Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
File:                     GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft (raw, json)
Hash identifier:          BTaxar0yRuLGI32JsspuZ27NjfbfC9xXmlXyfsVbrIw=
Subject key identifier:   60:30:7A:52:88:A3:7B:29:8E:49:FE:54:79:22:57:90:4A:20:5F:85
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Certificate issuer:       /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial:       04A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
Manifest number:          0445
Signing time:             Thu 03 Apr 2025 00:24:23 +0000
Manifest this update:     Thu 03 Apr 2025 00:24:22 +0000
Manifest next update:     Thu 10 Apr 2025 00:24:22 +0000
Files and hashes:         1: GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl (hash: E3ZxGY1pao+Bwd/SvMziGz0kSMgV2IaT6k2XF/TauqQ=)
                          2: 3CA46D445C4511ED9CD04525C4F9AE02.roa (hash: 7aee9pO5qmX/myo10tCeAvwIzNEzqsvOcdVOpE1hXkM=)
                          3: A880F416819311ECB7B48D5EC4F9AE02.roa (hash: aB3/PZRviqMI1UasxK3HBIncJPU2Y+t7Df9xEhhUmZw=)
                          4: 49FBE75A5DDC11ECBEA38D83C4F9AE02.roa (hash: 36x6Ech6L5Z42HwNzvc0lPGVa1TxtkLzDQK9Id2F9fA=)
                          5: 1F1C0F0C64F711EC8F36652AC4F9AE02.roa (hash: osNPWRTEC30CVSzDSV8u5vPgQOKg93irw3f7/1nyvR4=)
                          6: FF4410C626C011EDAFBE455EC4F9AE02.roa (hash: x4jpGii4seS1HNgRIha6j22bPt7teTUTJr4Ar/gXVac=)
                          7: E7ECA23C696D11ECAD19A72DC4F9AE02.roa (hash: IQfnm1lD1TwZPDI1DiH1YZzvOmEYmRUGs/+efPt46Cs=)
                          8: 9CEB71A45BA811ED875C2452C4F9AE02.roa (hash: w7apuGkBrd33vO4iaNCejeb+aGRR6IgdY/JRsgg6JxE=)
                          9: A07678D893DD11ED8CA1B551C4F9AE02.roa (hash: qkkPmiKCotm8xDRLsYOYAa7+VqT8w5zL4Yd9LFXCYYg=)
                          10: 5CAAB66A91B211EC838CA523C4F9AE02.roa (hash: bhzzba09CTE3+5Ci3mIR3nBjvndFl9JG79VoVnViei8=)
                          11: 67C2BFEC61EC11EDB740B02AC4F9AE02.roa (hash: +szwE1FqYlbLsPgP09GKHckFA87HXpfsxHfu0nFoUaM=)
                          12: 661CE74E912511EE9FB03869C4F9AE02.roa (hash: Aip9w89ovKKGqYrukOFS6DwgaaU9mE2ENF2KcNHOmoM=)
                          13: 3BF787825C4511ED9CD04525C4F9AE02.roa (hash: LIENBvmMrRIxmnzlElXveDjHkViAX5FdLQn69HvX/+Q=)
                          14: 13E97B38F84511ECAB467675C4F9AE02.roa (hash: BuodXTi20VWm3wasrjwSwE/7hVKxN+RDwTVuZlqAqLI=)
                          15: 64B971E05F1511ECBED92D34C4F9AE02.roa (hash: aJ7FSrQJbLnYWUhXmRxpHCTv/Yq+upCjLRh7PdkZWMM=)
                          16: 5C28B7DC91B211EC838CA523C4F9AE02.roa (hash: crKRXXM/J427gXLoL1vXGlLSDoYWn3lWggijaATf0co=)
                          17: F1C19444C18211EC95988F50C4F9AE02.roa (hash: BdqlZkqloZ/ssHZzJl2uDt1FJInYH8oNCg3LYxMHHyE=)
                          18: 53A6072E7AD611EC8A330A0CC4F9AE02.roa (hash: c9Z2TSZfqohxCIBb22YrZB4ezrswRH+F9Usd0k39src=)
