3
WEHdsDY9s1+IE9vniSQvi6irozen3pQu8wOtgwMjTS8zRMH2nKFP02oLOlr+DAUr
WjndHbgEhbNarJjUsZGkjqeytC2f9I/zJX+tm3fuGUhGN5D4SXnfF70ELj5X1Kuo
rxyfL7yTidXUX9CTArOD/6+/aw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:37:58 2026 by rpki-client