Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
File:                     GuuZUbWE4eIbv8UszokJQRPG_Kc.mft (raw, json)
Hash identifier:          rnlF0UFmzvCYnxxu9qdn7vH1Dl/qon+edp2C5p2qzJ4=
Subject key identifier:   A9:1D:37:4A:19:DA:9B:0C:B6:5D:7B:F5:BF:A8:0C:3F:C9:11:30:4A
Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7
Certificate issuer:       /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
Certificate serial:       0730
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
Manifest number:          0723
Signing time:             Sun 10 May 2026 21:57:21 +0000
Manifest this update:     Sun 10 May 2026 21:57:21 +0000
Manifest next update:     Sun 17 May 2026 21:57:21 +0000
Files and hashes:         1: GuuZUbWE4eIbv8UszokJQRPG_Kc.crl (hash: e/FJ5d1scLCl7MWMiK4CdPKvfYiVzNgRs8Rb3zUEpQU=)
                          2: 753CE1E6814411F0AF823466C4F9AE02.roa (hash: yzIzUBPrHypmilwZ97hmXQLxuQTPjTDzfB9emwk1+Is=)
                          3: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (hash: ru7koRfv5BK76e7LZX8DgS3H7EAsvoHWWsynZ+iius0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 May 2026 21:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1840 (0x730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
        Validity
            Not Before: May 10 21:57:21 2026 GMT
            Not After : May 17 21:57:21 2026 GMT
        Subject: CN=6a00ff41-5a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:7e:b8:48:e0:87:99:47:7f:fc:e3:8c:fb:
                    ef:ed:8b:e9:ed:81:5d:5a:a4:9b:04:08:b1:07:e2:
                    e0:18:01:a1:7f:97:8d:99:a0:53:2e:69:1b:f7:b7:
                    35:25:60:06:7f:58:cc:06:c3:f7:bc:dc:9d:33:31:
                    51:30:c8:7e:a8:c7:e4:1e:33:38:09:55:33:1d:d2:
                    f6:b6:ee:ff:f4:be:51:c5:d9:0a:3f:45:b0:c0:d0:
                    d7:db:8e:13:19:9e:1c:88:68:78:b6:30:b3:b5:3e:
                    5c:4d:64:9f:85:3b:2e:d1:9f:49:eb:db:03:2b:64:
                    1a:bd:5a:38:cd:69:a8:a3:71:ff:e5:0c:e9:da:14:
                    b3:ed:dc:e7:59:8e:a7:92:3c:99:c8:bb:f7:19:b4:
                    c3:04:f3:e3:3a:93:5e:7e:0f:47:9b:d1:96:d6:74:
                    6f:6e:d5:dd:3a:c9:a4:36:5a:f9:fd:86:25:14:2d:
                    6d:ba:0a:6d:5e:38:1c:8c:d2:56:2c:89:48:13:2b:
                    2d:11:39:eb:1d:be:9a:cb:4c:6f:15:69:d1:a6:7f:
                    9f:56:25:19:15:35:f5:f5:0a:02:28:5e:28:db:15:
                    b2:64:79:39:18:a0:f2:02:5a:11:7d:6a:2e:5d:b5:
                    d5:ea:38:d9:f7:0a:2c:02:16:63:be:12:5f:aa:1f:
                    61:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1D:37:4A:19:DA:9B:0C:B6:5D:7B:F5:BF:A8:0C:3F:C9:11:30:4A
