Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
File:                     guQjhs0B-IaA3TAN-_-ittLn5OY.mft (raw, json)
Hash identifier:          xfL6SNZGAugKEeih+pmG4kohR3PSgBMBVyDjvzW53fw=
Subject key identifier:   5A:BC:87:AA:31:6C:FA:13:D9:DE:71:45:1F:8E:34:C4:7B:69:B9:46
Authority key identifier: 82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6
Certificate issuer:       /CN=A919D530/serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
Certificate serial:       0137
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
Manifest number:          0134
Signing time:             Sun 01 Mar 2026 06:29:04 +0000
Manifest this update:     Sun 01 Mar 2026 06:29:04 +0000
Manifest next update:     Sun 08 Mar 2026 06:29:04 +0000
Files and hashes:         1: guQjhs0B-IaA3TAN-_-ittLn5OY.crl (hash: ZOYd2+kXaDfJOI1o7BKXA7w0vL9YsxBULUwIH/uZI6A=)
                          2: A48F17F6406411EF96445E28C4F9AE02.roa (hash: dU6ZhGBTE9jsEZ9VkhD8M1OiGZ+Y8waNKYfclqDZAjs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl
                          rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D530, serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
        Validity
            Not Before: Mar  1 06:29:04 2026 GMT
            Not After : Mar  8 06:29:04 2026 GMT
        Subject: CN=69a3dcb0-8cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:91:68:6a:3e:ac:f4:79:5f:81:95:21:0e:
                    53:57:02:9d:10:2f:d9:b4:d3:a4:e7:4a:cf:5d:7e:
                    e5:82:cd:79:bc:fb:25:33:f4:9c:e4:19:fc:5f:49:
                    9a:08:b0:b1:80:40:82:9d:5e:a6:10:e2:7e:a0:82:
                    53:80:54:aa:0b:47:c3:33:e3:3d:c6:bd:dd:d2:ca:
                    90:39:0b:99:8b:d4:f8:08:69:07:24:74:3a:c0:3b:
                    9b:8b:44:0a:23:40:76:2f:a2:48:3c:07:07:c5:48:
                    63:f5:04:8a:47:42:6c:e1:d8:5e:5c:33:2e:79:89:
                    d8:7f:39:47:2a:28:0d:9f:67:d0:4d:72:76:b0:cf:
                    1d:b9:84:fe:d3:bf:32:02:b0:44:19:1b:98:10:8a:
                    1f:de:37:6d:f5:0f:0c:01:d8:01:90:5a:6f:c8:a8:
                    70:da:ce:f0:ce:98:f6:59:f0:4a:c8:98:2c:77:1e:
                    42:20:6b:e0:f3:b0:35:43:e2:55:0d:dc:aa:bb:86:
                    09:b3:55:67:4f:aa:0e:ce:a5:8c:e0:c0:1a:6b:b6:
                    e0:54:1a:c4:99:c6:11:89:5b:ed:9f:0b:85:a2:b7:
                    4e:e5:79:90:c4:c5:1b:fb:14:38:97:3e:9b:3a:da:
                    85:a9:ff:db:5d:7d:54:a9:70:95:0e:fc:2c:e8:c4:
                    bd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BC:87:AA:31:6C:FA:13:D9:DE:71:45:1F:8E:34:C4:7B:69:B9:46
