Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
File:                     GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft (raw, json)
Hash identifier:          td1Hb5sgh46JgmBftww/bQe81yVnfJQ26s9Jyiu31Zo=
Subject key identifier:   BE:D7:E6:EA:6E:27:CD:F4:83:52:F5:45:CF:00:EA:A4:4E:D4:7B:9C
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Certificate issuer:       /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial:       03E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
Manifest number:          039C
Signing time:             Tue 07 May 2024 02:46:21 +0000
Manifest this update:     Tue 07 May 2024 02:46:20 +0000
Manifest next update:     Tue 14 May 2024 02:46:20 +0000
Files and hashes:         1: GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl (hash: Nt3zDY9bisxo+mnFTOfVdTmXUY0CCRDiJB9if0Ms+Ps=)
                          2: 3CA46D445C4511ED9CD04525C4F9AE02.roa (hash: giIiPUtPJMsnxV7q7XX504j7kFz4zbVIDC2pfaZxbJQ=)
                          3: A880F416819311ECB7B48D5EC4F9AE02.roa (hash: uIu7Yzx8aW3PdZoa93ewcT/liJTG3WGKaYLEgS36mBY=)
                          4: 49FBE75A5DDC11ECBEA38D83C4F9AE02.roa (hash: 81N7rS4mpV/9LQx26PrwjCYkXjjpLFvCQujLdJo94mo=)
                          5: 1F1C0F0C64F711EC8F36652AC4F9AE02.roa (hash: EBWqqHjiOYwW5Q04CnIvQFsJhjfb1lqpgTe9LjYpnOo=)
                          6: FF4410C626C011EDAFBE455EC4F9AE02.roa (hash: XDIHWEe2bBmrD/wQrWQ53wpuQnWf3emMqNdvOrDKuEA=)
                          7: E7ECA23C696D11ECAD19A72DC4F9AE02.roa (hash: 0dceZzF1kkAPYwVNEQ5rEtpZwOR/9Pvce7VEu3XUPOI=)
                          8: 9CEB71A45BA811ED875C2452C4F9AE02.roa (hash: 2CGRw9JLuNklY24mWe/aGdmEYnKZD7KM8HVRkwtPh1A=)
                          9: A07678D893DD11ED8CA1B551C4F9AE02.roa (hash: Rs8luQWHRjKu/TQPuDx08GfpT0hjOrldCJ9lzVxDbrQ=)
                          10: 5CAAB66A91B211EC838CA523C4F9AE02.roa (hash: mMPACuFLwEdpKBVibL/ZRWdCX5YMc/S3U8e6kML6ECE=)
                          11: 67C2BFEC61EC11EDB740B02AC4F9AE02.roa (hash: Pq201IsTrNxwMMzkfRqpoadX9HhS8xCJAXl8YupXHWE=)
                          12: 661CE74E912511EE9FB03869C4F9AE02.roa (hash: l5zELZnKpH74R1B+8WNSgBmcpadb1lt0ypTuBIWkizg=)
                          13: 3BF787825C4511ED9CD04525C4F9AE02.roa (hash: T9MUNPUE9VPgTYFlOKzYoloA7Mxhg/FYOsE8wbcrHFo=)
                          14: 13E97B38F84511ECAB467675C4F9AE02.roa (hash: 3wuSN4HyCqYbHAokywiiQt1PuB9z4wf5NTlIrLqocIo=)
                          15: 64B971E05F1511ECBED92D34C4F9AE02.roa (hash: n9Sbe6aJ9bWcEpBK4zo5wiRtQpqIpKo5tbSmsKD22c4=)
                          16: 5C28B7DC91B211EC838CA523C4F9AE02.roa (hash: uiZOcuCrrczfZDpw78yiLaFOkK9r6+02DVBLWeiAWT4=)
                          17: F1C19444C18211EC95988F50C4F9AE02.roa (hash: SCmFhita71fUSgsbgwYGlJB0wdgAzHT7oQeEGHjQWXU=)
                          18: 53A6072E7AD611EC8A330A0CC4F9AE02.roa (hash: Oa1xNDCsPvIIuxsedG30rgxDEM/eSSXtN4wADkvn8bU=)
                          19: 98EDBD8C91AF11EC8D647F26C4F9AE02.roa (hash: Ssx1sBJz2yj59RWQYFRE18Kf4YyuE5tT419o5qFKpio=)
