Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
File:                     GuuZUbWE4eIbv8UszokJQRPG_Kc.mft (raw, json)
Hash identifier:          Owh7M3mJTb5bE05b4C063uxo+T8Lt6OL/7Ps+024UFE=
Subject key identifier:   FD:EB:37:6A:D0:BA:C6:AC:8F:0F:4D:FD:CE:1E:8D:CD:63:40:E5:1E
Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7
Certificate issuer:       /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
Certificate serial:       0724
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
Manifest number:          0717
Signing time:             Thu 16 Apr 2026 21:52:21 +0000
Manifest this update:     Thu 16 Apr 2026 21:52:20 +0000
Manifest next update:     Thu 23 Apr 2026 21:52:20 +0000
Files and hashes:         1: GuuZUbWE4eIbv8UszokJQRPG_Kc.crl (hash: hDjY8sbwl/kPWy8U/2x8lPq1aCH1I1tYuKs5Ss9bINA=)
                          2: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (hash: ru7koRfv5BK76e7LZX8DgS3H7EAsvoHWWsynZ+iius0=)
                          3: 753CE1E6814411F0AF823466C4F9AE02.roa (hash: yzIzUBPrHypmilwZ97hmXQLxuQTPjTDzfB9emwk1+Is=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1828 (0x724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
        Validity
            Not Before: Apr 16 21:52:20 2026 GMT
            Not After : Apr 23 21:52:20 2026 GMT
        Subject: CN=69e15a14-27b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:42:b8:c9:3d:63:b9:37:2b:ba:d8:51:af:
                    92:d7:dd:06:17:70:2b:9f:38:1f:4c:ee:cb:26:64:
                    90:72:3c:2b:5d:4d:08:49:b8:c0:06:a5:c0:95:2c:
                    0e:5d:e3:c3:14:18:f3:59:33:a5:17:8b:ed:52:39:
                    5a:da:52:00:fe:93:e5:61:35:50:d7:e6:58:a0:ba:
                    d9:86:ca:77:57:80:41:4a:dd:79:9f:92:7b:e2:55:
                    98:90:f6:9a:3f:ec:59:01:fc:b9:73:0a:30:ee:73:
                    15:bc:ae:c8:54:af:8e:70:89:d3:94:55:fa:45:2f:
                    42:62:17:24:59:a7:1c:6d:a8:2f:6d:6f:66:17:58:
                    f7:34:c2:f6:35:53:6b:6d:0a:c4:8e:1b:17:d8:65:
                    bc:c2:6a:19:e7:59:eb:de:59:f4:22:e1:36:e1:65:
                    1c:41:6d:09:60:90:0d:2e:67:71:b1:01:66:cd:70:
                    7f:8c:f2:e9:a8:19:73:75:89:77:09:4a:a8:19:35:
                    bc:a6:5a:f1:5f:35:6e:88:e1:a9:32:73:9f:cd:b4:
                    c4:c6:75:d9:2e:cc:7c:35:b9:d8:e5:3d:9c:3e:17:
                    68:68:b6:09:f2:13:71:c0:5f:55:ab:5e:81:a2:8a:
                    23:8d:24:69:73:79:dd:26:60:4a:02:56:9d:80:dd:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EB:37:6A:D0:BA:C6:AC:8F:0F:4D:FD:CE:1E:8D:CD:63:40:E5:1E
            X509v3 Authority Key Identifier:
                keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:bb:53:88:b2:39:35:e5:d6:03:7d:a8:ae:30:8a:c1:ae:ea:
         3b:7b:b9:b1:a4:51:a0:9b:af:2d:d9:ea:83:fb:38:49:93:14:
         42:76:d7:98:97:18:4c:e7:2b:cb:21:49:9a:cc:82:2e:e7:bc:
         91:ec:97:17:b8:74:99:05:bc:b6:e8:11:bf:8f:e8:56:42:cf:
         51:d6:bb:eb:fc:20:72:e2:29:6c:4b:af:69:37:22:dc:bb:6b:
         44:1e:58:b6:25:d0:d1:95:2a:a9:58:22:67:7c:90:f9:7b:49:
         20:7c:ab:0f:53:0d:69:dc:23:4f:96:20:bf:7b:cc:87:19:f8:
         7d:8c:55:4c:b2:53:69:47:98:b2:8d:07:15:3d:c5:b3:1f:8f:
         22:d9:88:15:3e:86:7d:df:bd:58:8f:45:45:24:9e:58:ba:c0:
         28:a8:ea:51:a4:b6:cc:4f:0e:51:61:46:15:14:29:9e:04:57:
         25:7a:19:08:18:69:a6:dc:81:86:76:ad:44:ea:46:4d:8f:ec:
         61:09:26:21:bc:93:8e:c5:c6:70:8d:aa:13:c8:16:88:93:da:
         a4:68:dc:0e:bd:9c:8a:a4:35:fd:73:78:69:9a:39:6c:89:10:
         19:4e:63:d1:0d:95:68:85:73:11:cf:41:38:02:b1:f7:88:5b:
         74:34:ae:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICByQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNEQzUxMTAvBgNVBAUTKDFBRUI5OTUxQjU4NEUxRTIxQkJGQzUyQ0NFODkwOTQx
MTNDNkZDQTcwHhcNMjYwNDE2MjE1MjIwWhcNMjYwNDIzMjE1MjIwWjAYMRYwFAYD
VQQDEw02OWUxNWExNC0yN2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp8JCuMk9Y7k3K7rYUa+S190GF3ArnzgfTO7LJmSQcjwrXU0ISbjABqXAlSwO
XePDFBjzWTOlF4vtUjla2lIA/pPlYTVQ1+ZYoLrZhsp3V4BBSt15n5J74lWYkPaa
P+xZAfy5cwow7nMVvK7IVK+OcInTlFX6RS9CYhckWaccbagvbW9mF1j3NML2NVNr
bQrEjhsX2GW8wmoZ51nr3ln0IuE24WUcQW0JYJANLmdxsQFmzXB/jPLpqBlzdYl3
CUqoGTW8plrxXzVuiOGpMnOfzbTExnXZLsx8NbnY5T2cPhdoaLYJ8hNxwF9Vq16B
ooojjSRpc3ndJmBKAladgN3WtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP3rN2rQ
usasjw9N/c4ejc1jQOUeMB8GA1UdIwQYMBaAFBrrmVG1hOHiG7/FLM6JCUETxvyn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9GM0RGNTg4Qzgw
QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRlSWJ2OFVzem9rSlFSUEdf
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d1dVpVYldFNGVJYnY4VXN6b2tKUVJQR19LYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Q0RDNS9GM0RGNTg4QzgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRl
SWJ2OFVzem9rSlFSUEdfS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV7tTiLI5NeXWA32orjCKwa7qO3u5saRRoJuvLdnqg/s4SZMUQnbXmJcYTOcr
yyFJmsyCLue8keyXF7h0mQW8tugRv4/oVkLPUda76/wgcuIpbEuvaTci3LtrRB5Y
tiXQ0ZUqqVgiZ3yQ+XtJIHyrD1MNadwjT5Ygv3vMhxn4fYxVTLJTaUeYso0HFT3F
sx+PItmIFT6Gfd+9WI9FRSSeWLrAKKjqUaS2zE8OUWFGFRQpngRXJXoZCBhpptyB
hnatROpGTY/sYQkmIbyTjsXGcI2qE8gWiJPapGjcDr2ciqQ1/XN4aZo5bIkQGU5j
0Q2VaIVzEc9BOAKx94hbdDSuWg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:10:27 2026 by rpki-client