Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
File:                     GuuZUbWE4eIbv8UszokJQRPG_Kc.mft (raw, json)
Hash identifier:          g3KeEy7LN8+vFuNaml4R5c3nQhFVkGJ05LY6clYqn0M=
Subject key identifier:   43:EE:DC:6C:AE:FB:F0:D4:10:F1:A5:A1:93:83:61:0E:09:6D:C2:4B
Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7
Certificate issuer:       /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
Certificate serial:       0775
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
Manifest number:          0768
Signing time:             Tue 22 Sep 2026 21:28:45 +0000
Manifest this update:     Tue 22 Sep 2026 21:28:45 +0000
Manifest next update:     Tue 29 Sep 2026 21:28:45 +0000
Files and hashes:         1: GuuZUbWE4eIbv8UszokJQRPG_Kc.crl (hash: aRiWQRG+d52xB8PU4X7a02wT3SPIMN4WjRXhnJgZ4uk=)
                          2: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (hash: ru7koRfv5BK76e7LZX8DgS3H7EAsvoHWWsynZ+iius0=)
                          3: 753CE1E6814411F0AF823466C4F9AE02.roa (hash: yzIzUBPrHypmilwZ97hmXQLxuQTPjTDzfB9emwk1+Is=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1909 (0x775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
        Validity
            Not Before: Sep 22 21:28:45 2026 GMT
            Not After : Sep 29 21:28:45 2026 GMT
        Subject: CN=6ab2f30d-e240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:34:c3:67:e9:a6:bc:b8:4a:68:b2:1f:52:0b:
                    29:5e:8b:b0:48:ef:1b:24:11:5c:04:22:da:fb:4c:
                    53:34:b6:1d:e0:01:3c:91:dd:12:a3:fd:a4:fa:aa:
                    bf:a4:cd:60:14:92:85:90:bd:63:54:b3:c5:8f:b3:
                    1b:ee:e4:70:3b:13:66:63:d3:fb:af:ea:95:66:1c:
                    34:31:a7:dd:65:33:59:60:d2:08:7f:68:18:dc:78:
                    1f:ec:43:32:dc:05:ab:e4:f0:aa:9c:67:f5:27:a5:
                    77:3b:90:48:75:c4:33:93:21:99:d2:cc:1c:fc:34:
                    b7:a2:2d:f8:d9:6d:8c:ee:ed:22:f7:74:71:b4:16:
                    68:38:f1:d5:29:93:f8:d1:f6:f1:e0:06:02:ee:77:
                    d1:9f:8e:a4:29:7d:d5:60:c8:a0:27:42:47:c1:b3:
                    f6:43:c2:85:dc:15:7c:88:5c:b9:ea:f6:0d:81:7d:
                    58:6a:a0:64:eb:5b:0f:5e:39:2a:ee:ce:1e:1f:2c:
                    e2:a9:d4:dc:5e:7a:9a:23:05:67:2e:49:3e:b6:4c:
                    c7:1e:6b:55:e7:f4:43:a8:e3:35:35:b1:ac:16:3d:
                    2c:86:99:1b:c0:c5:d9:61:3c:eb:2a:a3:19:cc:ee:
                    f0:94:fa:19:9d:bf:3b:58:f0:7f:59:02:9f:f9:c2:
                    24:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EE:DC:6C:AE:FB:F0:D4:10:F1:A5:A1:93:83:61:0E:09:6D:C2:4B
            X509v3 Authority Key Identifier:
                keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:2a:17:87:55:9f:d6:bd:fa:85:31:22:5a:a2:7f:a4:93:c8:
         29:69:62:b5:7f:71:be:ac:fd:03:ea:c1:f8:8d:cb:75:05:cf:
         b3:31:97:21:f8:7e:aa:50:79:1a:a0:16:a5:05:39:e9:67:b6:
         9c:af:03:22:60:22:e9:49:e1:aa:33:7e:88:fe:a4:f7:d0:fe:
         9b:1a:0d:ce:d6:5a:aa:d4:07:c7:b8:1e:ed:0e:8f:be:9e:48:
         fc:7c:8b:89:ef:7d:a7:51:0e:f4:7c:9a:2e:a2:e6:14:c4:42:
         b6:88:a5:f5:07:1b:74:4e:28:9b:d2:17:5e:1e:54:18:8f:11:
         34:ed:14:07:78:1b:6b:a1:70:2a:32:11:95:b2:6d:81:47:03:
         cf:e8:1f:96:eb:b3:cd:52:ad:8f:16:95:7c:3f:d1:d2:f7:98:
         94:ca:f2:ec:de:6b:b6:ef:8e:b8:95:2b:36:f6:ae:c1:67:01:
         e5:63:f4:b6:d3:d0:c8:ba:07:d8:01:d1:fa:b0:48:c6:1c:a6:
         23:5b:9f:37:52:6c:32:f3:d2:cb:e9:99:f7:07:e7:f9:70:98:
         b7:fc:69:d2:c7:5b:f8:30:02:2d:18:6c:35:80:d8:ca:e0:af:
         56:a7:a3:6d:59:3e:3e:1d:83:4f:38:55:c7:56:a4:5d:36:59:
         53:52:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:31:07 2026 by rpki-client