Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
File:                     GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft (raw, json)
Hash identifier:          WU+SJ9aTa3nGaptyl1T1SBq7Ss6mFUiIimPGvubF3gg=
Subject key identifier:   F4:52:A9:EA:D0:11:8A:F4:FD:4A:CE:DA:A0:B3:33:E3:53:FB:DE:06
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Certificate issuer:       /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial:       044E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
Manifest number:          0401
Signing time:             Mon 25 Nov 2024 00:00:08 +0000
Manifest this update:     Mon 25 Nov 2024 00:00:07 +0000
Manifest next update:     Mon 02 Dec 2024 00:00:07 +0000
Files and hashes:         1: GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl (hash: IWdDbvi+BibdxMhtLs7LoCmdVB+wWsydKyGVIoVppCI=)
                          2: 3CA46D445C4511ED9CD04525C4F9AE02.roa (hash: giIiPUtPJMsnxV7q7XX504j7kFz4zbVIDC2pfaZxbJQ=)
                          3: A880F416819311ECB7B48D5EC4F9AE02.roa (hash: uIu7Yzx8aW3PdZoa93ewcT/liJTG3WGKaYLEgS36mBY=)
                          4: 49FBE75A5DDC11ECBEA38D83C4F9AE02.roa (hash: 81N7rS4mpV/9LQx26PrwjCYkXjjpLFvCQujLdJo94mo=)
                          5: 1F1C0F0C64F711EC8F36652AC4F9AE02.roa (hash: EBWqqHjiOYwW5Q04CnIvQFsJhjfb1lqpgTe9LjYpnOo=)
                          6: FF4410C626C011EDAFBE455EC4F9AE02.roa (hash: XDIHWEe2bBmrD/wQrWQ53wpuQnWf3emMqNdvOrDKuEA=)
                          7: E7ECA23C696D11ECAD19A72DC4F9AE02.roa (hash: 0dceZzF1kkAPYwVNEQ5rEtpZwOR/9Pvce7VEu3XUPOI=)
                          8: 9CEB71A45BA811ED875C2452C4F9AE02.roa (hash: 2CGRw9JLuNklY24mWe/aGdmEYnKZD7KM8HVRkwtPh1A=)
                          9: A07678D893DD11ED8CA1B551C4F9AE02.roa (hash: Rs8luQWHRjKu/TQPuDx08GfpT0hjOrldCJ9lzVxDbrQ=)
                          10: 5CAAB66A91B211EC838CA523C4F9AE02.roa (hash: mMPACuFLwEdpKBVibL/ZRWdCX5YMc/S3U8e6kML6ECE=)
                          11: 67C2BFEC61EC11EDB740B02AC4F9AE02.roa (hash: Pq201IsTrNxwMMzkfRqpoadX9HhS8xCJAXl8YupXHWE=)
                          12: 661CE74E912511EE9FB03869C4F9AE02.roa (hash: l5zELZnKpH74R1B+8WNSgBmcpadb1lt0ypTuBIWkizg=)
                          13: 3BF787825C4511ED9CD04525C4F9AE02.roa (hash: T9MUNPUE9VPgTYFlOKzYoloA7Mxhg/FYOsE8wbcrHFo=)
                          14: 13E97B38F84511ECAB467675C4F9AE02.roa (hash: 3wuSN4HyCqYbHAokywiiQt1PuB9z4wf5NTlIrLqocIo=)
                          15: 64B971E05F1511ECBED92D34C4F9AE02.roa (hash: n9Sbe6aJ9bWcEpBK4zo5wiRtQpqIpKo5tbSmsKD22c4=)
                          16: 5C28B7DC91B211EC838CA523C4F9AE02.roa (hash: uiZOcuCrrczfZDpw78yiLaFOkK9r6+02DVBLWeiAWT4=)
                          17: F1C19444C18211EC95988F50C4F9AE02.roa (hash: SCmFhita71fUSgsbgwYGlJB0wdgAzHT7oQeEGHjQWXU=)
                          18: 53A6072E7AD611EC8A330A0CC4F9AE02.roa (hash: Oa1xNDCsPvIIuxsedG30rgxDEM/eSSXtN4wADkvn8bU=)
                          19: 98EDBD8C91AF11EC8D647F26C4F9AE02.roa (hash: Ssx1sBJz2yj59RWQYFRE18Kf4YyuE5tT419o5qFKpio=)
                          20: 4B58FDE05DDC11ECBEA38D83C4F9AE02.roa (hash: jtocdGRJRWiWOYoYdBQiAVeiSxA4/HZ5M32N+Rhfh/o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
                          rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1102 (0x44e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
        Validity
            Not Before: Nov 25 00:00:07 2024 GMT
            Not After : Dec  2 00:00:07 2024 GMT
        Subject: CN=6743be07-3737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9b:21:e9:30:43:d6:2f:30:31:00:25:c3:89:
                    fd:23:a8:1d:b9:9a:88:7a:60:9a:47:87:6c:f0:2a:
                    40:2d:22:1d:d2:21:e2:42:1e:07:0f:0a:8d:f1:59:
