Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
File:                     GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft (raw, json)
Hash identifier:          IH8hHdzS6oKQrwedCqNqHhd9wi7fATPW8BSJNDSrh0M=
Subject key identifier:   3E:83:91:32:1E:AC:AD:89:9B:72:CA:3F:5A:D0:16:88:CA:9A:15:61
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Certificate issuer:       /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial:       04ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
Manifest number:          048A
Signing time:             Sat 09 Aug 2025 00:42:11 +0000
Manifest this update:     Sat 09 Aug 2025 00:42:10 +0000
Manifest next update:     Sat 16 Aug 2025 00:42:10 +0000
Files and hashes:         1: GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl (hash: Hw3gy5RZgKXlQaMdc5Rlb5zqOTUUT1L7IFvFzFbYrk0=)
                          2: 3CA46D445C4511ED9CD04525C4F9AE02.roa (hash: 7aee9pO5qmX/myo10tCeAvwIzNEzqsvOcdVOpE1hXkM=)
                          3: 67C2BFEC61EC11EDB740B02AC4F9AE02.roa (hash: +szwE1FqYlbLsPgP09GKHckFA87HXpfsxHfu0nFoUaM=)
                          4: A07678D893DD11ED8CA1B551C4F9AE02.roa (hash: qkkPmiKCotm8xDRLsYOYAa7+VqT8w5zL4Yd9LFXCYYg=)
                          5: 49FBE75A5DDC11ECBEA38D83C4F9AE02.roa (hash: 36x6Ech6L5Z42HwNzvc0lPGVa1TxtkLzDQK9Id2F9fA=)
                          6: 643F4A3E360611F09EAB971EC4F9AE02.roa (hash: WYALurcwi6KRd5Ja7Gk61M8Sm/VsFQDEWuo3cpkPK1w=)
                          7: FF4410C626C011EDAFBE455EC4F9AE02.roa (hash: x4jpGii4seS1HNgRIha6j22bPt7teTUTJr4Ar/gXVac=)
                          8: 5C28B7DC91B211EC838CA523C4F9AE02.roa (hash: crKRXXM/J427gXLoL1vXGlLSDoYWn3lWggijaATf0co=)
                          9: 9D08DA3E583311F0AA48A80AC4F9AE02.roa (hash: AL1JMXy1RB8REJ+5zhEsJp8t8CMFdCo3SoHeLew0wC4=)
                          10: 53A6072E7AD611EC8A330A0CC4F9AE02.roa (hash: c9Z2TSZfqohxCIBb22YrZB4ezrswRH+F9Usd0k39src=)
                          11: 4472E7B85B6011F0A2E8311CC4F9AE02.roa (hash: T5/KdpDeKUQiXnSS9T8mbCWPeI35IszMHYXsXr691fk=)
                          12: 9CEB71A45BA811ED875C2452C4F9AE02.roa (hash: w7apuGkBrd33vO4iaNCejeb+aGRR6IgdY/JRsgg6JxE=)
                          13: E7ECA23C696D11ECAD19A72DC4F9AE02.roa (hash: IQfnm1lD1TwZPDI1DiH1YZzvOmEYmRUGs/+efPt46Cs=)
                          14: 98EDBD8C91AF11EC8D647F26C4F9AE02.roa (hash: BblTx5HQY0ZaNn1tIob/PBXboJI6NchPbIZ11ypyKcI=)
                          15: 4B58FDE05DDC11ECBEA38D83C4F9AE02.roa (hash: 2CLv+ACMT3yLQgrQNEcW3dbGHb9Mc5rQuuD0ayJCAqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
                          rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1261 (0x4ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91618BC, serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
        Validity
            Not Before: Aug  9 00:42:10 2025 GMT
            Not After : Aug 16 00:42:10 2025 GMT
        Subject: CN=68969963-1b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5d:94:80:80:95:1e:14:9c:6b:7d:e7:37:99:
                    bd:f1:0f:26:89:42:84:bc:a2:93:e1:9b:9f:d3:9e:
                    e3:5e:5c:c2:82:d1:7d:75:1f:94:40:75:35:1a:2d:
                    86:7d:c7:04:e4:41:95:86:85:a9:dc:20:20:a6:60:
                    7c:c8:8c:76:9d:3f:09:5a:18:16:ed:a6:f8:2f:37:
                    a3:4a:ad:9e:65:d7:86:25:9e:d5:b1:95:4c:44:6e:
                    1d:e7:ea:fe:96:33:b4:f0:e9:11:a7:20:d5:d1:48:
