Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
File:                     GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft (raw, json)
Hash identifier:          fWSoDaAm2WaWv5gNTh4WKd6Fw2Zq+9TOIcQrzEc8foA=
Subject key identifier:   58:AD:A7:36:55:42:2C:27:DD:D6:FD:A5:CA:3F:C1:F3:1A:8D:90:D5
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Certificate issuer:       /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial:       04C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
Manifest number:          0464
Signing time:             Sat 31 May 2025 00:30:44 +0000
Manifest this update:     Sat 31 May 2025 00:30:44 +0000
Manifest next update:     Sat 07 Jun 2025 00:30:43 +0000
Files and hashes:         1: GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl (hash: mouyFc/JUHCFYv8EU4WcPv05oIqfyc1F1qkbKEOJe4M=)
                          2: 3CA46D445C4511ED9CD04525C4F9AE02.roa (hash: 7aee9pO5qmX/myo10tCeAvwIzNEzqsvOcdVOpE1hXkM=)
                          3: 49FBE75A5DDC11ECBEA38D83C4F9AE02.roa (hash: 36x6Ech6L5Z42HwNzvc0lPGVa1TxtkLzDQK9Id2F9fA=)
                          4: 1F1C0F0C64F711EC8F36652AC4F9AE02.roa (hash: osNPWRTEC30CVSzDSV8u5vPgQOKg93irw3f7/1nyvR4=)
                          5: FF4410C626C011EDAFBE455EC4F9AE02.roa (hash: x4jpGii4seS1HNgRIha6j22bPt7teTUTJr4Ar/gXVac=)
                          6: 9CEB71A45BA811ED875C2452C4F9AE02.roa (hash: w7apuGkBrd33vO4iaNCejeb+aGRR6IgdY/JRsgg6JxE=)
                          7: E7ECA23C696D11ECAD19A72DC4F9AE02.roa (hash: IQfnm1lD1TwZPDI1DiH1YZzvOmEYmRUGs/+efPt46Cs=)
                          8: A07678D893DD11ED8CA1B551C4F9AE02.roa (hash: qkkPmiKCotm8xDRLsYOYAa7+VqT8w5zL4Yd9LFXCYYg=)
                          9: 67C2BFEC61EC11EDB740B02AC4F9AE02.roa (hash: +szwE1FqYlbLsPgP09GKHckFA87HXpfsxHfu0nFoUaM=)
                          10: 661CE74E912511EE9FB03869C4F9AE02.roa (hash: Aip9w89ovKKGqYrukOFS6DwgaaU9mE2ENF2KcNHOmoM=)
                          11: 13E97B38F84511ECAB467675C4F9AE02.roa (hash: BuodXTi20VWm3wasrjwSwE/7hVKxN+RDwTVuZlqAqLI=)
                          12: 643F4A3E360611F09EAB971EC4F9AE02.roa (hash: WYALurcwi6KRd5Ja7Gk61M8Sm/VsFQDEWuo3cpkPK1w=)
                          13: 5C28B7DC91B211EC838CA523C4F9AE02.roa (hash: crKRXXM/J427gXLoL1vXGlLSDoYWn3lWggijaATf0co=)
                          14: F1C19444C18211EC95988F50C4F9AE02.roa (hash: BdqlZkqloZ/ssHZzJl2uDt1FJInYH8oNCg3LYxMHHyE=)
                          15: 53A6072E7AD611EC8A330A0CC4F9AE02.roa (hash: c9Z2TSZfqohxCIBb22YrZB4ezrswRH+F9Usd0k39src=)
                          16: 98EDBD8C91AF11EC8D647F26C4F9AE02.roa (hash: BblTx5HQY0ZaNn1tIob/PBXboJI6NchPbIZ11ypyKcI=)
                          17: 4B58FDE05DDC11ECBEA38D83C4F9AE02.roa (hash: 2CLv+ACMT3yLQgrQNEcW3dbGHb9Mc5rQuuD0ayJCAqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