            X509v3 Authority Key Identifier:
                keyid:82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:60:9e:3a:89:1c:77:4c:3f:ee:56:a4:e2:9b:31:f3:be:ae:
         bf:7c:2c:bb:10:23:dc:0e:93:51:5a:61:ff:5d:b3:b7:45:4b:
         d7:1f:a1:7e:6b:34:a2:4d:90:b5:60:f9:04:d1:fc:26:b6:c3:
         07:7e:b3:17:bf:b5:61:7c:d8:15:8b:7c:d8:9b:bf:63:d5:d0:
         68:9f:fe:a9:b9:b9:36:65:18:50:e9:15:e8:fc:d6:8f:30:8d:
         5f:5d:a3:a3:1b:ef:7a:13:20:3b:fd:70:30:0e:ef:3d:98:67:
         30:e6:db:3c:87:98:15:aa:c2:1a:3b:3f:72:25:df:89:58:16:
         d2:e9:2d:16:f6:d0:9c:90:77:51:c3:13:6c:8e:f4:74:81:b3:
         7f:ba:52:4e:0e:e7:18:48:8e:06:3a:f1:4f:e6:f5:c1:1d:ca:
         c7:b4:cd:ec:bc:6c:d3:98:4e:e5:f9:0a:66:cc:20:d0:ba:c6:
         52:75:25:42:2a:3b:2a:4b:50:33:79:1a:71:02:6d:3f:56:76:
         36:46:7b:c8:41:e0:f3:32:cf:1b:65:1e:4f:c0:64:ec:4e:21:
         be:a6:23:2b:74:0c:41:10:87:b2:15:69:00:7e:57:c2:cc:4f:
         e2:9f:ec:df:b0:41:d5:f2:2e:a4:53:d9:51:a9:9d:f8:4d:a3:
         35:29:6b:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ1MzAxMTAvBgNVBAUTKDgyRTQyMzg2Q0QwMUY4ODY4MEREMzAwREZCRkZBMkI2
RDJFN0U0RTYwHhcNMjYwMzAxMDYyOTA0WhcNMjYwMzA4MDYyOTA0WjAYMRYwFAYD
VQQDEw02OWEzZGNiMC04Y2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsrWRaGo+rPR5X4GVIQ5TVwKdEC/ZtNOk50rPXX7lgs15vPslM/Sc5Bn8X0ma
CLCxgECCnV6mEOJ+oIJTgFSqC0fDM+M9xr3d0sqQOQuZi9T4CGkHJHQ6wDubi0QK
I0B2L6JIPAcHxUhj9QSKR0Js4dheXDMueYnYfzlHKigNn2fQTXJ2sM8duYT+078y
ArBEGRuYEIof3jdt9Q8MAdgBkFpvyKhw2s7wzpj2WfBKyJgsdx5CIGvg87A1Q+JV
Ddyqu4YJs1VnT6oOzqWM4MAaa7bgVBrEmcYRiVvtnwuFordO5XmQxMUb+xQ4lz6b
OtqFqf/bXX1UqXCVDvws6MS9uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFq8h6ox
bPoT2d5xRR+ONMR7ablGMB8GA1UdIwQYMBaAFILkI4bNAfiGgN0wDfv/orbS5+Tm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzMC81RTU1RjY1NjQw
NjQxMUVGQTNDNUI4MjdDNEY5QUUwMi9ndVFqaHMwQi1JYUEzVEFOLV8taXR0TG41
T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d1UWpoczBCLUlhQTNUQU4tXy1pdHRMbjVPWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDUzMC81RTU1RjY1NjQwNjQxMUVGQTNDNUI4MjdDNEY5QUUwMi9ndVFqaHMwQi1J
YUEzVEFOLV8taXR0TG41T1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAGCeOokcd0w/7lak4psx876uv3wsuxAj3A6TUVph/12zt0VL1x+hfms0ok2Q
tWD5BNH8JrbDB36zF7+1YXzYFYt82Ju/Y9XQaJ/+qbm5NmUYUOkV6PzWjzCNX12j
oxvvehMgO/1wMA7vPZhnMObbPIeYFarCGjs/ciXfiVgW0uktFvbQnJB3UcMTbI70
dIGzf7pSTg7nGEiOBjrxT+b1wR3Kx7TN7Lxs05hO5fkKZswg0LrGUnUlQio7KktQ
M3kacQJtP1Z2NkZ7yEHg8zLPG2UeT8Bk7E4hvqYjK3QMQRCHshVpAH5XwsxP4p/s
37BB1fIupFPZUamd+E2jNSlrvg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:01 2026 by rpki-client