                    e2:52:15:07:bf:aa:5e:f1:a3:a7:06:5a:94:c7:b9:
                    2b:96:bb:fd:f9:cc:0f:e0:51:e0:8d:e8:75:3a:be:
                    71:e3:4b:b0:8a:83:1d:4a:50:d1:29:80:c9:81:8b:
                    7e:98:09:d4:e9:80:a0:b9:81:01:2a:c6:7d:3d:a3:
                    a6:3a:5f:73:73:a9:a9:68:9e:f0:59:46:f5:bd:fa:
                    1f:6a:6a:a3:6c:1e:ef:5c:6e:58:3b:2f:69:e8:2c:
                    ba:af:d9:d3:30:68:d1:a0:f5:29:7e:37:cc:2c:4d:
                    41:aa:84:5f:41:65:b4:f1:42:cd:f8:76:55:2b:c9:
                    d8:29:68:e0:e3:2f:ec:36:f1:1a:2a:a5:fe:58:8e:
                    91:c3:97:52:2d:7d:52:35:d0:32:a0:68:12:ee:56:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:83:91:32:1E:AC:AD:89:9B:72:CA:3F:5A:D0:16:88:CA:9A:15:61
            X509v3 Authority Key Identifier:
                keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:34:cb:2d:60:39:f1:b0:d8:ea:f4:2f:d0:76:23:d7:94:cb:
         a4:aa:1c:d9:6f:cb:25:18:94:89:ee:10:99:29:21:7d:1e:b9:
         ab:00:63:6d:32:04:9e:ec:bb:7f:f4:97:f8:10:78:8b:86:f6:
         88:9b:f5:24:ae:1a:fa:6e:27:ee:4d:d7:dc:8c:8c:77:c1:83:
         6e:56:42:17:b3:62:a8:93:2c:a8:24:3b:a9:ee:46:eb:0a:85:
         85:43:ff:c1:69:cf:71:05:20:c3:48:83:4a:84:1b:fb:2a:2b:
         4c:c6:01:7a:ec:4c:89:71:e2:12:38:c2:36:54:98:8e:07:16:
         91:4c:5d:1c:82:58:27:10:56:bc:ec:54:ac:0a:96:76:12:01:
         2e:3a:6b:66:19:e6:ed:6d:85:f0:1e:f7:ca:d1:4c:16:e1:4f:
         42:41:09:03:96:9e:d5:cb:7a:f1:b0:2a:c5:43:9f:c0:d2:46:
         98:20:72:db:c4:d5:12:00:13:7c:51:3a:53:8d:f1:51:12:6a:
         50:0f:22:ef:90:8f:2f:d5:09:2c:17:de:aa:b5:7e:96:1e:bd:
         fa:06:30:9a:e4:96:04:7f:83:4a:25:a5:a4:d2:9e:84:3c:97:
         5e:31:d8:a1:ac:2b:97:b0:c0:19:44:80:80:0e:96:3d:e4:b4:
         d5:fe:05:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE4QkMxMTAvBgNVBAUTKDFBRUJDRDgyRDcwMjgzNDNCNzQ1QUQ0MDY3MzlDREI5
MkQ0REZCNzcwHhcNMjUwODA5MDA0MjEwWhcNMjUwODE2MDA0MjEwWjAYMRYwFAYD
VQQDEw02ODk2OTk2My0xYjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyV2UgICVHhSca33nN5m98Q8miUKEvKKT4Zuf057jXlzCgtF9dR+UQHU1Gi2G
fccE5EGVhoWp3CAgpmB8yIx2nT8JWhgW7ab4LzejSq2eZdeGJZ7VsZVMRG4d5+r+
ljO08OkRpyDV0UjiUhUHv6pe8aOnBlqUx7krlrv9+cwP4FHgjeh1Or5x40uwioMd
SlDRKYDJgYt+mAnU6YCguYEBKsZ9PaOmOl9zc6mpaJ7wWUb1vfofamqjbB7vXG5Y
Oy9p6Cy6r9nTMGjRoPUpfjfMLE1BqoRfQWW08ULN+HZVK8nYKWjg4y/sNvEaKqX+
WI6Rw5dSLX1SNdAyoGgS7lb4RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6DkTIe
rK2Jm3LKP1rQFojKmhVhMB8GA1UdIwQYMBaAFBrrzYLXAoNDt0WtQGc5zbktTft3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThCQy9FRDdCNjJBQzVE
ODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cwTzNSYTFBWnpuTnVTMU4t
M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d1dk5ndGNDZzBPM1JhMUFaem5OdVMxTi0zYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MThCQy9FRDdCNjJBQzVEODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cw
TzNSYTFBWnpuTnVTMU4tM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsNMstYDnxsNjq9C/QdiPXlMukqhzZb8slGJSJ7hCZKSF9HrmrAGNt
MgSe7Lt/9Jf4EHiLhvaIm/Ukrhr6bifuTdfcjIx3wYNuVkIXs2KokyyoJDup7kbr
CoWFQ//Bac9xBSDDSINKhBv7KitMxgF67EyJceISOMI2VJiOBxaRTF0cglgnEFa8
7FSsCpZ2EgEuOmtmGebtbYXwHvfK0UwW4U9CQQkDlp7Vy3rxsCrFQ5/A0kaYIHLb
xNUSABN8UTpTjfFREmpQDyLvkI8v1QksF96qtX6WHr36BjCa5JYEf4NKJaWk0p6E
PJdeMdihrCuXsMAZRICADpY95LTV/gV6
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:17:25 2025 by rpki-client