Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft
File:                     GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft (raw, json)
Hash identifier:          PZ7sefL1XOYeM1CWrdz8fLgE4l+6A9yd8jQ6j6Jn6Ns=
Subject key identifier:   E7:78:8C:05:E9:2C:E6:41:D1:1C:FB:42:43:12:B4:DE:1A:EA:32:A2
Authority key identifier: 19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E
Certificate issuer:       /CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E
Certificate serial:       0D55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft
Manifest number:          0D37
Signing time:             Fri 12 Jun 2026 18:05:55 +0000
Manifest this update:     Fri 12 Jun 2026 18:05:55 +0000
Manifest next update:     Fri 19 Jun 2026 18:05:55 +0000
Files and hashes:         1: GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl (hash: JBmrQ1KIAIbgmYz3NSm05EjMKnrt7HpiiOUlfN5bopo=)
                          2: A0632940737D11F091340126C4F9AE02.roa (hash: XYU/OfbvTvF81SZSB9Dz1TfcctHinmn1NKkNjqg6sxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl
                          rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3413 (0xd55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C615, serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E
        Validity
            Not Before: Jun 12 18:05:55 2026 GMT
            Not After : Jun 19 18:05:55 2026 GMT
        Subject: CN=6a2c4a83-2512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4b:90:2d:33:70:b0:c5:1a:dc:2e:15:4a:26:
                    ef:8d:86:1f:d2:d6:de:25:43:a2:5c:ed:59:8e:3b:
                    f3:de:15:0a:61:70:5c:b7:81:2e:25:88:ec:e2:8e:
                    bc:cc:6a:c1:4f:8a:74:6a:71:69:00:cf:74:e0:d4:
                    2a:d6:6b:ba:d8:64:2c:78:4f:6f:19:10:6b:e6:6d:
                    87:de:31:c3:4b:d4:83:ed:d3:cd:72:ab:83:87:91:
                    f8:74:89:20:4d:64:69:e0:86:c8:66:31:81:e7:3c:
                    5b:2f:7b:33:52:a8:cf:66:52:a0:98:e4:55:b2:2e:
                    09:ea:c9:61:cb:25:10:f0:69:b2:22:89:84:48:05:
                    bd:96:d9:78:d9:6c:73:9a:9c:77:8b:57:1d:d4:c7:
                    51:28:ce:08:fb:2d:ef:3d:7a:58:4d:ea:fa:0d:c0:
                    70:2c:18:f2:3c:87:0a:fe:a5:6a:be:d3:b7:48:8e:
                    60:60:f6:b6:2b:f9:39:01:a4:e0:f2:c8:10:4e:a6:
                    64:af:3d:86:59:a4:02:40:62:46:ad:db:c5:ed:6b:
                    c5:f7:66:2f:31:ac:1c:9c:76:27:43:f1:bc:a5:0d:
                    ad:7e:4e:4d:18:b8:08:84:ea:09:ab:73:d5:f7:c7:
                    1d:0b:1f:25:c4:b9:1c:87:73:a7:03:aa:b5:c6:0f:
                    93:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:78:8C:05:E9:2C:E6:41:D1:1C:FB:42:43:12:B4:DE:1A:EA:32:A2
            X509v3 Authority Key Identifier:
                keyid:19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b4:fe:b3:c6:19:35:a3:e7:09:4c:24:41:8b:f8:fc:95:88:
         11:4a:a0:22:83:1c:c9:81:7e:8d:91:8a:a9:2c:6c:38:f7:ca:
         ec:56:8c:41:9e:8d:51:a0:01:30:ff:35:bf:19:77:93:92:dc:
         43:ff:58:e4:02:da:0b:00:fe:27:7c:54:88:f9:77:e9:9c:c1:
         dc:a0:f3:8e:c4:4d:a6:ea:53:db:c7:d0:ac:b7:83:15:4b:1d:
         34:ec:0a:b9:11:53:e7:66:2d:74:ef:b9:71:8e:d9:fd:24:da:
         28:08:56:5a:46:18:0e:4b:66:00:df:16:5a:53:70:9e:dc:61:
         0a:73:23:a8:44:2f:d1:16:67:5f:a7:cd:64:b9:60:a4:20:b8:
         19:a3:b1:bb:8a:8b:12:6f:1f:8e:a0:b8:68:ca:15:fd:1f:d6:
         66:6a:e2:f1:cf:f0:0f:0a:1b:34:6d:1f:ac:0c:74:5f:de:06:
         5c:d4:29:45:e6:f4:bb:fb:4e:5f:f7:e6:4d:73:a7:dd:15:ee:
         93:3f:0e:52:77:86:2b:95:11:f4:b4:d4:a6:56:f4:1e:55:8c:
         7f:74:00:fd:71:b3:c3:eb:b2:33:8f:99:83:d5:29:23:b1:12:
         c9:01:fd:03:6e:90:f1:1d:7c:23:17:65:77:a5:df:13:c1:6a:
         85:ff:c9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:19 2026 by rpki-client