Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
File:                     US2b3oE8t7x3GQqE-bGNuOtOIl8.mft (raw, json)
Hash identifier:          x8LPytRwIlCoURyNayUfspjBagEBf5DNt0ntAH9ZpX0=
Subject key identifier:   23:4B:4B:0E:6A:51:10:F3:E9:FC:FC:76:A6:2E:45:11:2C:3D:0A:F6
Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F
Certificate issuer:       /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
Certificate serial:       060D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
Manifest number:          05FB
Signing time:             Sun 30 Aug 2026 23:04:06 +0000
Manifest this update:     Sun 30 Aug 2026 23:04:05 +0000
Manifest next update:     Sun 06 Sep 2026 23:04:05 +0000
Files and hashes:         1: US2b3oE8t7x3GQqE-bGNuOtOIl8.crl (hash: T6wbM1KhxjVzNSH07Obov0RotO8Zc/5KTYV+LbYVB8Y=)
                          2: 2F3F56C42BB411EF8D887F3AC4F9AE02.roa (hash: u3v0nvDMzptv0Bv0++6upWHNRBc+BH3ns60gSH838+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl
                          rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 23:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1549 (0x60d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C956C, serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
        Validity
            Not Before: Aug 30 23:04:05 2026 GMT
            Not After : Sep  6 23:04:05 2026 GMT
        Subject: CN=6a94b6e6-a047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:3b:48:27:9b:8c:8d:19:81:d3:15:50:15:
                    d7:8d:1b:94:89:80:9c:0b:f7:bb:7d:e6:90:5b:73:
                    34:cd:b7:49:66:80:6f:2a:17:f5:14:a4:6f:99:0e:
                    87:c7:b2:fa:d7:27:3c:97:68:f0:06:9a:ac:49:f7:
                    fe:26:5b:89:16:be:75:14:e2:1b:b5:fd:9b:b2:50:
                    3c:5e:2c:de:80:3b:7f:21:d9:f0:51:bb:06:2d:4c:
                    e2:e0:ae:c3:c3:ff:d1:cd:d1:93:14:e3:b1:0f:8a:
                    66:ef:a3:7a:e6:e1:ec:68:13:86:44:51:21:5c:40:
                    2f:ef:aa:60:65:92:c5:c0:30:7b:6b:f5:54:2f:24:
                    ea:2b:ca:90:77:5d:27:6c:b1:73:90:42:74:cd:a1:
                    db:1a:a9:61:82:08:be:bd:6c:e0:9d:49:d3:8a:87:
                    4b:69:7d:cc:47:31:6a:39:c9:f3:6a:54:b8:ee:7c:
                    0a:6e:a0:4c:ea:c6:f6:6d:b3:65:4a:57:4f:26:eb:
                    89:62:78:3f:99:c1:94:00:06:e0:8e:53:90:6b:d1:
                    af:ba:34:4c:cf:a8:ef:16:88:85:85:96:5c:c6:52:
                    51:b4:f3:34:36:f0:0c:40:08:14:be:51:3b:74:63:
                    a8:32:c1:57:34:95:46:8d:e2:f8:0c:bc:b1:77:6c:
                    83:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4B:4B:0E:6A:51:10:F3:E9:FC:FC:76:A6:2E:45:11:2C:3D:0A:F6
            X509v3 Authority Key Identifier:
                keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f5:87:a8:76:fd:d4:ce:b0:f0:c8:f0:9c:ec:d5:4d:bf:2f:
         0e:3c:e9:a6:ce:15:01:94:4f:2a:58:5a:a4:41:4b:2a:0b:14:
         20:dc:22:3d:9f:95:a8:f2:49:b5:61:a2:01:53:5e:f4:dd:d9:
         02:8c:08:5b:de:d0:d3:b9:46:47:ef:89:9f:1a:ac:fd:3c:cd:
         ba:f4:6a:11:d8:6a:b0:a3:97:6b:21:01:fd:d3:1a:e1:11:98:
         aa:82:4c:dd:ff:23:47:54:10:05:67:04:3d:03:fd:7d:d1:42:
         5d:55:b2:7f:b4:ce:3a:2b:2a:46:0a:42:e2:cf:12:85:81:9f:
         02:28:8d:b6:f6:f2:3b:09:8c:33:a1:a4:e5:f7:04:c5:03:92:
         2e:99:0c:c3:0e:3c:d9:8d:1a:8a:aa:2f:ca:6a:c1:03:86:7e:
         48:6a:07:0a:29:13:bb:7e:cd:6a:83:6c:d7:45:c5:6b:9e:cb:
         f8:3b:27:f0:1f:0e:32:cd:a7:c7:bc:18:e7:df:47:83:fe:90:
         1a:3f:54:09:ab:be:c2:41:7e:16:0f:b5:db:17:6e:b4:95:9e:
         72:a4:51:34:92:01:7a:5b:34:de:61:da:c5:1e:d1:c0:0f:fe:
         72:db:31:1d:fb:55:3a:b8:c0:42:ce:6f:cd:df:5b:e1:de:8a:
         7c:35:cf:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk1NkMxMTAvBgNVBAUTKDUxMkQ5QkRFODEzQ0I3QkM3NzE5MEE4NEY5QjE4REI4
RUI0RTIyNUYwHhcNMjYwODMwMjMwNDA1WhcNMjYwOTA2MjMwNDA1WjAYMRYwFAYD
VQQDEw02YTk0YjZlNi1hMDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZg7SCebjI0ZgdMVUBXXjRuUiYCcC/e7feaQW3M0zbdJZoBvKhf1FKRvmQ6H
x7L61yc8l2jwBpqsSff+JluJFr51FOIbtf2bslA8XizegDt/IdnwUbsGLUzi4K7D
w//RzdGTFOOxD4pm76N65uHsaBOGRFEhXEAv76pgZZLFwDB7a/VULyTqK8qQd10n
bLFzkEJ0zaHbGqlhggi+vWzgnUnTiodLaX3MRzFqOcnzalS47nwKbqBM6sb2bbNl
SldPJuuJYng/mcGUAAbgjlOQa9GvujRMz6jvFoiFhZZcxlJRtPM0NvAMQAgUvlE7
dGOoMsFXNJVGjeL4DLyxd2yDfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCNLSw5q
URDz6fz8dqYuRREsPQr2MB8GA1UdIwQYMBaAFFEtm96BPLe8dxkKhPmxjbjrTiJf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTU2Qy9GQjMwNUE1RTBD
OEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3eDNHUXFFLWJHTnVPdE9J
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VTMmIzb0U4dDd4M0dRcUUtYkdOdU90T0lsOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTU2Qy9GQjMwNUE1RTBDOEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3
eDNHUXFFLWJHTnVPdE9JbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAfWHqHb91M6w8MjwnOzVTb8vDjzpps4VAZRPKlhapEFLKgsUINwiPZ+VqPJJ
tWGiAVNe9N3ZAowIW97Q07lGR++Jnxqs/TzNuvRqEdhqsKOXayEB/dMa4RGYqoJM
3f8jR1QQBWcEPQP9fdFCXVWyf7TOOisqRgpC4s8ShYGfAiiNtvbyOwmMM6Gk5fcE
xQOSLpkMww482Y0aiqovymrBA4Z+SGoHCikTu37NaoNs10XFa57L+Dsn8B8OMs2n
x7wY599Hg/6QGj9UCau+wkF+Fg+12xdutJWecqRRNJIBels03mHaxR7RwA/+ctsx
HftVOrjAQs5vzd9b4d6KfDXPbQ==
-----END CERTIFICATE-----
Generated at Mon Aug 31 14:15:08 2026 by rpki-client