Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
File:                     GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft (raw, json)
Hash identifier:          XSNG0MpzzaOgPp0LcpPSv49KCMHvvPlhfC1ghWQMls8=
Subject key identifier:   38:08:EB:EA:1B:89:39:1A:11:05:0E:DA:01:85:B0:70:4A:56:8B:C4
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Certificate issuer:       /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial:       04FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
Manifest number:          0499
Signing time:             Sun 07 Sep 2025 00:31:54 +0000
Manifest this update:     Sun 07 Sep 2025 00:31:54 +0000
Manifest next update:     Sun 14 Sep 2025 00:31:54 +0000
Files and hashes:         1: GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl (hash: ChVF1yMl1gsekkqh6hPhgMCTT3KvsMx/8nYk3HakTN8=)
                          2: 3CA46D445C4511ED9CD04525C4F9AE02.roa (hash: 7aee9pO5qmX/myo10tCeAvwIzNEzqsvOcdVOpE1hXkM=)
                          3: 67C2BFEC61EC11EDB740B02AC4F9AE02.roa (hash: +szwE1FqYlbLsPgP09GKHckFA87HXpfsxHfu0nFoUaM=)
                          4: A07678D893DD11ED8CA1B551C4F9AE02.roa (hash: qkkPmiKCotm8xDRLsYOYAa7+VqT8w5zL4Yd9LFXCYYg=)
                          5: 49FBE75A5DDC11ECBEA38D83C4F9AE02.roa (hash: 36x6Ech6L5Z42HwNzvc0lPGVa1TxtkLzDQK9Id2F9fA=)
                          6: 643F4A3E360611F09EAB971EC4F9AE02.roa (hash: WYALurcwi6KRd5Ja7Gk61M8Sm/VsFQDEWuo3cpkPK1w=)
                          7: FF4410C626C011EDAFBE455EC4F9AE02.roa (hash: x4jpGii4seS1HNgRIha6j22bPt7teTUTJr4Ar/gXVac=)
                          8: 5C28B7DC91B211EC838CA523C4F9AE02.roa (hash: crKRXXM/J427gXLoL1vXGlLSDoYWn3lWggijaATf0co=)
                          9: 9D08DA3E583311F0AA48A80AC4F9AE02.roa (hash: AL1JMXy1RB8REJ+5zhEsJp8t8CMFdCo3SoHeLew0wC4=)
                          10: 53A6072E7AD611EC8A330A0CC4F9AE02.roa (hash: c9Z2TSZfqohxCIBb22YrZB4ezrswRH+F9Usd0k39src=)
                          11: 4472E7B85B6011F0A2E8311CC4F9AE02.roa (hash: T5/KdpDeKUQiXnSS9T8mbCWPeI35IszMHYXsXr691fk=)
                          12: 9CEB71A45BA811ED875C2452C4F9AE02.roa (hash: w7apuGkBrd33vO4iaNCejeb+aGRR6IgdY/JRsgg6JxE=)
                          13: E7ECA23C696D11ECAD19A72DC4F9AE02.roa (hash: IQfnm1lD1TwZPDI1DiH1YZzvOmEYmRUGs/+efPt46Cs=)
                          14: 98EDBD8C91AF11EC8D647F26C4F9AE02.roa (hash: BblTx5HQY0ZaNn1tIob/PBXboJI6NchPbIZ11ypyKcI=)
                          15: 4B58FDE05DDC11ECBEA38D83C4F9AE02.roa (hash: 2CLv+ACMT3yLQgrQNEcW3dbGHb9Mc5rQuuD0ayJCAqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
                          rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 00:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1276 (0x4fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91618BC, serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
        Validity
            Not Before: Sep  7 00:31:54 2025 GMT
            Not After : Sep 14 00:31:54 2025 GMT
        Subject: CN=68bcd27a-86d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:64:4d:ea:1b:c3:5e:10:d1:3b:5a:d3:09:ac:
                    45:e1:62:6d:f5:0a:1a:19:90:e6:af:c3:36:c0:c0:
                    8a:63:f1:9f:a2:46:da:58:9d:df:40:12:42:e0:29:
                    dc:b0:d5:8c:44:6b:ff:41:6b:a6:ce:ad:f3:e3:a3:
                    48:e3:2c:7a:3f:44:ed:67:b8:bf:24:e2:a7:4c:f1:
                    d9:a8:94:5e:b4:fe:d3:c5:b3:1e:a7:98:f1:34:fd:
                    63:85:9f:43:72:eb:c9:38:ec:55:6d:fd:1d:90:e9:
                    7c:a5:78:e6:94:75:48:5f:81:03:f3:c6:95:f1:53:
                    59:51:e8:82:ff:c5:a0:4c:b2:a8:94:e9:ff:b0:3f:
                    fc:f0:13:9e:db:e6:fe:04:c3:6a:60:68:cf:fa:80:
                    4c:33:24:bd:c7:7a:c8:02:b3:cf:51:fd:09:54:38:
                    3a:d9:a1:ab:be:02:80:6d:be:8f:50:6f:fa:9b:11:
                    03:76:a4:e3:b9:09:a1:11:0c:16:91:e6:57:73:70:
                    ad:b1:53:b6:e6:bb:99:ec:c5:a4:60:12:5f:0e:ac:
                    ea:14:02:41:2f:6e:c2:68:d0:22:16:db:75:c1:c2:
                    4a:bf:9a:dc:26:5c:be:9f:71:9a:1c:7b:1b:30:13:
                    05:f6:a1:a8:e5:dc:98:86:20:1f:19:16:19:3a:0b:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:08:EB:EA:1B:89:39:1A:11:05:0E:DA:01:85:B0:70:4A:56:8B:C4
            X509v3 Authority Key Identifier:
                keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:00:68:d1:2a:10:1d:a1:30:25:2b:75:1f:ff:36:e3:3e:38:
         1f:78:54:04:60:90:f3:97:e3:80:30:f8:5b:27:85:de:c7:34:
         d7:bb:6b:54:b0:77:ea:3d:35:50:cc:ed:fd:d9:99:2a:da:89:
         29:3b:82:68:3e:b4:71:8e:11:f4:3f:2c:63:eb:c3:6f:b8:01:
         dd:9e:8f:3c:ce:bf:fa:35:8e:00:13:e8:a4:43:fa:32:b7:43:
         cf:88:bc:dc:c6:5e:fa:13:80:c0:5b:09:59:31:e9:27:b7:61:
         fb:6b:27:ca:fc:43:71:70:28:0c:3d:e4:21:ce:df:0f:f8:2c:
         a6:05:5e:10:68:c6:89:7c:41:42:aa:2d:07:6e:88:07:7e:18:
         ce:6d:51:97:45:df:61:14:03:72:8f:9f:33:67:0e:ae:0f:3d:
         fe:94:55:ea:09:d4:0f:1d:1b:95:4f:a7:81:84:bd:97:82:73:
         ad:24:e2:4e:ee:ca:ae:69:59:7b:4f:24:b6:8e:67:1e:5e:e9:
         c4:a9:b1:4c:02:d1:51:3e:20:85:4a:29:d1:84:99:62:58:bd:
         23:64:63:6c:fc:0c:ee:b3:e3:ca:84:13:2b:da:b1:ae:96:93:
         cf:fc:76:2b:ee:31:24:1a:8b:18:bc:83:c0:44:4a:af:7c:45:
         fe:a0:88:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:32:06 2025 by rpki-client