                          20: 4B58FDE05DDC11ECBEA38D83C4F9AE02.roa (hash: jtocdGRJRWiWOYoYdBQiAVeiSxA4/HZ5M32N+Rhfh/o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
                          rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 02:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1001 (0x3e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
        Validity
            Not Before: May  7 02:46:20 2024 GMT
            Not After : May 14 02:46:20 2024 GMT
        Subject: CN=663995fc-00fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:47:10:80:7c:94:c4:3a:58:92:21:8f:0f:
                    d8:2a:b6:ff:87:e3:da:72:26:72:78:5a:97:f0:54:
                    4e:a3:c7:3c:e8:ce:a7:9f:e4:e8:68:58:a6:b7:d9:
                    e0:ad:bf:af:9d:e8:84:b7:fd:6d:f3:ce:9e:f6:57:
                    bc:36:e3:d7:80:f3:ef:ab:8e:29:a7:6f:be:f2:b3:
                    d0:60:73:42:a2:c4:cc:e8:7f:15:39:c5:e2:97:ae:
                    ce:cd:8c:22:69:b1:bc:0b:14:8d:98:97:4b:34:7d:
                    33:11:85:f1:a5:70:4c:47:e2:a3:bb:40:29:e1:04:
                    6e:a6:ff:f7:0d:76:d5:4f:0d:fb:02:0d:fa:6d:c5:
                    ac:6c:f4:ac:c9:2b:79:1c:56:aa:6c:a0:13:2c:f8:
                    66:90:36:81:67:e8:b5:be:3d:48:0f:e0:f1:ce:ca:
                    0e:3a:ba:cf:2b:9d:a7:99:83:3a:2f:de:8f:5c:67:
                    67:63:b3:90:1e:67:77:6d:c7:ab:00:c3:7e:b3:79:
                    6a:11:87:13:a0:da:7e:5e:ee:76:ec:3d:28:7a:8c:
                    45:c9:73:26:84:af:d8:f3:eb:e2:1e:d3:6d:98:c3:
                    75:1b:6a:88:2a:84:56:0e:3d:3d:a0:b5:4e:b9:e7:
                    30:48:c6:5c:b3:32:d5:2c:c1:ef:4a:fe:93:78:67:
                    00:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D7:E6:EA:6E:27:CD:F4:83:52:F5:45:CF:00:EA:A4:4E:D4:7B:9C
            X509v3 Authority Key Identifier:
                keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a1:f7:54:02:9b:86:6e:ab:26:77:9f:a2:d4:a8:5e:f0:c7:
         3b:62:77:2e:1e:7b:fd:f6:c8:fe:71:e1:30:b6:d1:d3:43:80:
         39:f5:78:f9:b7:be:c2:fa:29:4f:25:e6:10:9b:f7:94:da:36:
         bf:83:5e:8f:fd:ae:69:77:2c:8c:3a:7e:26:95:6f:ec:5d:18:
         3a:7b:0d:31:5f:79:46:75:6c:a0:f1:d9:c1:7e:d7:21:3c:05:
         18:59:f8:a5:34:51:96:8c:66:fe:13:02:ec:80:c6:ef:63:a2:
         f3:b5:17:83:c2:d2:78:60:66:85:70:ff:88:ad:28:32:82:a6:
         bb:65:09:3f:2d:45:6b:3b:83:08:45:60:64:1f:e6:1c:63:b4:
         47:54:48:8f:e2:cf:7e:39:36:ba:04:e4:40:da:2f:6c:0b:bb:
         bc:59:32:3a:32:b3:7a:58:02:71:1a:e1:9d:c2:b8:f6:07:57:
         20:67:5e:d5:22:17:ce:9a:85:a1:ac:77:07:8a:f1:0c:99:16:
         c6:a8:82:9c:47:f0:69:b3:56:aa:9c:16:b7:0a:e9:05:2c:47:
         63:26:7b:9c:b7:5c:f9:ca:b0:db:58:43:8f:d7:8d:72:58:f4:
         b7:0b:58:3f:2f:26:ff:43:06:b3:a9:2f:16:f0:a8:9d:c4:56:
         2a:67:98:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:53:37 2024 by rpki-client on console-fra.rpki-client.org