                          19: 98EDBD8C91AF11EC8D647F26C4F9AE02.roa (hash: BblTx5HQY0ZaNn1tIob/PBXboJI6NchPbIZ11ypyKcI=)
                          20: 4B58FDE05DDC11ECBEA38D83C4F9AE02.roa (hash: 2CLv+ACMT3yLQgrQNEcW3dbGHb9Mc5rQuuD0ayJCAqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
                          rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 00:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1189 (0x4a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91618BC
        Validity
            Not Before: Apr  3 00:24:22 2025 GMT
            Not After : Apr 10 00:24:22 2025 GMT
        Subject: CN=67edd536-eb4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:10:be:b8:5f:01:a9:85:89:ad:ae:d7:c2:
                    b1:44:07:3e:7e:f4:c0:63:80:36:36:c7:1f:af:f4:
                    1f:9b:10:0b:67:29:6b:d6:ce:57:6b:ad:68:5d:1b:
                    38:bc:89:ba:7a:eb:aa:2e:7c:d7:28:71:66:d7:84:
                    1b:9a:5b:28:6b:3c:96:f0:f3:ac:db:9c:09:eb:48:
                    20:c0:a1:a6:69:a6:51:db:d7:b5:21:f8:a6:79:73:
                    33:0e:4d:55:14:d9:cf:1c:d1:13:11:84:74:d7:7a:
                    ab:2c:f2:54:c1:27:75:87:59:1f:e7:3c:51:9a:a2:
                    1f:d5:81:ff:b5:b6:17:8b:91:3e:74:d2:82:2b:c1:
                    c0:61:11:e6:be:c4:d5:f6:aa:fd:62:76:74:49:0a:
                    10:20:ff:3f:56:23:56:99:b4:9a:44:68:da:d3:45:
                    87:da:a9:d6:49:34:3d:91:39:35:73:27:e0:eb:3f:
                    95:d7:69:a2:e3:ed:42:90:a6:08:02:68:61:f9:ae:
                    fe:a6:aa:aa:f0:13:8a:a8:39:0a:cd:43:11:4a:dd:
                    99:9a:9b:16:cd:d7:ad:46:8d:99:75:12:48:f1:4e:
                    3c:71:8c:31:1a:2c:e4:f4:da:51:c6:5d:2c:9f:4b:
                    a7:be:46:77:d1:1a:d8:81:92:ca:71:27:1b:59:5f:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:30:7A:52:88:A3:7B:29:8E:49:FE:54:79:22:57:90:4A:20:5F:85
            X509v3 Authority Key Identifier:
                keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:76:46:a5:51:0a:27:33:ef:fc:84:83:10:c3:8b:9c:9d:a3:
         f0:c6:95:31:3e:b0:7d:10:e9:df:cb:1a:25:05:e8:71:6a:40:
         0c:8d:29:5a:e5:05:4f:c4:03:d0:ce:7f:7e:90:43:96:62:11:
         1c:b7:ea:b5:d3:b8:6a:2e:90:38:d4:59:d9:7d:d7:ac:03:f3:
         9d:40:e5:ba:e0:9b:19:aa:ee:1f:7b:09:43:26:0a:8c:0b:a2:
         60:64:82:47:c3:d1:17:c6:55:5d:0f:45:d8:1b:4a:7b:ff:52:
         44:e5:97:c4:ee:c7:df:9e:b6:52:20:93:12:9b:6d:9c:66:77:
         63:1e:aa:72:18:a7:6b:7e:e9:50:aa:5f:8d:f3:1a:a8:89:41:
         3e:21:93:59:f5:01:65:ba:46:71:01:f5:87:af:a4:49:70:93:
         7c:62:fb:e3:23:0e:b2:13:7b:f5:bb:6d:c0:8d:d8:81:21:db:
         c2:08:e7:41:cc:06:37:b9:09:80:62:4c:f1:e6:a6:a2:aa:19:
         52:de:5e:3b:64:2c:38:48:6a:a9:8e:9b:5c:2d:4b:a5:a1:12:
         d5:80:1d:1a:a2:72:36:c0:e5:83:dc:17:d2:c4:10:80:de:c3:
         f3:68:1e:b3:86:0f:5b:29:fb:d1:a2:a7:8c:48:31:72:fb:5d:
         79:2d:7c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:27 2025 by rpki-client