Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
File:                     GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft (raw, json)
Hash identifier:          IOfF/FrNB/WbHg/3wnDaF01pa+6t8LVjUag2iQqk/sE=
Subject key identifier:   CC:32:33:52:60:F2:0B:A8:F4:A7:1B:AA:B8:4E:B6:42:8B:B5:92:5A
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Certificate issuer:       /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial:       04B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
Manifest number:          0451
Signing time:             Sun 27 Apr 2025 00:00:23 +0000
Manifest this update:     Sun 27 Apr 2025 00:00:23 +0000
Manifest next update:     Sun 04 May 2025 00:00:23 +0000
Files and hashes:         1: GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl (hash: eWgNNawUbGhm86X4L+/r2Gm4H1dc5v8LRKBMy180aIw=)
                          2: 3CA46D445C4511ED9CD04525C4F9AE02.roa (hash: 7aee9pO5qmX/myo10tCeAvwIzNEzqsvOcdVOpE1hXkM=)
                          3: A880F416819311ECB7B48D5EC4F9AE02.roa (hash: aB3/PZRviqMI1UasxK3HBIncJPU2Y+t7Df9xEhhUmZw=)
                          4: 49FBE75A5DDC11ECBEA38D83C4F9AE02.roa (hash: 36x6Ech6L5Z42HwNzvc0lPGVa1TxtkLzDQK9Id2F9fA=)
                          5: 1F1C0F0C64F711EC8F36652AC4F9AE02.roa (hash: osNPWRTEC30CVSzDSV8u5vPgQOKg93irw3f7/1nyvR4=)
                          6: FF4410C626C011EDAFBE455EC4F9AE02.roa (hash: x4jpGii4seS1HNgRIha6j22bPt7teTUTJr4Ar/gXVac=)
                          7: E7ECA23C696D11ECAD19A72DC4F9AE02.roa (hash: IQfnm1lD1TwZPDI1DiH1YZzvOmEYmRUGs/+efPt46Cs=)
                          8: 9CEB71A45BA811ED875C2452C4F9AE02.roa (hash: w7apuGkBrd33vO4iaNCejeb+aGRR6IgdY/JRsgg6JxE=)
                          9: A07678D893DD11ED8CA1B551C4F9AE02.roa (hash: qkkPmiKCotm8xDRLsYOYAa7+VqT8w5zL4Yd9LFXCYYg=)
                          10: 5CAAB66A91B211EC838CA523C4F9AE02.roa (hash: bhzzba09CTE3+5Ci3mIR3nBjvndFl9JG79VoVnViei8=)
                          11: 67C2BFEC61EC11EDB740B02AC4F9AE02.roa (hash: +szwE1FqYlbLsPgP09GKHckFA87HXpfsxHfu0nFoUaM=)
                          12: 661CE74E912511EE9FB03869C4F9AE02.roa (hash: Aip9w89ovKKGqYrukOFS6DwgaaU9mE2ENF2KcNHOmoM=)
                          13: 3BF787825C4511ED9CD04525C4F9AE02.roa (hash: LIENBvmMrRIxmnzlElXveDjHkViAX5FdLQn69HvX/+Q=)
                          14: 13E97B38F84511ECAB467675C4F9AE02.roa (hash: BuodXTi20VWm3wasrjwSwE/7hVKxN+RDwTVuZlqAqLI=)
                          15: 64B971E05F1511ECBED92D34C4F9AE02.roa (hash: aJ7FSrQJbLnYWUhXmRxpHCTv/Yq+upCjLRh7PdkZWMM=)
                          16: 5C28B7DC91B211EC838CA523C4F9AE02.roa (hash: crKRXXM/J427gXLoL1vXGlLSDoYWn3lWggijaATf0co=)
                          17: F1C19444C18211EC95988F50C4F9AE02.roa (hash: BdqlZkqloZ/ssHZzJl2uDt1FJInYH8oNCg3LYxMHHyE=)
                          18: 53A6072E7AD611EC8A330A0CC4F9AE02.roa (hash: c9Z2TSZfqohxCIBb22YrZB4ezrswRH+F9Usd0k39src=)
                          19: 98EDBD8C91AF11EC8D647F26C4F9AE02.roa (hash: BblTx5HQY0ZaNn1tIob/PBXboJI6NchPbIZ11ypyKcI=)
                          20: 4B58FDE05DDC11ECBEA38D83C4F9AE02.roa (hash: 2CLv+ACMT3yLQgrQNEcW3dbGHb9Mc5rQuuD0ayJCAqA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
                          rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1201 (0x4b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91618BC, serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
        Validity
            Not Before: Apr 27 00:00:23 2025 GMT
            Not After : May  4 00:00:23 2025 GMT
        Subject: CN=680d7397-3c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:83:86:78:a0:2a:b3:5b:6b:6c:98:f2:5c:7e:
                    04:b8:be:55:ed:91:23:63:ff:fa:48:95:fe:0c:5f:
                    6f:f1:d9:c5:62:fa:fd:c7:70:62:93:1d:e2:e0:81:
