Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
File:                     GuuZUbWE4eIbv8UszokJQRPG_Kc.mft (raw, json)
Hash identifier:          rn2cN58iwCwcf5cI2BMizQMJc2eNd2DuLAbQG5YW65Q=
Subject key identifier:   44:52:C6:38:70:7F:69:C9:C5:F4:10:1B:73:E3:F8:5B:68:7B:45:06
Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7
Certificate issuer:       /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
Certificate serial:       06BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
Manifest number:          06B7
Signing time:             Sat 18 Oct 2025 23:41:32 +0000
Manifest this update:     Sat 18 Oct 2025 23:41:32 +0000
Manifest next update:     Sat 25 Oct 2025 23:41:32 +0000
Files and hashes:         1: GuuZUbWE4eIbv8UszokJQRPG_Kc.crl (hash: ctuu64BDwNg3/iDapgoEru2s+GOR3uMtvpX5kzi1H+g=)
                          2: 753CE1E6814411F0AF823466C4F9AE02.roa (hash: ntDkjaC865eNsdL1eeREE7s9XqnSTKvFFR31XD30l48=)
                          3: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (hash: LElymbbaXnwfsL0CJFDTRhRa4LQUnyfVYBKWXvLFjH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1726 (0x6be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
        Validity
            Not Before: Oct 18 23:41:32 2025 GMT
            Not After : Oct 25 23:41:32 2025 GMT
        Subject: CN=68f425ac-304e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:60:9d:1c:1e:b2:c9:7c:7d:83:bc:91:4b:
                    1b:27:a9:7c:40:b3:90:ba:d9:3c:cd:cf:d1:20:f7:
                    ed:0f:26:72:82:31:a2:ce:04:5d:ba:d3:c5:b1:94:
                    3e:bb:ce:86:51:5d:42:9f:2e:ef:aa:16:51:79:89:
                    7f:4a:5b:ba:dc:7a:43:b5:6d:b9:82:a6:d2:95:b6:
                    7a:b5:a3:8a:c1:e6:28:7d:8a:1b:a7:a4:50:4e:5a:
                    69:61:5a:9a:98:96:11:c2:04:20:a3:77:c4:53:b7:
                    7f:b9:d0:53:cc:01:5f:e1:6c:37:6e:57:2a:47:a8:
                    99:c5:62:1e:29:67:48:b8:0c:bd:a8:ae:bb:c5:13:
                    e0:94:c0:df:7d:bf:37:63:79:a4:5d:00:7d:82:34:
                    ac:c8:85:cd:04:0e:21:0a:64:ac:63:55:43:60:8f:
                    d1:1d:61:27:ec:1b:63:41:a8:4e:88:e5:fe:c4:da:
                    fa:50:09:8d:04:5a:8f:6d:ca:c6:7f:89:aa:da:1e:
                    ff:fb:16:63:fc:f8:79:cb:b5:55:8b:4d:19:88:e9:
                    a4:64:ba:c9:c0:b7:fa:d4:3a:95:ca:b6:17:28:5b:
                    5b:28:3e:bc:d2:c7:5c:b0:ec:80:7d:48:5e:6a:bd:
                    8d:9d:38:cd:0f:2b:a0:8a:0b:f1:2a:9b:4c:e4:b2:
                    fc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:52:C6:38:70:7F:69:C9:C5:F4:10:1B:73:E3:F8:5B:68:7B:45:06
            X509v3 Authority Key Identifier:
                keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:84:79:52:e1:9b:0c:76:54:b8:1e:0a:41:f7:d9:4a:6c:3d:
         1b:0d:59:80:dc:4b:a1:7c:09:a8:b3:ed:e5:70:91:7e:56:f1:
         96:7d:42:46:8b:f2:c8:3a:f1:0e:94:65:6e:a2:53:2c:fd:40:
         5e:65:a6:e0:b9:53:74:46:2c:bb:27:28:f5:1d:12:b2:c2:a6:
         dd:a6:a9:b7:26:28:d1:65:d9:d7:8d:67:0b:ed:b3:b7:74:3e:
         21:2f:43:ca:ca:9e:06:15:87:3c:88:ca:d1:52:70:c3:c4:19:
         dd:64:cb:06:11:c2:5f:e6:6b:54:0a:21:b1:4d:ab:b0:db:24:
         a0:61:77:40:e2:aa:39:60:d4:7a:8f:38:50:3e:a5:5c:97:94:
         ce:58:cc:8a:6c:08:78:cc:86:8e:8e:e8:bf:77:e1:de:0e:b1:
         d4:5b:f9:ff:90:d6:c1:0f:e7:8d:82:26:0f:5b:2f:82:76:7b:
         1a:e7:39:33:3d:ac:a5:d4:b8:85:e9:2f:63:80:a9:1d:3e:2b:
         1d:55:fa:43:51:d6:61:a2:53:d5:77:81:33:68:c9:54:14:47:
         ba:3f:2f:06:54:fe:c9:29:36:f5:cb:4c:ff:04:d2:8b:a3:86:
         01:2d:a7:51:e6:af:2d:e0:c6:82:2c:3c:ed:12:e0:03:f7:61:
         10:15:4e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:58:31 2025 by rpki-client