Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
File:                     guQjhs0B-IaA3TAN-_-ittLn5OY.mft (raw, json)
Hash identifier:          ZBeNLim2cju/enIaIK/nACN6jNvbkv5sDJzuZbOy9eQ=
Subject key identifier:   BA:C5:6A:CC:D8:E4:41:8E:ED:D3:4C:23:31:4B:D4:5D:A9:AF:05:ED
Authority key identifier: 82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6
Certificate issuer:       /CN=A919D530/serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
Manifest number:          0149
Signing time:             Sun 05 Apr 2026 04:39:36 +0000
Manifest this update:     Sun 05 Apr 2026 04:39:36 +0000
Manifest next update:     Sun 12 Apr 2026 04:39:36 +0000
Files and hashes:         1: guQjhs0B-IaA3TAN-_-ittLn5OY.crl (hash: 1DDrOBaAHuIb5zpOMlzKW2tl2i8iskfCz0q7HOxSLaQ=)
                          2: A48F17F6406411EF96445E28C4F9AE02.roa (hash: D/cAvWNWTmPwXLmScRIEG1LBNudgkixYFznvw6pGA48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl
                          rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D530, serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
        Validity
            Not Before: Apr  5 04:39:36 2026 GMT
            Not After : Apr 12 04:39:36 2026 GMT
        Subject: CN=69d1e788-1e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:f0:4f:f7:eb:7e:f6:41:03:1e:80:cb:06:
                    65:27:87:33:78:6f:af:d4:aa:37:64:63:94:2a:18:
                    79:0f:29:60:2a:2f:3f:b8:20:87:40:66:18:47:8b:
                    a6:74:35:93:1b:9a:49:83:00:b0:86:34:24:52:14:
                    d7:89:d3:ac:8b:94:72:30:53:6e:5d:86:91:29:2e:
                    53:57:ff:06:c0:67:f6:e1:5a:49:3a:2a:c8:b1:a3:
                    bd:72:54:12:7a:da:ee:90:57:98:9a:d9:70:da:db:
                    86:7c:07:bb:b5:11:71:19:32:23:01:f2:a8:d7:69:
                    50:85:9c:f3:c2:64:11:ba:fc:b7:d4:8d:3e:54:c9:
                    b1:91:2c:9a:97:62:9e:3b:2f:d2:57:e3:c2:ca:66:
                    89:59:1b:05:d7:51:f0:69:f4:56:e8:ac:fa:26:d3:
                    f2:7d:38:18:eb:96:11:e6:15:47:59:68:1a:6e:ec:
                    ce:87:e1:58:67:0e:55:3d:a6:0f:b3:69:24:c5:1f:
                    1b:7a:b4:c1:88:bd:2c:cf:01:be:c4:c6:62:a1:a5:
                    ae:80:82:58:d4:4a:0a:92:2d:98:a9:73:a3:b5:5b:
                    ea:9b:4f:13:b5:c6:7f:a3:4e:a8:14:a0:31:c9:81:
                    a2:32:d7:28:31:bd:4e:fc:9a:9a:67:5c:31:14:b2:
                    4c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C5:6A:CC:D8:E4:41:8E:ED:D3:4C:23:31:4B:D4:5D:A9:AF:05:ED
            X509v3 Authority Key Identifier:
                keyid:82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:73:2b:ed:90:14:59:02:51:e9:84:3c:fe:12:1f:22:41:77:
         94:08:fb:89:ab:e9:45:38:6d:54:f3:56:60:56:61:9a:b6:33:
         2c:67:db:e2:1f:72:dd:36:3c:0c:1b:d6:86:2c:a4:c1:f5:97:
         50:79:de:d5:0a:ee:80:d9:9b:45:7a:5c:0b:ac:09:1e:53:99:
         0a:eb:83:08:08:a6:89:9c:d2:49:47:0a:4d:ef:19:20:56:35:
         a8:a5:a2:15:00:e9:70:39:b5:67:78:68:68:f3:1f:fa:99:19:
         4a:81:8a:a4:52:42:5e:85:6f:b1:67:84:72:92:18:08:eb:f2:
         f2:8c:07:fc:73:a7:ad:69:a5:cd:59:fd:45:66:47:41:8d:4c:
         65:14:d9:1b:01:7e:51:64:25:95:3b:b3:c5:ad:a1:4f:5f:db:
         a4:cf:01:7a:75:ca:81:a0:f5:c4:59:f7:3c:b7:3c:08:c9:b8:
         67:36:9f:28:07:39:24:f9:8e:eb:be:1d:b1:e2:a3:41:24:a7:
         a3:4f:cd:3f:d5:38:15:e4:37:6e:b4:b6:fd:af:f7:f8:be:b6:
         f6:0a:7e:c4:e9:02:91:ad:3e:5e:87:8d:85:4c:10:73:4c:98:
         38:47:f8:36:77:2a:11:46:6e:be:a2:cd:47:dd:0a:e1:c7:b3:
         d1:f3:b2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:54 2026 by rpki-client