                          rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 00:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91618BC, serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
        Validity
            Not Before: May 31 00:30:44 2025 GMT
            Not After : Jun  7 00:30:43 2025 GMT
        Subject: CN=683a4db4-cd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:ad:de:2f:b8:96:7f:d6:9e:19:62:f4:34:
                    fa:48:57:16:2e:d3:4b:1c:3d:1c:49:f9:b8:82:1f:
                    57:3e:ed:54:35:b1:23:c0:a4:d4:f6:44:d2:32:a6:
                    61:1b:79:35:41:a3:68:8f:51:f0:3a:e1:44:b1:7e:
                    c5:db:b8:58:44:ec:ae:49:7e:c5:41:57:b9:1a:58:
                    34:01:4f:d7:b4:f1:e7:aa:8f:a0:74:0f:a0:cf:95:
                    3b:4c:14:74:85:56:29:e5:5b:23:4a:24:5b:8e:63:
                    a1:b6:03:fc:a5:bf:98:82:10:2f:dc:dc:f3:e9:1c:
                    6f:bc:48:1a:a3:aa:f0:07:00:af:c2:45:06:a2:8f:
                    87:db:d6:f2:ce:15:1d:01:1e:93:18:95:ee:bd:ee:
                    38:fd:5c:83:5d:70:06:81:a6:cb:00:3d:e6:9a:ba:
                    9e:23:51:0f:94:e8:1c:f7:0f:7e:9a:e8:bf:58:37:
                    94:a7:39:e6:58:f2:21:3f:5b:b1:67:11:bc:c5:d2:
                    4a:02:9e:73:1c:4e:25:06:d4:7e:c0:04:14:f3:0c:
                    cf:2c:af:11:57:02:0f:2b:25:da:8b:32:fd:26:d7:
                    5f:70:5d:dc:f5:90:e9:05:d7:5d:22:24:e2:00:c2:
                    ee:fb:f3:5c:74:f5:f6:c7:1b:aa:2f:58:c5:20:90:
                    80:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AD:A7:36:55:42:2C:27:DD:D6:FD:A5:CA:3F:C1:F3:1A:8D:90:D5
            X509v3 Authority Key Identifier:
                keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f7:4a:a8:80:1f:15:68:ae:99:a6:e4:58:7d:2d:b9:b2:31:
         f9:67:5b:5c:e4:de:1b:c2:1d:7d:7b:80:8a:89:02:4c:9e:97:
         5b:ca:be:bb:c1:59:b8:86:bd:d7:c7:26:3b:a2:fe:f9:68:11:
         db:af:49:69:35:2d:c0:88:f2:1e:95:b7:ad:c8:77:eb:84:21:
         2b:18:33:59:e2:1b:75:ed:be:dd:9e:3f:4e:e4:c7:c1:14:bc:
         3f:b3:fc:b8:82:9a:73:37:13:11:38:33:2d:a3:59:26:93:61:
         07:0e:a1:10:ca:2f:0d:9e:12:4b:1b:7d:5c:dc:35:5a:8b:b4:
         0a:e0:18:ee:27:78:3f:ff:fe:af:d5:c8:eb:01:5c:65:e3:bc:
         5a:b3:b1:5c:39:f4:b7:c5:0e:9b:a2:59:ba:ce:2b:78:66:18:
         5c:4a:58:14:93:f7:d1:60:5b:a0:ff:9e:ae:84:e7:da:30:5f:
         48:05:5b:28:c1:57:5d:d2:b8:66:c9:31:68:c0:8e:5c:31:f8:
         92:0e:ae:aa:96:d8:48:56:70:b7:ff:7d:07:db:0f:1c:0e:1c:
         2f:af:9f:f1:ea:bc:1f:74:b9:aa:b9:a4:b2:a8:0e:91:ca:30:
         83:2a:e6:1c:e1:53:47:b0:c6:89:ec:b9:b2:55:80:7c:fa:f3:
         32:96:9a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:11:21 2025 by rpki-client