Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
File:                     GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft (raw, json)
Hash identifier:          Mc6knq7oidtLBI250rjPJMX9zl1taqqrak1y/78OZiw=
Subject key identifier:   9D:2B:03:AE:91:7E:A2:1B:B5:5A:F1:89:97:B3:30:0E:A2:5C:C3:FE
Authority key identifier: 19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39
Certificate issuer:       /CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039
Certificate serial:       0F3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
Manifest number:          0F1F
Signing time:             Tue 18 Aug 2026 17:49:18 +0000
Manifest this update:     Tue 18 Aug 2026 17:49:17 +0000
Manifest next update:     Tue 25 Aug 2026 17:49:17 +0000
Files and hashes:         1: GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl (hash: BlpJeq2UdZcjCMe/TxgYtiURvyUo25bm8zz2S2db2E4=)
                          2: 192968FAA43411E9BF46490BC4F9AE02.roa (hash: OMxL7HXsWXsaIdZTH4NA7lYMb4KsSOWlG8xgB8AS9W8=)
                          3: 7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa (hash: kIDAax2G7AcDjGKp9hfgKtHY9JszeMJYItKOmI313N4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl
                          rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3900 (0xf3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F4B0, serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039
        Validity
            Not Before: Aug 18 17:49:17 2026 GMT
            Not After : Aug 25 17:49:17 2026 GMT
        Subject: CN=6a849b1d-9e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:04:07:4f:6e:a2:59:36:fd:ff:8b:0d:d1:
                    ca:f2:4d:97:cc:4c:8d:42:5c:95:49:32:cb:85:54:
                    97:e9:ed:5b:ff:bd:3c:3e:86:fd:58:79:2f:aa:c7:
                    ff:5c:aa:3b:a8:49:7b:15:8f:51:ad:d4:1a:6c:c5:
                    d3:94:f7:79:7f:68:39:08:6c:3e:cc:39:68:18:cc:
                    2c:30:0b:0c:ad:17:ee:03:40:d4:61:f2:dd:49:4f:
                    4b:1f:22:ad:d8:45:e8:c0:16:c4:3e:ac:ba:c1:32:
                    6d:a0:e6:ca:a3:b8:2f:33:66:98:3c:44:aa:09:fa:
                    56:52:80:63:05:21:2b:54:5d:53:1a:0f:ee:7d:39:
                    13:19:c3:8d:27:b5:0a:ac:b1:89:85:d4:01:b2:47:
                    51:b4:4a:00:c6:92:77:5b:91:3c:d4:89:7b:35:90:
                    6a:7a:7a:58:9b:de:5d:a5:50:59:0b:f9:6a:2b:2d:
                    11:5b:24:b8:5e:b5:e1:62:86:e6:c3:67:97:bd:db:
                    0f:43:e2:07:59:82:ce:48:68:d8:03:11:1b:74:ea:
                    6f:b7:86:68:07:69:28:9c:cb:81:06:d0:68:33:54:
                    eb:96:c7:2e:5c:2a:d2:c1:f9:7a:80:f9:0f:6a:60:
                    1a:11:b0:c3:3e:b5:ae:87:3f:a6:6d:2a:d4:5d:12:
                    13:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2B:03:AE:91:7E:A2:1B:B5:5A:F1:89:97:B3:30:0E:A2:5C:C3:FE
            X509v3 Authority Key Identifier:
                keyid:19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ab:9c:e1:aa:ae:96:1e:af:c3:a1:34:1d:de:1b:ba:34:f2:
         a5:d4:42:cd:a5:52:8b:0c:10:66:6b:8b:f9:da:78:0f:ac:43:
         9e:b5:e0:df:b1:93:9c:c7:1a:0a:89:9d:0b:46:7a:53:3e:bb:
         87:17:93:9d:7b:de:56:ef:2a:58:6b:91:4e:62:5d:61:28:e6:
         16:d5:d1:e2:9f:ca:0e:ef:ec:c2:a2:ff:4e:72:02:48:38:35:
         bc:ab:5f:23:06:57:11:20:0d:de:75:19:73:e1:3b:ec:2e:43:
         50:1c:ae:0b:20:54:37:7e:4c:73:4b:ae:a4:20:15:61:84:e1:
         50:39:7f:a7:2a:b9:03:fb:af:15:e7:9d:47:cf:89:30:0c:8a:
         da:43:48:10:72:e7:36:28:b1:de:f0:c5:c6:5c:0f:be:ec:50:
         2f:a5:99:46:88:53:c8:3d:de:49:ba:1a:b1:36:a9:1e:ef:43:
         ea:df:21:e5:2d:74:a2:ef:b6:1e:b0:f4:ce:46:e3:d1:09:06:
         52:72:8a:b2:ad:da:51:f6:57:e4:70:27:98:37:79:ae:da:cd:
         10:83:ac:59:c9:a6:e3:91:d1:82:21:c2:73:32:8c:ed:60:1a:
         cc:51:1e:47:92:52:8c:0e:2e:d5:f7:fd:e1:36:ae:88:05:23:
         c0:18:35:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Y0QjAxMTAvBgNVBAUTKDE5NENGQUVDMDc1NjExRkY4M0M0MjFDREE4Nzk3RUQz
MEVBMkQwMzkwHhcNMjYwODE4MTc0OTE3WhcNMjYwODI1MTc0OTE3WjAYMRYwFAYD
VQQDEw02YTg0OWIxZC05ZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqUIEB09uolk2/f+LDdHK8k2XzEyNQlyVSTLLhVSX6e1b/708Pob9WHkvqsf/
XKo7qEl7FY9RrdQabMXTlPd5f2g5CGw+zDloGMwsMAsMrRfuA0DUYfLdSU9LHyKt
2EXowBbEPqy6wTJtoObKo7gvM2aYPESqCfpWUoBjBSErVF1TGg/ufTkTGcONJ7UK
rLGJhdQBskdRtEoAxpJ3W5E81Il7NZBqenpYm95dpVBZC/lqKy0RWyS4XrXhYobm
w2eXvdsPQ+IHWYLOSGjYAxEbdOpvt4ZoB2konMuBBtBoM1TrlscuXCrSwfl6gPkP
amAaEbDDPrWuhz+mbSrUXRITBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ0rA66R
fqIbtVrxiZezMA6iXMP+MB8GA1UdIwQYMBaAFBlM+uwHVhH/g8Qhzah5ftMOotA5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjRCMC8yRDI3MDY5MkE0
MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0VmLUR4Q0hOcUhsLTB3Nmkw
RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dVejY3QWRXRWYtRHhDSE5xSGwtMHc2aTBEay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjRCMC8yRDI3MDY5MkE0MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0Vm
LUR4Q0hOcUhsLTB3NmkwRGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZauc4aqulh6vw6E0Hd4bujTypdRCzaVSiwwQZmuL+dp4D6xDnrXg37GTnMca
ComdC0Z6Uz67hxeTnXveVu8qWGuRTmJdYSjmFtXR4p/KDu/swqL/TnICSDg1vKtf
IwZXESAN3nUZc+E77C5DUByuCyBUN35Mc0uupCAVYYThUDl/pyq5A/uvFeedR8+J
MAyK2kNIEHLnNiix3vDFxlwPvuxQL6WZRohTyD3eSboasTapHu9D6t8h5S10ou+2
HrD0zkbj0QkGUnKKsq3aUfZX5HAnmDd5rtrNEIOsWcmm45HRgiHCczKM7WAazFEe
R5JSjA4u1ff94TauiAUjwBg1TA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:54 2026 by rpki-client