Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
File:                     GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft (raw, json)
Hash identifier:          3MQ0FbNBKqwBFgsG/sjF4YgqgrFnh1f1JTQ6h9iAfmY=
Subject key identifier:   6B:C8:31:E6:50:B3:4E:D6:61:4A:3A:18:10:87:C0:53:63:60:2A:AD
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Certificate issuer:       /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial:       04B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
Manifest number:          0450
Signing time:             Fri 25 Apr 2025 00:08:21 +0000
Manifest this update:     Fri 25 Apr 2025 00:08:21 +0000
Manifest next update:     Fri 02 May 2025 00:08:21 +0000
Files and hashes:         1: GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl (hash: z5B+RplnFCS9lKyUA81dPchW85lYOURg9FVbdggA5mA=)
                          2: 3CA46D445C4511ED9CD04525C4F9AE02.roa (hash: 7aee9pO5qmX/myo10tCeAvwIzNEzqsvOcdVOpE1hXkM=)
                          3: A880F416819311ECB7B48D5EC4F9AE02.roa (hash: aB3/PZRviqMI1UasxK3HBIncJPU2Y+t7Df9xEhhUmZw=)
                          4: 49FBE75A5DDC11ECBEA38D83C4F9AE02.roa (hash: 36x6Ech6L5Z42HwNzvc0lPGVa1TxtkLzDQK9Id2F9fA=)
                          5: 1F1C0F0C64F711EC8F36652AC4F9AE02.roa (hash: osNPWRTEC30CVSzDSV8u5vPgQOKg93irw3f7/1nyvR4=)
                          6: FF4410C626C011EDAFBE455EC4F9AE02.roa (hash: x4jpGii4seS1HNgRIha6j22bPt7teTUTJr4Ar/gXVac=)
                          7: E7ECA23C696D11ECAD19A72DC4F9AE02.roa (hash: IQfnm1lD1TwZPDI1DiH1YZzvOmEYmRUGs/+efPt46Cs=)
                          8: 9CEB71A45BA811ED875C2452C4F9AE02.roa (hash: w7apuGkBrd33vO4iaNCejeb+aGRR6IgdY/JRsgg6JxE=)
                          9: A07678D893DD11ED8CA1B551C4F9AE02.roa (hash: qkkPmiKCotm8xDRLsYOYAa7+VqT8w5zL4Yd9LFXCYYg=)
                          10: 5CAAB66A91B211EC838CA523C4F9AE02.roa (hash: bhzzba09CTE3+5Ci3mIR3nBjvndFl9JG79VoVnViei8=)
                          11: 67C2BFEC61EC11EDB740B02AC4F9AE02.roa (hash: +szwE1FqYlbLsPgP09GKHckFA87HXpfsxHfu0nFoUaM=)
                          12: 661CE74E912511EE9FB03869C4F9AE02.roa (hash: Aip9w89ovKKGqYrukOFS6DwgaaU9mE2ENF2KcNHOmoM=)
                          13: 3BF787825C4511ED9CD04525C4F9AE02.roa (hash: LIENBvmMrRIxmnzlElXveDjHkViAX5FdLQn69HvX/+Q=)
                          14: 13E97B38F84511ECAB467675C4F9AE02.roa (hash: BuodXTi20VWm3wasrjwSwE/7hVKxN+RDwTVuZlqAqLI=)
                          15: 64B971E05F1511ECBED92D34C4F9AE02.roa (hash: aJ7FSrQJbLnYWUhXmRxpHCTv/Yq+upCjLRh7PdkZWMM=)
                          16: 5C28B7DC91B211EC838CA523C4F9AE02.roa (hash: crKRXXM/J427gXLoL1vXGlLSDoYWn3lWggijaATf0co=)
                          17: F1C19444C18211EC95988F50C4F9AE02.roa (hash: BdqlZkqloZ/ssHZzJl2uDt1FJInYH8oNCg3LYxMHHyE=)
                          18: 53A6072E7AD611EC8A330A0CC4F9AE02.roa (hash: c9Z2TSZfqohxCIBb22YrZB4ezrswRH+F9Usd0k39src=)
                          19: 98EDBD8C91AF11EC8D647F26C4F9AE02.roa (hash: BblTx5HQY0ZaNn1tIob/PBXboJI6NchPbIZ11ypyKcI=)
