Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
File:                     US2b3oE8t7x3GQqE-bGNuOtOIl8.mft (raw, json)
Hash identifier:          FHuhWe1b8K2m23ZUoSnEaU3smfylzTJwQswJFeJ11CE=
Subject key identifier:   E3:2A:DF:A3:2F:63:AF:45:69:33:2F:A1:13:19:B6:53:B0:F2:BB:11
Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F
Certificate issuer:       /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
Certificate serial:       061B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
Manifest number:          0609
Signing time:             Sat 26 Sep 2026 22:58:52 +0000
Manifest this update:     Sat 26 Sep 2026 22:58:52 +0000
Manifest next update:     Sat 03 Oct 2026 22:58:52 +0000
Files and hashes:         1: US2b3oE8t7x3GQqE-bGNuOtOIl8.crl (hash: w3qk5jfVzjNwrmgWemUgUh5Gr5m9TNiWU2bfiyfy0kk=)
                          2: 2F3F56C42BB411EF8D887F3AC4F9AE02.roa (hash: u3v0nvDMzptv0Bv0++6upWHNRBc+BH3ns60gSH838+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl
                          rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563 (0x61b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C956C, serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
        Validity
            Not Before: Sep 26 22:58:52 2026 GMT
            Not After : Oct  3 22:58:52 2026 GMT
        Subject: CN=6ab84e2c-6641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e5:8a:9d:9a:b1:86:97:6b:3a:22:6e:db:27:
                    1e:c8:8d:8b:89:5a:d1:2c:0b:75:6e:6f:49:61:8f:
                    c5:54:c2:f0:a5:23:f9:a3:a0:e3:1a:b7:c8:0e:d0:
                    42:7d:96:6b:25:93:6b:e6:11:9a:f2:60:ef:b9:38:
                    b9:a7:01:9d:b5:fc:ec:17:24:5a:4a:79:66:a6:27:
                    f5:9c:ec:2d:b2:41:c8:a3:de:38:76:c1:fc:52:f8:
                    f0:e3:ad:1d:9d:14:fd:3f:95:ab:12:e7:fd:14:e1:
                    bc:b3:53:c4:22:96:e6:07:b2:dc:49:43:f1:ab:a1:
                    24:17:0f:78:a5:67:66:19:1f:8d:05:c4:cc:13:d3:
                    c2:08:46:f0:f8:c2:41:9a:c8:21:54:94:cc:d3:28:
                    1e:ea:1c:65:db:c7:a9:68:46:79:da:45:ee:83:4e:
                    24:ca:76:e7:3a:38:b7:53:4d:ab:b6:b6:89:fe:e0:
                    ac:c7:f8:8f:b0:b9:20:2e:9c:82:8a:4c:06:08:d1:
                    40:5d:8f:89:50:de:dd:8b:4a:eb:89:30:ef:16:97:
                    54:7e:78:f7:d4:5a:0d:61:cf:24:d3:8f:d2:04:4b:
                    f4:d6:88:f3:7d:f2:64:39:6c:e9:76:55:d3:14:d9:
                    53:85:a7:67:3c:48:92:35:c1:0d:fd:4c:e8:1c:8e:
                    ef:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2A:DF:A3:2F:63:AF:45:69:33:2F:A1:13:19:B6:53:B0:F2:BB:11
            X509v3 Authority Key Identifier:
                keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c7:63:b4:97:41:2b:6e:0b:17:1b:32:69:74:18:5f:61:a5:
         2b:a8:11:16:a3:39:a6:00:d0:bc:22:1e:05:e5:78:5c:c2:c0:
         bb:59:fb:08:a9:35:ca:45:b7:33:db:d7:d4:ba:96:5a:bb:be:
         14:51:4f:9c:ae:ad:1b:91:dd:f9:3a:2a:cb:4e:af:b3:63:74:
         91:3a:37:cd:73:c1:9c:64:ce:cb:00:0d:a4:d2:e5:c8:13:38:
         32:12:7a:4d:ce:63:a4:e4:fd:43:f2:d2:42:df:86:31:0c:a4:
         5e:b0:b6:af:f0:b5:72:39:a7:17:5a:8e:50:c9:93:82:de:23:
         8d:fd:f1:c0:43:98:c7:ff:9f:84:7c:58:4e:a5:c6:50:e1:71:
         2c:fb:06:ac:36:d2:87:49:b3:70:f0:01:29:c5:39:2f:8b:57:
         bb:0b:12:8d:e9:5e:73:62:a0:27:e4:b3:89:6e:79:97:a3:b6:
         9c:4e:e8:75:e8:9b:91:d2:1f:27:a2:a3:4f:5f:49:94:6c:26:
         7f:f2:2b:25:bc:cf:a6:69:f3:3a:0f:99:3e:3d:e4:23:e8:c6:
         d2:58:b0:23:4a:22:3e:c1:45:6b:46:5f:dc:4d:af:52:31:b4:
         61:ac:9a:ed:e9:71:b1:c5:be:4d:88:84:92:96:9c:17:46:9a:
         9f:c6:e4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:12:26 2026 by rpki-client