            X509v3 Authority Key Identifier:
                keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:6b:90:ae:a6:24:b2:06:58:86:b1:ac:59:15:73:f5:8f:c8:
         47:55:15:d0:ec:c5:08:60:97:f9:09:d4:6a:be:df:78:02:85:
         83:b1:f7:88:31:46:bd:f3:c6:b1:31:6b:ef:56:22:89:1b:14:
         10:0a:72:6e:d4:81:07:28:f5:87:1d:15:2e:02:a4:71:15:96:
         13:fd:48:51:02:61:c0:19:01:96:2e:d4:18:da:2d:db:7e:d1:
         3e:ce:4d:e5:de:43:8e:2a:3c:1e:20:4e:31:90:c5:94:bd:76:
         7e:07:a0:cc:03:0a:8b:ba:94:63:37:dd:f5:28:da:0f:48:12:
         83:ff:a6:42:1c:73:3e:d0:7e:a4:82:1c:b8:c6:d4:7e:6c:b9:
         c0:27:1a:c1:e2:9b:a3:52:d1:50:76:0b:18:2e:d5:d0:fd:4c:
         62:6b:8c:52:0a:c5:41:40:dc:20:ab:e6:01:c0:a9:35:00:b0:
         df:e7:b4:86:94:99:6b:cb:d8:91:03:2c:8f:1d:03:b7:e5:a3:
         3a:99:7b:fc:78:65:cd:8f:9b:03:80:8d:79:6a:53:1f:ab:a7:
         ae:06:05:0c:e6:07:71:2e:27:bc:14:e5:d5:61:ae:41:c3:e3:
         10:c1:4a:53:09:44:d6:42:28:ca:7b:8b:7e:63:80:02:75:87:
         15:ba:1a:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNEQzUxMTAvBgNVBAUTKDFBRUI5OTUxQjU4NEUxRTIxQkJGQzUyQ0NFODkwOTQx
MTNDNkZDQTcwHhcNMjYwNTEwMjE1NzIxWhcNMjYwNTE3MjE1NzIxWjAYMRYwFAYD
VQQDEw02YTAwZmY0MS01YTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtT5+uEjgh5lHf/zjjPvv7Yvp7YFdWqSbBAixB+LgGAGhf5eNmaBTLmkb97c1
JWAGf1jMBsP3vNydMzFRMMh+qMfkHjM4CVUzHdL2tu7/9L5RxdkKP0WwwNDX244T
GZ4ciGh4tjCztT5cTWSfhTsu0Z9J69sDK2QavVo4zWmoo3H/5Qzp2hSz7dznWY6n
kjyZyLv3GbTDBPPjOpNefg9Hm9GW1nRvbtXdOsmkNlr5/YYlFC1tugptXjgcjNJW
LIlIEystETnrHb6ay0xvFWnRpn+fViUZFTX19QoCKF4o2xWyZHk5GKDyAloRfWou
XbXV6jjZ9wosAhZjvhJfqh9hQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKkdN0oZ
2psMtl179b+oDD/JETBKMB8GA1UdIwQYMBaAFBrrmVG1hOHiG7/FLM6JCUETxvyn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9GM0RGNTg4Qzgw
QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRlSWJ2OFVzem9rSlFSUEdf
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d1dVpVYldFNGVJYnY4VXN6b2tKUVJQR19LYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Q0RDNS9GM0RGNTg4QzgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRl
SWJ2OFVzem9rSlFSUEdfS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArmuQrqYksgZYhrGsWRVz9Y/IR1UV0OzFCGCX+QnUar7feAKFg7H3iDFGvfPG
sTFr71YiiRsUEApybtSBByj1hx0VLgKkcRWWE/1IUQJhwBkBli7UGNot237RPs5N
5d5Djio8HiBOMZDFlL12fgegzAMKi7qUYzfd9SjaD0gSg/+mQhxzPtB+pIIcuMbU
fmy5wCcaweKbo1LRUHYLGC7V0P1MYmuMUgrFQUDcIKvmAcCpNQCw3+e0hpSZa8vY
kQMsjx0Dt+WjOpl7/HhlzY+bA4CNeWpTH6unrgYFDOYHcS4nvBTl1WGuQcPjEMFK
UwlE1kIoynuLfmOAAnWHFboaMA==
-----END CERTIFICATE-----
Generated at Tue May 12 22:28:10 2026 by rpki-client