                    7a:c6:02:14:77:61:d3:f9:20:a3:1b:36:df:96:f4:
                    8c:c8:e2:38:5b:4d:9e:e0:c8:ea:ff:83:87:6f:53:
                    1d:be:7e:68:76:88:a8:69:cf:22:43:fa:20:94:f4:
                    89:94:4f:22:35:fe:2f:1a:e8:4d:d0:fb:a6:7a:5c:
                    05:39:69:fd:c1:c4:61:59:ea:23:61:75:c9:a4:1b:
                    ff:8d:ae:9f:67:c9:f4:08:21:fd:01:e9:17:65:6e:
                    ec:68:c6:6d:4a:8a:e3:5c:3d:a0:f0:1d:ca:92:60:
                    8f:34:0f:2e:b4:c5:e9:bc:ac:5a:08:95:a7:ba:11:
                    91:da:50:3b:f2:d0:bc:3c:61:ae:1c:f9:a2:f9:bc:
                    41:73:79:96:5f:80:a6:d3:13:df:f3:6c:11:43:aa:
                    ac:aa:72:04:6a:85:d1:40:c4:97:b1:f0:07:e9:cd:
                    94:7e:52:5a:71:05:1b:64:bd:44:4c:ff:94:bb:48:
                    76:d6:20:ef:ba:53:61:e6:71:7b:d9:c9:2d:4f:d6:
                    65:59:f1:de:bb:e7:39:aa:34:70:04:f3:32:9a:78:
                    cd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:52:A9:EA:D0:11:8A:F4:FD:4A:CE:DA:A0:B3:33:E3:53:FB:DE:06
            X509v3 Authority Key Identifier:
                keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:91:a4:ee:8e:31:54:ff:50:0a:bc:28:e7:ca:3d:cd:82:dd:
         73:8d:98:b6:59:b6:75:10:c4:50:a5:a9:d1:60:2e:7d:b7:e6:
         24:45:ee:8a:ac:9c:9d:94:35:9a:55:e6:61:ad:fe:93:66:8c:
         b1:25:ee:20:82:6c:a9:36:9e:0a:5b:f6:0b:03:d3:02:1c:f7:
         7a:20:94:ea:a9:15:97:c0:30:11:d2:03:ff:c8:29:c4:a0:c1:
         a4:29:f3:5f:5f:6a:93:50:a7:e3:e2:5f:b6:df:0c:ea:89:f9:
         38:57:7f:9f:e7:03:5d:e8:e4:2b:dd:54:eb:7d:90:2b:07:e8:
         92:df:c4:51:7b:8f:91:ad:fe:17:36:38:90:1c:54:33:08:10:
         df:59:ba:0d:0b:86:9a:bd:bc:28:a3:b7:f7:98:ae:80:b9:7f:
         53:ba:d0:ab:32:b4:0c:b4:3d:8f:6c:17:84:24:bd:78:ef:9a:
         f7:e1:f4:1b:01:b1:b7:03:d0:05:8e:0a:58:73:19:30:14:0c:
         d2:36:e3:e2:12:c7:c1:0e:e3:d8:c7:7b:8d:31:d7:7c:68:f2:
         40:6f:c6:fa:7c:af:40:7d:a3:19:b5:2a:b2:0b:70:01:d5:07:
         c2:6e:01:98:e9:07:18:10:ed:08:a4:d0:e4:ad:a4:e8:d4:d4:
         f8:f2:dd:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE4QkMxMTAvBgNVBAUTKDFBRUJDRDgyRDcwMjgzNDNCNzQ1QUQ0MDY3MzlDREI5
MkQ0REZCNzcwHhcNMjQxMTI1MDAwMDA3WhcNMjQxMjAyMDAwMDA3WjAYMRYwFAYD
VQQDEw02NzQzYmUwNy0zNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Zsh6TBD1i8wMQAlw4n9I6gduZqIemCaR4ds8CpALSId0iHiQh4HDwqN8Vl6
xgIUd2HT+SCjGzbflvSMyOI4W02e4Mjq/4OHb1Mdvn5odoioac8iQ/oglPSJlE8i
Nf4vGuhN0PumelwFOWn9wcRhWeojYXXJpBv/ja6fZ8n0CCH9AekXZW7saMZtSorj
XD2g8B3KkmCPNA8utMXpvKxaCJWnuhGR2lA78tC8PGGuHPmi+bxBc3mWX4Cm0xPf
82wRQ6qsqnIEaoXRQMSXsfAH6c2UflJacQUbZL1ETP+Uu0h21iDvulNh5nF72ckt
T9ZlWfHeu+c5qjRwBPMymnjNCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRSqerQ
EYr0/UrO2qCzM+NT+94GMB8GA1UdIwQYMBaAFBrrzYLXAoNDt0WtQGc5zbktTft3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThCQy9FRDdCNjJBQzVE
ODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cwTzNSYTFBWnpuTnVTMU4t
M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d1dk5ndGNDZzBPM1JhMUFaem5OdVMxTi0zYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MThCQy9FRDdCNjJBQzVEODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cw
TzNSYTFBWnpuTnVTMU4tM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBhkaTujjFU/1AKvCjnyj3Ngt1zjZi2WbZ1EMRQpanRYC59t+YkRe6K
rJydlDWaVeZhrf6TZoyxJe4ggmypNp4KW/YLA9MCHPd6IJTqqRWXwDAR0gP/yCnE
oMGkKfNfX2qTUKfj4l+23wzqifk4V3+f5wNd6OQr3VTrfZArB+iS38RRe4+Rrf4X
NjiQHFQzCBDfWboNC4aavbwoo7f3mK6AuX9TutCrMrQMtD2PbBeEJL1475r34fQb
AbG3A9AFjgpYcxkwFAzSNuPiEsfBDuPYx3uNMdd8aPJAb8b6fK9AfaMZtSqyC3AB
1QfCbgGY6QcYEO0IpNDkraTo1NT48t34
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:15:28 2024 by rpki-client on console-fra.rpki-client.org