                          20: 4B58FDE05DDC11ECBEA38D83C4F9AE02.roa (hash: 2CLv+ACMT3yLQgrQNEcW3dbGHb9Mc5rQuuD0ayJCAqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
                          rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1200 (0x4b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91618BC, serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
        Validity
            Not Before: Apr 25 00:08:21 2025 GMT
            Not After : May  2 00:08:21 2025 GMT
        Subject: CN=680ad275-a921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:9f:63:c0:13:74:fc:87:93:44:30:48:ca:
                    8d:6f:f3:8e:ec:ce:14:e3:ae:6e:1b:90:ba:f5:3a:
                    ee:ab:61:aa:6f:5d:fa:09:09:25:f0:e4:a2:bb:cd:
                    1c:13:a0:3b:fb:5c:37:a7:57:59:eb:f3:a0:b3:5f:
                    2b:eb:c7:70:e3:e6:b1:3c:24:08:3d:56:cb:5f:14:
                    e6:71:53:da:68:bd:bf:2c:13:a1:0b:96:17:74:da:
                    f8:7d:d4:4b:ae:99:26:c9:0e:4a:d5:81:48:23:8a:
                    c9:b4:8d:56:fb:2d:34:15:60:49:4f:76:ec:88:36:
                    61:00:ff:49:89:44:28:a8:f9:4e:5e:33:29:fb:80:
                    81:00:67:c1:46:f9:57:6b:7a:45:aa:40:e0:ea:65:
                    78:b2:71:2f:ef:09:90:c2:58:38:fb:10:13:21:15:
                    7c:c6:b7:d5:c8:9c:31:78:12:4d:4a:3a:e1:a7:19:
                    d3:9a:98:50:fc:34:50:cd:85:21:36:52:6e:4b:e7:
                    7e:c8:5c:74:e8:f1:36:52:a6:f0:95:0b:e9:3b:40:
                    ea:1c:e2:f0:a6:cb:d8:7f:56:b7:36:d6:4a:02:76:
                    d1:da:88:2a:f9:e2:67:20:5e:ad:c9:4d:5b:d0:ea:
                    ce:d6:84:4c:dc:56:05:48:f2:86:99:29:8b:56:5f:
                    ef:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C8:31:E6:50:B3:4E:D6:61:4A:3A:18:10:87:C0:53:63:60:2A:AD
            X509v3 Authority Key Identifier:
                keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1b:f5:c4:28:7d:24:5f:4e:9d:7b:b8:99:31:41:3b:a1:eb:
         59:c0:4f:52:6f:ef:a1:ce:a9:38:a8:51:f8:00:7e:cd:e2:35:
         16:04:26:00:d7:75:cf:7d:96:5b:ca:77:3a:ef:a1:a6:b4:b8:
         a2:0b:f4:32:22:b3:f5:19:3a:8b:3f:0b:b9:19:08:87:36:9b:
         22:38:8e:5c:64:2e:c7:68:9e:8a:a1:9d:20:ac:db:11:aa:46:
         37:13:b5:5f:9a:bd:87:21:d0:27:ca:36:d7:50:3e:38:67:05:
         47:74:2a:b9:fd:fa:91:ca:4f:99:aa:b7:6d:85:17:d7:a0:40:
         3c:e7:27:00:c9:73:37:a2:b7:65:af:4c:68:64:07:46:82:55:
         e0:3f:e8:29:b2:40:76:01:99:82:61:73:46:d3:94:aa:09:37:
         a4:dd:52:78:71:9b:c2:b1:bf:df:f4:26:ae:0b:37:3f:d3:eb:
         41:0f:c0:0c:56:07:8f:bf:df:7f:58:bc:ef:a4:a9:f5:b4:92:
         b4:42:1c:75:bf:f7:75:5d:b8:da:a7:72:f2:d3:5a:a8:a7:22:
         b1:83:a8:98:aa:9d:3b:08:4c:ab:90:5b:e9:74:84:f0:df:22:
         d0:ee:95:f1:04:10:5e:ab:92:1d:00:bb:87:1a:e1:a9:d7:2e:
         20:6f:fe:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:05:19 2025 by rpki-client