Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
File:                     GuuZUbWE4eIbv8UszokJQRPG_Kc.mft (raw, json)
Hash identifier:          5mvEoeeJdAQlzqU3KFf4tXC5xzOSkIFrbP7Kh63mID0=
Subject key identifier:   F4:C5:8D:D8:70:4F:4E:5B:A2:DD:E1:28:43:4C:C9:15:09:D0:9A:BE
Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7
Certificate issuer:       /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
Certificate serial:       0718
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
Manifest number:          070B
Signing time:             Tue 24 Mar 2026 21:42:42 +0000
Manifest this update:     Tue 24 Mar 2026 21:42:42 +0000
Manifest next update:     Tue 31 Mar 2026 21:42:42 +0000
Files and hashes:         1: GuuZUbWE4eIbv8UszokJQRPG_Kc.crl (hash: iD4JwQcp3ecNc33b8/zurtCOgoOV9SeU1X6t0vtxkwc=)
                          2: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (hash: ru7koRfv5BK76e7LZX8DgS3H7EAsvoHWWsynZ+iius0=)
                          3: 753CE1E6814411F0AF823466C4F9AE02.roa (hash: yzIzUBPrHypmilwZ97hmXQLxuQTPjTDzfB9emwk1+Is=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1816 (0x718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
        Validity
            Not Before: Mar 24 21:42:42 2026 GMT
            Not After : Mar 31 21:42:42 2026 GMT
        Subject: CN=69c30552-fe4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:67:4e:2e:73:08:32:a5:5e:74:bf:4c:8c:
                    a2:f5:15:11:35:be:c1:3c:9a:b6:eb:48:5b:ce:9e:
                    84:bf:07:32:54:62:a8:93:fa:8f:22:85:25:ef:42:
                    de:bd:49:17:a9:df:2a:e4:1c:2e:5a:9f:50:b4:b9:
                    2b:be:b7:ce:ac:5f:ca:46:00:2d:ad:85:53:e4:d4:
                    a5:c2:e0:a7:c8:a3:2c:26:1c:12:13:4b:ca:0f:42:
                    7d:08:0d:b3:a8:1f:70:e6:d1:ae:61:5b:89:db:23:
                    15:b7:df:62:a7:7b:7b:1f:85:d2:f8:1d:c8:2a:70:
                    ae:7b:5f:1f:8b:a5:f1:dc:31:e1:77:72:bb:c9:f6:
                    1d:68:38:e4:96:40:f6:48:ff:64:1e:f1:3a:8e:18:
                    61:ae:46:dc:3f:e7:95:5e:f7:5b:fa:c6:f0:4f:5e:
                    7a:ef:4f:0a:14:f4:20:23:56:2c:3e:06:63:b7:4c:
                    05:41:d7:78:73:b4:df:e5:3a:b8:8d:fb:03:72:9d:
                    bb:ae:4e:4a:c1:fa:9c:b7:a5:02:b5:1e:01:59:b6:
                    6d:a7:9c:7d:8d:6e:d0:45:bd:af:b9:db:2c:e1:3e:
                    15:b3:c8:41:ee:46:f4:39:0f:c3:58:01:8a:20:57:
                    a0:74:6c:8b:34:03:02:e0:ac:8b:28:b2:ae:51:68:
                    73:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C5:8D:D8:70:4F:4E:5B:A2:DD:E1:28:43:4C:C9:15:09:D0:9A:BE
            X509v3 Authority Key Identifier:
                keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:df:18:81:ae:3e:63:e9:fd:d3:9e:a9:38:28:55:65:93:4b:
         5b:4b:bc:ad:db:1a:c0:83:38:f3:10:aa:eb:85:21:8e:ee:a0:
         7a:9d:80:66:43:c4:a8:40:87:68:79:22:c5:8f:6c:6c:39:2f:
         f6:0e:93:a3:72:88:ac:a8:e7:15:b5:07:94:7c:48:ec:8c:45:
         6e:bd:e5:5b:bb:92:79:6d:f6:f4:65:95:b0:de:3d:55:c2:4a:
         15:23:ac:b3:42:0f:0e:05:8a:72:5e:45:be:07:f7:ab:6a:61:
         6e:0a:8e:34:4b:71:cc:f3:3f:82:a1:15:96:bd:fd:63:af:35:
         d4:0d:0a:a6:7b:d1:68:08:1f:09:87:15:02:96:e0:eb:42:80:
         66:cb:2a:1c:fe:e6:6c:39:8e:22:a2:70:5e:c8:8a:22:fd:9c:
         35:7e:9a:47:ed:0e:61:68:f9:25:27:b7:11:3a:0d:47:9e:65:
         ce:c5:cf:1f:0f:39:a6:d7:f2:60:ce:b7:5f:7c:4a:f6:d8:32:
         44:a5:40:a2:64:b9:e5:68:94:19:44:bb:c2:92:1c:b1:65:10:
         38:46:fa:41:bc:94:11:80:07:c4:6e:58:76:c2:51:e0:08:51:
         88:c4:17:9f:54:d3:d5:3a:c6:7b:dd:38:8d:0d:94:b3:bb:1f:
         78:3c:ca:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:51 2026 by rpki-client