Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
File:                     guQjhs0B-IaA3TAN-_-ittLn5OY.mft (raw, json)
Hash identifier:          7SCdXGfIFTAUlIzhA3DbNxGZ+Sa77Vx3s3C8wTjre5Q=
Subject key identifier:   7C:B5:90:9F:0F:5B:68:ED:79:C6:2D:76:96:65:29:07:25:4F:90:D0
Authority key identifier: 82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6
Certificate issuer:       /CN=A919D530/serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
Certificate serial:       01AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
Manifest number:          01A9
Signing time:             Sun 11 Oct 2026 04:43:33 +0000
Manifest this update:     Sun 11 Oct 2026 04:43:32 +0000
Manifest next update:     Sun 18 Oct 2026 04:43:32 +0000
Files and hashes:         1: guQjhs0B-IaA3TAN-_-ittLn5OY.crl (hash: S0gyE26H34fFtGxLlMNtY7ciMF9dUjFZ3P2+o2pNUJw=)
                          2: A48F17F6406411EF96445E28C4F9AE02.roa (hash: CdkT5dlRZ/vvpFzjTXgJOX0HQjCKf6pR+uaWpjhgh5k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl
                          rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 04:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D530, serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
        Validity
            Not Before: Oct 11 04:43:32 2026 GMT
            Not After : Oct 18 04:43:32 2026 GMT
        Subject: CN=6acb13f5-36b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5c:9f:97:49:15:51:19:2d:69:bf:e5:93:6e:
                    85:f6:a9:e9:cd:96:b8:cb:f8:03:57:23:75:f5:24:
                    ba:0d:e2:0f:01:32:d5:7c:b3:00:60:de:41:dd:68:
                    36:e5:df:42:3d:2d:0b:ed:35:aa:42:ec:d3:e1:22:
                    38:2a:f5:e6:37:f5:08:51:2c:5a:c3:30:03:6a:ae:
                    8f:44:80:6b:bd:bf:d7:2b:a9:8a:67:f2:d6:e8:66:
                    fa:e9:25:7b:75:36:5a:f7:18:44:1e:bd:8c:42:08:
                    2f:ad:2c:ea:0c:04:cb:ad:d4:5d:0f:01:7f:6b:f7:
                    85:f8:10:9b:f0:6d:af:ea:70:66:55:bc:57:26:93:
                    e7:5a:55:97:83:e0:87:3e:93:8e:82:27:c8:9f:d4:
                    a2:65:35:a6:0f:46:86:ab:a5:c6:c8:42:1b:f0:6b:
                    86:21:70:37:65:a3:63:97:9f:7e:a4:99:04:21:c7:
                    11:50:26:42:00:9f:e3:8b:64:54:fc:60:cb:de:95:
                    12:13:4b:1d:17:a4:2f:d9:93:e1:99:74:e8:bd:43:
                    45:eb:10:5a:cc:a3:a2:03:58:5b:78:84:d0:85:12:
                    41:50:28:3e:1e:a0:37:4e:ae:38:6c:1e:8d:60:64:
                    49:eb:d9:24:0d:b3:d7:8c:81:1d:ca:c4:d7:69:e5:
                    fd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B5:90:9F:0F:5B:68:ED:79:C6:2D:76:96:65:29:07:25:4F:90:D0
            X509v3 Authority Key Identifier:
                keyid:82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:12:0d:17:ff:ab:52:44:10:71:d2:f1:38:cc:6f:e3:bd:9d:
         5e:bc:db:5e:dc:bd:d9:d6:fb:1f:ea:ed:84:6a:ff:3c:fe:db:
         bd:9a:82:44:be:2c:d6:4a:d3:a2:44:b4:8f:39:22:8d:e0:fb:
         c0:d5:35:ae:ed:5f:1b:ba:8d:7d:f3:39:c9:c5:7b:8e:dc:79:
         4f:0e:ff:9b:ad:b6:f9:25:40:4c:28:c4:44:bd:bd:a7:f2:f1:
         47:03:35:0b:32:85:a9:9d:15:41:89:8a:45:3b:e4:5e:bd:32:
         47:88:77:f3:f1:31:be:40:a4:d9:e5:6e:1f:4c:c6:2b:af:5c:
         55:5c:4a:a9:e4:86:b3:9c:43:d4:bd:47:41:40:91:c8:31:8b:
         9a:09:46:60:49:8c:50:5e:a7:7f:6b:b5:60:ae:78:22:58:49:
         5a:2e:da:c7:3c:4c:7a:2f:66:90:f8:da:be:ac:70:a8:9d:f1:
         74:78:f3:61:b7:04:40:29:7a:d9:5b:84:c7:af:26:fa:ef:55:
         25:a6:e8:2a:26:3f:b5:ea:f3:a5:88:47:d0:b0:f6:d0:45:57:
         8f:83:50:ec:ea:80:b4:03:9b:5b:53:3f:aa:1e:f8:6a:5c:32:
         b7:6f:8a:af:ab:3c:b0:5a:9f:c4:38:07:03:18:b2:3d:b7:7a:
         42:7c:4c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:43:38 2026 by rpki-client