Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
File:                     GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft (raw, json)
Hash identifier:          sIDnJfXIyOz0iTRcRFB4dWNsupR1NpujtS3Rr4MGSwM=
Subject key identifier:   82:D2:D6:B5:1A:38:A4:59:A5:AB:8D:E7:2E:3C:82:67:77:01:79:17
Authority key identifier: 19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39
Certificate issuer:       /CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039
Certificate serial:       0F52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
Manifest number:          0F35
Signing time:             Wed 30 Sep 2026 17:47:09 +0000
Manifest this update:     Wed 30 Sep 2026 17:47:08 +0000
Manifest next update:     Wed 07 Oct 2026 17:47:08 +0000
Files and hashes:         1: GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl (hash: as5qgA8d11+3qcw1BmEvXsSSFvoMxcnlGene5vcaD2s=)
                          2: 192968FAA43411E9BF46490BC4F9AE02.roa (hash: OMxL7HXsWXsaIdZTH4NA7lYMb4KsSOWlG8xgB8AS9W8=)
                          3: 7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa (hash: kIDAax2G7AcDjGKp9hfgKtHY9JszeMJYItKOmI313N4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl
                          rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 17:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3922 (0xf52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F4B0, serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039
        Validity
            Not Before: Sep 30 17:47:08 2026 GMT
            Not After : Oct  7 17:47:08 2026 GMT
        Subject: CN=6abd4b1d-8e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:39:8f:b8:85:14:01:1f:94:6e:f0:b9:ce:
                    c2:a4:46:44:6c:29:cc:b8:bf:46:0b:1c:5d:bf:fc:
                    d1:29:91:47:9a:f4:ab:24:fe:00:27:ef:c3:91:15:
                    0f:2f:de:ae:14:dc:5b:49:5d:ed:c8:0a:27:1d:e5:
                    f4:ca:a2:53:1b:4a:5c:18:1b:e2:cb:b1:7c:9b:a7:
                    67:d6:14:61:af:99:2a:fb:fe:57:66:44:ec:f1:95:
                    bb:5a:1f:26:9d:5c:82:74:e9:a1:3f:cd:8c:f9:d3:
                    37:7a:d8:c1:00:ac:1d:fe:03:c8:44:85:3f:60:0f:
                    d8:2b:05:9c:f2:6a:73:51:f3:0a:48:a3:ad:0a:93:
                    ac:f3:e3:ce:86:a8:47:ed:d8:81:f5:f3:bf:f1:50:
                    d5:84:5b:c6:19:2d:e8:85:bf:d3:6c:a7:3e:3a:a8:
                    b3:78:e6:f5:9f:0a:34:dd:71:af:20:d8:99:d8:ac:
                    b9:37:6d:10:1e:2e:18:bd:4b:86:09:2d:57:b4:81:
                    c7:55:56:fe:f1:43:1e:b5:21:73:5d:cf:1d:41:ad:
                    25:f7:b9:8b:02:d7:00:fd:77:39:c8:05:b0:d3:87:
                    7f:bc:50:78:b9:63:8a:98:b7:df:b1:fe:2e:40:9a:
                    e8:18:59:be:78:c7:dd:e9:d8:52:40:67:f1:95:dd:
                    2f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D2:D6:B5:1A:38:A4:59:A5:AB:8D:E7:2E:3C:82:67:77:01:79:17
            X509v3 Authority Key Identifier:
                keyid:19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:19:71:64:40:7e:83:ce:73:bd:22:53:2c:c9:2b:97:d9:3a:
         8d:b9:c3:00:88:aa:77:c9:a8:f2:13:e4:7f:52:3e:ce:60:aa:
         60:79:9f:2c:69:95:df:84:97:fb:a6:25:b9:12:e7:10:6b:10:
         5e:47:c2:29:e4:cc:f6:4d:e4:71:06:f5:81:65:ae:77:b5:5e:
         c5:ec:f3:a9:db:99:30:c6:41:e3:6a:2f:dc:ff:2e:22:31:84:
         6b:e6:65:80:0c:09:9b:59:4e:67:f0:8a:d1:00:30:cf:c8:b5:
         30:03:19:2a:e6:a5:12:34:76:d9:fa:87:27:62:8b:23:9f:e0:
         8c:11:89:ef:2c:4d:bb:6b:08:11:42:6d:66:c2:af:12:45:9a:
         bb:51:4d:43:3d:fa:ea:2a:50:85:c1:16:60:25:e1:a9:98:1e:
         8b:6f:1e:fe:1e:ef:6e:37:f9:57:9a:8a:0b:20:fa:9f:81:82:
         cc:6d:b9:8f:c5:57:aa:4b:9a:24:ed:5d:b7:10:e0:0e:35:f6:
         2a:ca:62:96:a3:df:2f:3b:e2:a1:44:55:ec:62:fb:e4:f3:c7:
         8a:76:61:57:15:0f:37:bd:3d:92:1e:d2:12:2c:1d:99:66:b7:
         70:5a:e2:4b:a5:a2:c4:7b:1c:0e:a7:89:c6:f7:8d:ae:f6:9b:
         57:3d:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:51:13 2026 by rpki-client