                    28:a7:c5:e0:c2:04:8a:1e:bb:df:26:e5:b7:f9:45:
                    85:80:a3:fb:ea:2d:4c:6f:52:09:b8:15:fe:e6:62:
                    fc:6c:55:e1:3e:a1:02:95:67:12:92:c2:a4:7c:61:
                    9f:60:46:40:84:8e:34:0d:a0:5b:f8:f1:bd:d5:80:
                    4a:a5:25:7d:f9:27:d2:38:83:51:cc:f4:bc:5a:8e:
                    ba:7b:a8:eb:44:05:85:12:65:87:93:e0:9b:31:a0:
                    47:3d:c5:db:c5:12:78:4e:37:cb:4f:66:99:78:14:
                    f6:cd:0a:da:e0:9c:69:4e:06:8c:11:15:02:4d:88:
                    8e:d2:c2:8b:3a:a8:e7:06:67:ee:3f:e0:01:1d:9a:
                    14:50:72:72:24:b0:02:67:e6:3a:ae:85:47:24:96:
                    08:15:5e:ca:18:6f:cb:c0:61:00:ea:f5:ca:59:94:
                    eb:f3:48:37:61:1d:a3:28:01:62:13:79:ee:d2:18:
                    fe:af:c7:51:0b:76:9d:37:ca:cd:dd:af:b8:d3:8d:
                    2e:dc:09:c4:e1:62:ba:77:67:ea:e9:ff:3e:4f:e8:
                    3b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:32:33:52:60:F2:0B:A8:F4:A7:1B:AA:B8:4E:B6:42:8B:B5:92:5A
            X509v3 Authority Key Identifier:
                keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:89:dd:4f:e1:08:33:8c:75:01:e2:2c:4c:61:79:50:95:ac:
         79:f9:56:e7:03:6a:aa:5a:26:81:6f:6d:00:fa:5c:4b:d1:39:
         0a:c7:ad:a7:7a:78:52:91:91:41:0c:4e:9d:7d:2a:1b:c9:24:
         fd:d4:a9:3e:85:1b:69:ac:c1:db:5f:22:0e:0b:71:1e:6e:fa:
         d7:d8:33:e4:32:b3:71:a7:4f:38:87:6b:9f:c7:51:63:f1:62:
         07:ec:87:03:cf:d0:ed:c7:4d:fc:97:80:f2:37:a3:0b:02:e7:
         7d:66:0f:9f:fe:bd:1b:f9:ef:e7:7a:24:68:5b:f9:ab:34:97:
         c5:f4:6a:ed:18:80:3b:ec:39:d6:8c:8c:e3:09:8e:f4:ae:55:
         3c:92:3e:66:4b:d7:eb:39:b5:09:a4:fc:e5:01:f4:fb:2c:21:
         00:fd:47:cd:83:35:ee:96:ec:25:1e:1b:f6:82:5c:67:8f:08:
         14:a9:7f:50:bf:c0:0e:0f:31:a9:37:df:77:0d:f5:f7:d6:74:
         65:d3:e7:67:fe:75:c0:bd:51:ef:cd:66:0f:3a:91:07:86:a4:
         ce:c1:fb:8c:8f:5a:38:97:3b:c4:ad:af:1a:9b:49:fe:76:c4:
         10:22:67:02:11:b5:44:51:a8:bd:17:65:50:e5:ec:ab:ee:4e:
         54:5d:31:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE4QkMxMTAvBgNVBAUTKDFBRUJDRDgyRDcwMjgzNDNCNzQ1QUQ0MDY3MzlDREI5
MkQ0REZCNzcwHhcNMjUwNDI3MDAwMDIzWhcNMjUwNTA0MDAwMDIzWjAYMRYwFAYD
VQQDEw02ODBkNzM5Ny0zYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA14OGeKAqs1trbJjyXH4EuL5V7ZEjY//6SJX+DF9v8dnFYvr9x3Bikx3i4IEo
p8XgwgSKHrvfJuW3+UWFgKP76i1Mb1IJuBX+5mL8bFXhPqEClWcSksKkfGGfYEZA
hI40DaBb+PG91YBKpSV9+SfSOINRzPS8Wo66e6jrRAWFEmWHk+CbMaBHPcXbxRJ4
TjfLT2aZeBT2zQra4JxpTgaMERUCTYiO0sKLOqjnBmfuP+ABHZoUUHJyJLACZ+Y6
roVHJJYIFV7KGG/LwGEA6vXKWZTr80g3YR2jKAFiE3nu0hj+r8dRC3adN8rN3a+4
040u3AnE4WK6d2fq6f8+T+g7jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwyM1Jg
8guo9KcbqrhOtkKLtZJaMB8GA1UdIwQYMBaAFBrrzYLXAoNDt0WtQGc5zbktTft3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThCQy9FRDdCNjJBQzVE
ODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cwTzNSYTFBWnpuTnVTMU4t
M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d1dk5ndGNDZzBPM1JhMUFaem5OdVMxTi0zYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MThCQy9FRDdCNjJBQzVEODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cw
TzNSYTFBWnpuTnVTMU4tM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgid1P4QgzjHUB4ixMYXlQlax5+VbnA2qqWiaBb20A+lxL0TkKx62n
enhSkZFBDE6dfSobyST91Kk+hRtprMHbXyIOC3EebvrX2DPkMrNxp084h2ufx1Fj
8WIH7IcDz9Dtx038l4DyN6MLAud9Zg+f/r0b+e/neiRoW/mrNJfF9GrtGIA77DnW
jIzjCY70rlU8kj5mS9frObUJpPzlAfT7LCEA/UfNgzXuluwlHhv2glxnjwgUqX9Q
v8AODzGpN993DfX31nRl0+dn/nXAvVHvzWYPOpEHhqTOwfuMj1o4lzvEra8am0n+
dsQQImcCEbVEUai9F2VQ5eyr7k5UXTHy
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:54 2025 by rpki-client on console.sobornost.net