Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
File:                     GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft (raw, json)
Hash identifier:          1T5l9XnVbSkTKaO2ldx+/6OqpJSVIvEQDrLN6CrC5vM=
Subject key identifier:   F3:84:04:BC:31:FE:7C:B2:11:37:05:18:FC:6C:D7:E7:83:E4:D4:80
Authority key identifier: 19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39
Certificate issuer:       /CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039
Certificate serial:       0EEF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
Manifest number:          0ED4
Signing time:             Sat 28 Mar 2026 17:36:44 +0000
Manifest this update:     Sat 28 Mar 2026 17:36:43 +0000
Manifest next update:     Sat 04 Apr 2026 17:36:43 +0000
Files and hashes:         1: GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl (hash: eVZ15r3OTgsyH+xUhSmjKKLgJY9G0sTO73TOTe1Xelk=)
                          2: 7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa (hash: BHOVUhWB8Oqrgvkce7N8eoaaW6EsAxKMD/bGEq8z6S8=)
                          3: 192968FAA43411E9BF46490BC4F9AE02.roa (hash: f81oh/TFo3qHVNgAKwfZj9NYv7cN7F1ZMwUFU1LNjCw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl
                          rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 17:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3823 (0xeef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F4B0, serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039
        Validity
            Not Before: Mar 28 17:36:43 2026 GMT
            Not After : Apr  4 17:36:43 2026 GMT
        Subject: CN=69c811ab-aeae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:ea:a7:7f:d6:e3:cb:82:78:48:63:8e:a3:
                    d8:51:ed:86:26:d6:53:79:d8:96:05:8d:c0:1b:12:
                    aa:1b:ee:a2:06:4e:f2:35:bc:6f:87:0b:8a:9d:57:
                    54:d7:64:73:1b:25:e4:38:7b:5e:0f:61:26:5a:54:
                    da:ca:bb:de:03:79:32:e4:ae:72:a1:fb:64:32:25:
                    27:db:60:90:24:af:1a:f8:42:ca:f6:a6:95:ef:b6:
                    94:2d:b1:d5:32:f4:87:4d:a5:f0:a2:c8:bb:e3:7e:
                    3c:98:a7:8b:d2:fd:67:5f:61:a8:7e:0f:6c:d9:7a:
                    cb:9f:50:c0:82:0f:2a:ee:dd:ee:7e:bf:b5:95:f8:
                    dd:9d:1e:eb:2a:e7:35:a9:01:bd:23:8a:b4:f1:8f:
                    d1:07:55:87:53:78:80:6e:a1:34:12:a8:4d:8a:dc:
                    7e:a2:a6:39:9b:f2:22:96:8e:eb:d0:49:1c:61:35:
                    11:78:41:3f:c0:5b:4b:ca:d8:59:02:25:78:f5:cd:
                    ed:5c:3a:30:2e:45:c8:cd:94:64:85:c5:a6:aa:33:
                    45:06:04:9d:a9:80:85:84:43:6f:09:eb:d5:02:f6:
                    80:b1:d4:b0:be:6b:99:d0:11:ec:c7:cf:9b:6d:32:
                    27:3b:46:ae:0e:5c:76:c8:02:b4:bb:dd:16:50:00:
                    6d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:84:04:BC:31:FE:7C:B2:11:37:05:18:FC:6C:D7:E7:83:E4:D4:80
            X509v3 Authority Key Identifier:
                keyid:19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4f:08:c8:74:c6:ab:4d:8c:02:72:5e:f5:fb:15:bb:f7:3c:
         ba:c5:32:07:99:cb:2f:77:b8:08:1b:32:f2:4e:7f:0a:0a:d1:
         b5:20:8b:8e:56:06:0d:39:65:e4:60:fd:bd:7c:67:67:43:f1:
         e2:15:05:b6:88:d2:1c:db:76:29:9a:b3:ac:92:0d:58:6b:aa:
         d6:be:15:e7:15:a5:b3:9e:68:e6:c9:6e:97:15:97:4a:53:4a:
         90:c9:a2:ca:73:4a:6a:38:14:17:fa:97:bd:84:f9:5f:81:af:
         f8:0b:a6:6c:28:a3:57:d3:39:7c:3f:c8:31:97:d3:88:70:79:
         25:81:a6:0b:d2:e6:c8:ed:fc:c2:c5:36:e1:b1:f3:5a:95:70:
         46:02:f3:ff:47:a5:ae:67:cd:1d:01:00:d6:da:94:fc:06:e0:
         80:43:28:f5:be:da:35:e9:5d:00:df:b9:78:04:61:0a:6c:ff:
         9d:23:06:de:b0:eb:69:ce:cb:5e:04:c4:6b:e6:b0:82:82:ee:
         fe:3d:f0:22:52:5c:c0:e7:d9:25:01:a3:e1:46:75:91:b1:e3:
         77:91:73:58:a1:a0:90:5e:3b:a9:76:ad:9d:6f:35:42:3f:32:
         a5:f1:7f:bc:0a:07:d0:8b:3a:83:bf:72:78:e9:f3:45:51:7a:
         3b:54:ff:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 01:51:33 2026 by rpki-client