Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
File:                     US2b3oE8t7x3GQqE-bGNuOtOIl8.mft (raw, json)
Hash identifier:          uxziKq/mgFSQzzFk1+QmG/B0xiPXZhUuObQQPafmEBY=
Subject key identifier:   16:E5:44:C9:1F:B8:80:26:76:9D:A1:BA:D1:A4:1B:D7:69:11:18:21
Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F
Certificate issuer:       /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
Certificate serial:       05F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
Manifest number:          05E7
Signing time:             Wed 22 Jul 2026 23:46:15 +0000
Manifest this update:     Wed 22 Jul 2026 23:46:14 +0000
Manifest next update:     Wed 29 Jul 2026 23:46:14 +0000
Files and hashes:         1: US2b3oE8t7x3GQqE-bGNuOtOIl8.crl (hash: LDKPsqAKoa6f8OPuG9SzVGv4TOLrqKsqIoHLuNYKCt0=)
                          2: 2F3F56C42BB411EF8D887F3AC4F9AE02.roa (hash: u3v0nvDMzptv0Bv0++6upWHNRBc+BH3ns60gSH838+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl
                          rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1529 (0x5f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C956C, serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
        Validity
            Not Before: Jul 22 23:46:14 2026 GMT
            Not After : Jul 29 23:46:14 2026 GMT
        Subject: CN=6a615647-2e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:77:d2:30:0a:0a:db:d8:9a:06:ec:0c:99:bf:
                    ee:aa:09:b2:95:b6:24:30:0b:32:e5:c2:c9:b1:cc:
                    6f:b1:19:9f:8e:f8:19:09:8c:75:b9:1f:9d:af:e0:
                    1a:26:a0:ac:84:1b:38:4b:52:81:60:7e:59:2b:b2:
                    b5:d0:8f:1b:9c:02:88:fc:f4:16:b2:6b:c8:28:bb:
                    91:b8:cf:70:d0:1a:79:14:d2:0d:cf:90:03:32:3d:
                    7f:f2:76:48:4c:f5:25:33:2e:6b:79:0c:ee:e5:7a:
                    b1:65:d5:e1:4e:07:47:87:4d:98:fd:b9:c5:91:ba:
                    c6:12:4d:db:9f:2f:33:49:20:fc:34:c5:49:4f:30:
                    86:a1:7a:fe:3c:05:75:2d:4e:89:94:2f:10:1b:ce:
                    4c:3f:6e:e0:8f:ea:59:49:e8:e4:9d:8f:d4:6f:b9:
                    79:cd:4e:dc:69:e1:b4:7a:03:1e:25:db:c9:33:e2:
                    69:5e:f8:77:b6:8b:dc:4f:9a:5a:2c:a4:8b:ee:62:
                    57:64:8d:fa:f8:f9:ce:73:c1:8f:75:83:e0:6a:2c:
                    03:b8:e1:5b:54:78:b6:77:73:57:ee:99:3a:2c:92:
                    c2:a6:05:77:81:f2:f9:9c:12:82:8d:8e:c0:77:76:
                    9e:d7:92:09:ca:4c:e6:a3:5d:b0:ef:2d:fb:49:78:
                    b4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E5:44:C9:1F:B8:80:26:76:9D:A1:BA:D1:A4:1B:D7:69:11:18:21
            X509v3 Authority Key Identifier:
                keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ec:cc:d9:4c:62:3c:36:e8:21:fd:58:41:90:1a:31:09:5c:
         25:b8:5d:7f:c5:80:d8:36:cc:d9:d6:b0:2c:2d:ff:0a:b7:12:
         32:dc:e7:19:8a:2d:2a:b1:c1:62:0b:aa:e1:d4:d5:74:1d:da:
         6d:60:3d:49:61:d1:9f:48:60:be:ea:4d:f0:1c:75:c5:22:d8:
         0f:a3:f1:fd:4f:a4:81:3f:d5:cb:a2:82:a7:a3:1a:03:cd:bf:
         fb:8d:a1:22:bf:60:0c:e5:7d:b7:09:8c:24:ac:5c:82:7a:1a:
         82:12:22:60:70:59:21:6e:82:26:c8:51:b1:60:47:2f:53:f2:
         8a:a3:eb:b2:3f:da:f1:55:18:ae:2b:88:72:30:37:29:24:2b:
         c2:7e:34:cf:7e:ca:f0:85:d5:d8:64:c3:bb:7b:ac:33:3e:c7:
         cc:88:8f:c1:60:13:32:ae:c4:5b:c1:51:dc:0f:63:c5:c7:3f:
         69:a6:2b:98:ab:b6:1b:43:43:cb:98:b3:8a:4a:99:b8:33:df:
         df:4d:e2:a6:5a:b0:8e:93:a1:88:5b:9d:2a:a6:8c:39:12:30:
         25:ab:a3:3d:58:b4:ac:f9:b6:c1:a3:47:47:db:61:3d:70:e9:
         d2:03:04:30:c7:88:14:25:8e:48:37:16:3f:32:4e:73:9e:95:
         08:04:6b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:06:10 2026 by rpki-client