Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
File:                     US3AbkHAiZokofyIXrNG5FMH80c.mft (raw, json)
Hash identifier:          0C6v+wvo4M1+NtxP4mjVLaL5RXfY+mSgkJz0i0/Ujl0=
Subject key identifier:   CB:95:41:F1:74:27:BE:FC:82:C3:14:58:0C:91:7A:C3:62:17:3B:3A
Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47
Certificate issuer:       /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347
Certificate serial:       09EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
Manifest number:          09E3
Signing time:             Sun 01 Mar 2026 23:50:30 +0000
Manifest this update:     Sun 01 Mar 2026 23:50:28 +0000
Manifest next update:     Sun 08 Mar 2026 23:50:28 +0000
Files and hashes:         1: US3AbkHAiZokofyIXrNG5FMH80c.crl (hash: taxXjac382g5D7geqW7OKxoNdlsJ/VIpkshxVY3EDHM=)
                          2: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (hash: TtvgX0HunQnxwePu7sD+x5FU7eZoqly/IQVqoa8h86s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl
                          rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2539 (0x9eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA4F2, serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347
        Validity
            Not Before: Mar  1 23:50:28 2026 GMT
            Not After : Mar  8 23:50:28 2026 GMT
        Subject: CN=69a4d0c6-2ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6f:05:12:b1:99:c5:ee:5e:10:19:37:ea:a6:
                    de:ad:56:ad:d4:88:4b:37:09:81:ee:00:da:f2:5b:
                    60:7f:19:79:b6:41:68:ec:46:5f:49:26:ce:e6:7b:
                    85:57:8e:d8:8f:03:5a:b6:bd:22:ad:54:44:d0:67:
                    58:cf:e9:0e:01:c1:a2:f2:f6:e5:e2:9b:d1:47:e1:
                    4c:0b:8d:80:22:01:55:2d:ba:fb:31:91:de:7f:6a:
                    dd:0b:88:71:5a:c5:a2:d8:8c:c5:a0:6b:dc:3d:66:
                    c0:35:af:8b:9d:62:af:18:84:dd:a3:4d:96:26:0f:
                    a7:32:55:9e:c9:77:78:11:35:ba:86:29:b3:c3:5b:
                    3b:07:43:f2:23:38:31:17:5f:32:e9:da:87:31:b9:
                    66:d1:a6:58:9a:39:11:b4:81:e0:ed:0b:b3:92:45:
                    5f:f5:db:ca:e7:f1:99:fd:c7:a4:ae:94:64:c3:61:
                    c1:9a:08:bd:93:35:ba:db:18:b0:cc:e9:cf:7b:08:
                    6a:d1:9c:2e:78:93:f8:54:eb:c8:a0:d2:33:ac:fe:
                    c5:39:46:6a:7f:5f:23:cc:9d:53:86:58:77:42:d1:
                    6c:45:0f:93:6a:3e:e8:6e:15:7c:eb:25:4e:93:5a:
                    49:15:4c:f7:ed:ae:bd:14:bd:10:43:02:26:92:05:
                    e1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:95:41:F1:74:27:BE:FC:82:C3:14:58:0C:91:7A:C3:62:17:3B:3A
            X509v3 Authority Key Identifier:
                keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:80:8f:df:fe:f6:07:9a:df:a9:4f:63:dd:8c:49:52:a3:35:
         c3:e4:ef:c6:df:e7:78:39:65:1d:9a:6d:cc:cd:aa:ec:13:11:
         2a:12:36:39:48:f8:21:61:98:85:29:86:93:fb:83:d6:e3:1d:
         a7:7c:fe:4a:81:89:f4:88:1d:91:f3:69:a7:ee:0a:0f:bf:68:
         a9:b5:6e:6f:36:f0:ef:a6:8c:4a:3e:d2:37:71:8a:46:18:98:
         36:e8:f8:5f:69:eb:d3:93:7a:61:4a:57:d3:a3:ed:2a:11:89:
         37:11:7a:33:2c:b9:c7:e7:37:90:49:35:a2:5a:a2:29:c1:19:
         53:5f:07:32:69:e3:d6:78:dc:91:c7:a5:74:4b:20:b2:bd:8a:
         28:83:79:5f:06:88:6b:25:dc:ee:d4:fa:a8:c7:58:15:09:b7:
         fd:82:f2:3e:92:a1:74:37:a7:84:21:8a:96:37:33:ec:5f:86:
         5d:fb:52:07:eb:3d:62:a5:56:88:33:6b:86:37:54:22:54:39:
         00:b4:a8:ef:ca:8c:e7:d2:8f:23:67:f7:8f:e5:12:f8:63:16:
         3e:ab:9d:10:4f:3f:89:dc:64:c6:61:be:f0:f8:1e:05:bc:92:
         33:23:48:35:9c:dd:2e:91:df:37:1a:64:f8:f3:78:da:77:1f:
         ea:25:45:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:45:00 2026 by rpki-client