Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
File:                     guQjhs0B-IaA3TAN-_-ittLn5OY.mft (raw, json)
Hash identifier:          WVSeYB0IlUqTq2uYI3kSkJsAWiPmXYP9wmdZx2Z71IA=
Subject key identifier:   01:4F:8B:34:4E:BC:17:7F:A0:0E:91:6F:7C:76:21:23:23:F4:EB:76
Authority key identifier: 82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6
Certificate issuer:       /CN=A919D530/serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
Manifest number:          97
Signing time:             Fri 25 Apr 2025 05:22:26 +0000
Manifest this update:     Fri 25 Apr 2025 05:22:26 +0000
Manifest next update:     Fri 02 May 2025 05:22:26 +0000
Files and hashes:         1: guQjhs0B-IaA3TAN-_-ittLn5OY.crl (hash: Vj6aHcfRE45aHHCF8M2J3TCsTJke6Ybqdi5E24nAy28=)
                          2: A48F17F6406411EF96445E28C4F9AE02.roa (hash: dU6ZhGBTE9jsEZ9VkhD8M1OiGZ+Y8waNKYfclqDZAjs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl
                          rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D530, serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
        Validity
            Not Before: Apr 25 05:22:26 2025 GMT
            Not After : May  2 05:22:26 2025 GMT
        Subject: CN=680b1c12-dd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:04:33:a8:63:0a:9f:0e:c5:7c:b0:88:c7:93:
                    3f:dc:c8:3d:1b:3f:89:10:72:33:5b:49:8c:2f:c5:
                    a3:54:ff:72:ed:59:56:9f:db:86:a0:c3:b4:58:48:
                    a6:4a:47:d9:e5:22:10:9d:e6:a6:f6:32:f5:6c:53:
                    af:67:b0:3a:d6:63:b7:2b:75:24:c2:2a:90:94:82:
                    64:8b:15:94:e6:d4:4b:68:43:e3:d8:81:68:a6:77:
                    76:3b:e9:18:f5:7f:35:0e:32:cf:fd:ef:fa:9c:ae:
                    a9:98:3f:f2:00:4f:5f:26:12:38:ce:68:25:ee:6e:
                    b1:5c:73:50:6c:09:c8:b1:73:5c:f0:5b:3d:1a:01:
                    eb:a5:83:ff:a8:63:77:a4:1c:09:b3:69:6b:1b:21:
                    0b:1c:cb:21:91:eb:2c:0f:c4:3a:ff:16:44:84:0e:
                    79:e0:32:09:f8:b9:32:de:92:be:33:a8:be:5a:66:
                    cd:af:ee:81:f2:35:2f:fe:13:d1:c8:4d:ef:65:37:
                    8e:d3:d6:f5:53:31:14:e6:86:8d:47:be:7e:60:50:
                    52:55:94:e8:e7:73:bf:b3:2a:77:e6:63:53:5a:8a:
                    6c:10:49:21:d6:86:49:71:c8:65:47:16:a2:3e:98:
                    92:50:2d:b6:62:58:84:41:78:a0:f2:da:d3:0f:10:
                    0f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4F:8B:34:4E:BC:17:7F:A0:0E:91:6F:7C:76:21:23:23:F4:EB:76
            X509v3 Authority Key Identifier:
                keyid:82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:45:5b:4e:1e:e5:71:89:fb:1c:49:22:4f:64:8a:2c:b2:10:
         f9:73:d7:07:8b:bd:c1:f6:eb:de:db:3c:af:bd:da:97:76:68:
         8a:05:6b:55:f4:7b:f1:90:55:89:79:14:0e:2a:55:f2:c1:f8:
         69:7c:05:2a:7d:83:b8:62:52:38:be:f0:ef:c6:46:3a:dd:e4:
         ac:b3:93:94:2b:a7:c1:b9:00:d6:d0:ea:91:29:b3:a8:24:df:
         53:b3:fd:8e:40:7b:41:07:a0:31:15:c6:59:0a:c6:80:24:db:
         7a:45:d1:70:ca:aa:9a:5b:99:e8:d1:8d:77:68:36:bb:19:c7:
         8f:6c:49:82:bc:35:a0:e4:9f:4b:c3:19:ca:78:92:f7:79:0b:
         1e:7f:1d:bb:e8:35:05:8a:72:e2:65:2c:c5:e8:f9:5f:ab:40:
         bf:6c:90:df:dc:5f:82:d6:eb:43:74:59:91:dd:b3:f0:6e:63:
         19:1a:39:fe:b3:6f:b3:64:60:14:c9:a1:27:4e:5a:fa:92:17:
         27:73:9d:22:40:29:61:8e:4b:e8:3b:1e:72:04:61:9b:f5:bb:
         8a:8c:f1:c1:f7:9e:98:8b:fc:af:dd:30:11:72:93:a1:93:6d:
         22:0c:b7:2a:4c:00:0f:2f:78:7c:d5:6e:4c:38:dd:7c:20:a5:
         0d:df:48:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ1MzAxMTAvBgNVBAUTKDgyRTQyMzg2Q0QwMUY4ODY4MEREMzAwREZCRkZBMkI2
RDJFN0U0RTYwHhcNMjUwNDI1MDUyMjI2WhcNMjUwNTAyMDUyMjI2WjAYMRYwFAYD
VQQDEw02ODBiMWMxMi1kZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8gQzqGMKnw7FfLCIx5M/3Mg9Gz+JEHIzW0mML8WjVP9y7VlWn9uGoMO0WEim
SkfZ5SIQneam9jL1bFOvZ7A61mO3K3UkwiqQlIJkixWU5tRLaEPj2IFopnd2O+kY
9X81DjLP/e/6nK6pmD/yAE9fJhI4zmgl7m6xXHNQbAnIsXNc8Fs9GgHrpYP/qGN3
pBwJs2lrGyELHMshkessD8Q6/xZEhA554DIJ+Lky3pK+M6i+WmbNr+6B8jUv/hPR
yE3vZTeO09b1UzEU5oaNR75+YFBSVZTo53O/syp35mNTWopsEEkh1oZJcchlRxai
PpiSUC22YliEQXig8trTDxAPOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFPizRO
vBd/oA6Rb3x2ISMj9Ot2MB8GA1UdIwQYMBaAFILkI4bNAfiGgN0wDfv/orbS5+Tm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzMC81RTU1RjY1NjQw
NjQxMUVGQTNDNUI4MjdDNEY5QUUwMi9ndVFqaHMwQi1JYUEzVEFOLV8taXR0TG41
T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d1UWpoczBCLUlhQTNUQU4tXy1pdHRMbjVPWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDUzMC81RTU1RjY1NjQwNjQxMUVGQTNDNUI4MjdDNEY5QUUwMi9ndVFqaHMwQi1J
YUEzVEFOLV8taXR0TG41T1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkRVtOHuVxifscSSJPZIosshD5c9cHi73B9uve2zyvvdqXdmiKBWtV
9HvxkFWJeRQOKlXywfhpfAUqfYO4YlI4vvDvxkY63eSss5OUK6fBuQDW0OqRKbOo
JN9Ts/2OQHtBB6AxFcZZCsaAJNt6RdFwyqqaW5no0Y13aDa7GcePbEmCvDWg5J9L
wxnKeJL3eQsefx276DUFinLiZSzF6Plfq0C/bJDf3F+C1utDdFmR3bPwbmMZGjn+
s2+zZGAUyaEnTlr6khcnc50iQClhjkvoOx5yBGGb9buKjPHB956Yi/yv3TARcpOh
k20iDLcqTAAPL3h81W5MON18IKUN30hd
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:03 2025 by rpki-client