Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.mft
File:                     RGuswfLoFnPqtvFskIC154B2lkc.mft (raw, json)
Hash identifier:          +iEcEp3n/UT287dNt5PU0uH3cItR0lmZ/VKmzAMMuns=
Subject key identifier:   FA:40:29:25:A7:C6:76:39:F0:2C:31:3C:EF:02:CB:E9:4A:92:9B:05
Authority key identifier: 44:6B:AC:C1:F2:E8:16:73:EA:B6:F1:6C:90:80:B5:E7:80:76:96:47
Certificate issuer:       /CN=A91EF175/serialNumber=446BACC1F2E81673EAB6F16C9080B5E780769647
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGuswfLoFnPqtvFskIC154B2lkc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.mft
Manifest number:          01B7
Signing time:             Sun 01 Mar 2026 05:57:11 +0000
Manifest this update:     Sun 01 Mar 2026 05:57:11 +0000
Manifest next update:     Sun 08 Mar 2026 05:57:11 +0000
Files and hashes:         1: RGuswfLoFnPqtvFskIC154B2lkc.crl (hash: +Y5pXORvaDK7B7ct5GDmDvC8xmH2OC6baBLoQjyj8ik=)
                          2: 9F2B6B24974E11F0AA132215C4F9AE02.roa (hash: AiAMrw2pdLG30U/7RXN/uchB0LPco2mYVZa/A2/l49E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.crl
                          rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGuswfLoFnPqtvFskIC154B2lkc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF175, serialNumber=446BACC1F2E81673EAB6F16C9080B5E780769647
        Validity
            Not Before: Mar  1 05:57:11 2026 GMT
            Not After : Mar  8 05:57:11 2026 GMT
        Subject: CN=69a3d537-a7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f4:1d:f8:1f:8e:6f:5e:da:16:7d:4a:ff:0b:
                    06:7b:7e:83:0b:65:17:05:4a:96:56:0e:07:d0:e9:
                    31:63:bc:87:88:8d:10:e6:14:01:c4:96:02:88:52:
                    4c:d7:d8:20:9e:b1:fa:c3:d2:41:10:f1:35:43:2c:
                    d3:7f:42:f3:3e:67:ce:a6:c0:e5:46:8c:5b:85:de:
                    68:f0:1f:20:86:64:c0:f4:0e:e7:0d:fa:f4:25:0b:
                    6a:e9:48:03:17:80:fd:90:76:2c:1f:34:23:62:64:
                    8d:65:2e:3f:ba:29:a2:dc:16:06:2f:9f:96:ee:39:
                    2f:bb:76:93:34:87:93:f3:40:41:8c:31:7a:fc:2e:
                    cf:91:7a:d6:9d:c9:75:54:50:87:08:cc:6f:63:fb:
                    70:d8:81:e5:48:71:aa:88:c0:74:c3:79:de:64:24:
                    44:8d:7f:1e:93:b2:5b:91:71:77:d5:00:2e:4a:84:
                    ea:59:94:07:17:3e:4d:e9:5d:c3:77:c3:8c:43:86:
                    27:95:52:35:e3:c8:3e:6e:15:f0:70:cd:e0:06:98:
                    af:fc:0e:52:fb:c0:5f:0c:a7:01:5f:51:2c:2e:c0:
                    57:3f:30:36:f1:b7:83:5e:b2:1d:49:1a:03:73:74:
                    a0:66:cd:f0:33:48:11:61:bd:a1:12:2c:03:0e:c8:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:40:29:25:A7:C6:76:39:F0:2C:31:3C:EF:02:CB:E9:4A:92:9B:05
            X509v3 Authority Key Identifier:
                keyid:44:6B:AC:C1:F2:E8:16:73:EA:B6:F1:6C:90:80:B5:E7:80:76:96:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGuswfLoFnPqtvFskIC154B2lkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:b1:9d:9f:18:bc:ac:d6:b2:61:18:29:05:55:70:ea:c5:2b:
         d2:91:ae:84:dd:4f:bd:6f:ca:e1:8f:73:e6:f0:b6:58:1c:fd:
         8d:d1:2e:c2:b0:96:08:95:8c:eb:75:1e:4e:07:2f:60:2d:8d:
         24:ba:dd:ba:13:e6:d6:69:eb:40:3a:f8:23:82:46:c9:0a:1b:
         ef:de:bd:57:01:5b:10:44:c6:63:e7:f2:80:ca:e3:24:3e:fe:
         45:75:f0:76:82:75:3f:bd:da:7d:6d:23:63:e3:bc:dc:c9:f6:
         a2:46:81:da:e7:0d:22:07:6e:d5:9a:36:26:68:5d:ca:21:47:
         09:bd:56:4e:7f:ac:45:73:a2:d7:54:fc:4e:d0:07:f1:31:63:
         66:49:7e:db:c8:12:12:09:cf:2c:6d:a0:4c:0e:23:97:76:96:
         1d:98:20:7b:96:58:db:3a:1a:b6:af:d0:a8:9e:36:c1:f2:22:
         85:26:7a:af:17:99:c0:07:e9:8f:d7:60:0a:64:0f:fd:9c:e6:
         2d:64:68:8d:90:c4:8b:59:8f:ce:24:0a:0d:41:b0:30:00:9d:
         ff:3f:e2:5d:d1:b6:bf:f3:cd:fb:3e:c8:cf:30:c8:b7:d6:63:
         c1:e2:b0:90:2d:8f:d2:56:c4:7e:ad:ea:bf:99:47:db:83:3f:
         4c:10:7f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:42 2026 by rpki-client