Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
File:                     guQjhs0B-IaA3TAN-_-ittLn5OY.mft (raw, json)
Hash identifier:          sMjTKiG5d/qvY7qz4AsEEQPXRSyUcqNsC75yT4UwuU0=
Subject key identifier:   A2:44:7D:97:7F:E7:86:55:10:3C:C0:11:5F:75:A6:35:37:C0:7A:A6
Authority key identifier: 82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6
Certificate issuer:       /CN=A919D530/serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
Manifest number:          014F
Signing time:             Fri 17 Apr 2026 04:51:31 +0000
Manifest this update:     Fri 17 Apr 2026 04:51:31 +0000
Manifest next update:     Fri 24 Apr 2026 04:51:31 +0000
Files and hashes:         1: guQjhs0B-IaA3TAN-_-ittLn5OY.crl (hash: ynYwEhCn48u3qdZS7QqkNR0+g0v/Z4lbxwVMjaBxQE0=)
                          2: A48F17F6406411EF96445E28C4F9AE02.roa (hash: D/cAvWNWTmPwXLmScRIEG1LBNudgkixYFznvw6pGA48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl
                          rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D530, serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
        Validity
            Not Before: Apr 17 04:51:31 2026 GMT
            Not After : Apr 24 04:51:31 2026 GMT
        Subject: CN=69e1bc53-3e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fb:ae:19:27:1f:3b:2b:92:93:31:2b:46:6e:
                    01:ec:b9:46:c0:03:8d:cd:90:c9:bb:87:05:5e:f7:
                    fa:82:75:9d:ca:b3:99:10:bc:4a:cd:01:1a:8c:fc:
                    59:32:fd:fc:e7:0f:a0:73:92:6a:04:bc:93:4d:62:
                    4c:ee:9a:97:ed:30:32:8b:bb:44:cf:91:20:0a:9b:
                    71:df:f9:89:d7:a0:cd:38:d9:fd:21:21:50:6e:ae:
                    f7:dc:75:11:65:2f:41:fa:e8:b4:ee:f2:e8:a4:66:
                    7a:fd:9a:b5:f7:8c:f9:9c:7f:f2:e2:4e:78:6b:75:
                    6e:70:f4:e6:73:5d:ae:ad:53:68:26:eb:fb:60:da:
                    70:0e:dc:84:7c:36:bc:ef:7c:6f:5f:48:70:97:9b:
                    29:14:2c:f1:a4:9d:8a:7d:cf:1c:11:23:fe:64:14:
                    a8:ee:ee:b7:b0:a4:86:20:b0:04:e1:2c:3d:2e:80:
                    e3:e6:69:08:9f:a4:e8:e8:8b:a8:e1:9f:b9:cd:04:
                    a0:5d:c2:90:d3:0c:5c:42:09:da:b6:60:56:c9:7a:
                    d0:b4:f8:e1:90:17:07:12:4c:4a:58:c7:45:10:fd:
                    82:f6:24:92:34:36:f8:67:ac:1e:cb:58:6d:b3:5c:
                    dc:09:46:e6:fa:54:51:90:ce:ea:7b:1d:bc:45:bf:
                    ff:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:44:7D:97:7F:E7:86:55:10:3C:C0:11:5F:75:A6:35:37:C0:7A:A6
            X509v3 Authority Key Identifier:
                keyid:82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a5:98:08:70:14:19:d8:6e:3e:e2:c6:e0:57:19:f8:82:af:
         35:32:30:0b:ea:d2:20:7e:c2:39:94:6f:87:49:c7:18:2b:50:
         df:9c:6b:db:5c:e9:bd:a6:68:f1:7d:28:9f:bc:1b:90:26:ae:
         6e:a6:c0:1b:a1:fd:a7:a7:b5:da:dd:e9:f8:d3:76:7e:0c:20:
         27:71:dd:13:4b:9f:0a:e4:fe:35:98:2c:5f:96:13:d7:5f:58:
         eb:2f:3b:a4:c8:e6:ec:da:9b:12:1a:ff:76:4b:69:f8:1a:96:
         7d:1a:bb:92:68:26:64:08:e2:f8:41:32:98:d2:f5:35:3d:d5:
         c6:2f:4e:ca:51:33:38:20:2e:ab:cf:16:0c:c2:75:d2:80:e5:
         76:3f:12:13:2b:58:a2:eb:56:bc:6f:e2:c8:53:aa:c6:25:e9:
         dc:a0:b1:07:4f:c4:9c:f5:1a:a2:c4:83:3a:e2:ee:c3:43:48:
         5d:98:70:56:68:2d:63:ce:52:1c:34:08:e2:60:db:ec:fb:b7:
         e2:a8:0d:87:5a:fb:4d:f8:86:69:71:bc:7f:56:c3:ed:2a:52:
         c3:62:0b:0e:d8:db:ca:df:7b:d1:a2:eb:10:2c:c9:21:12:59:
         6d:31:a9:5d:c8:e2:d3:34:d6:22:d5:6b:35:d4:d1:3d:96:0f:
         12:57:0f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:06:05 2026 by rpki-client