Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
File:                     GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft (raw, json)
Hash identifier:          e/0smXBmOL7sWrku4EXbOMhz5XCGl4bAquptlYID2f0=
Subject key identifier:   22:DD:96:43:33:87:55:F0:87:7E:25:86:BF:7D:38:1C:B5:27:F1:0A
Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77
Certificate issuer:       /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
Certificate serial:       04F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
Manifest number:          0491
Signing time:             Sat 23 Aug 2025 00:24:20 +0000
Manifest this update:     Sat 23 Aug 2025 00:24:19 +0000
Manifest next update:     Sat 30 Aug 2025 00:24:19 +0000
Files and hashes:         1: GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl (hash: oZtgI6O+qvOA4P6QCx7gnHgAtIhwkN8gQoUfGKtOuYY=)
                          2: 3CA46D445C4511ED9CD04525C4F9AE02.roa (hash: 7aee9pO5qmX/myo10tCeAvwIzNEzqsvOcdVOpE1hXkM=)
                          3: 67C2BFEC61EC11EDB740B02AC4F9AE02.roa (hash: +szwE1FqYlbLsPgP09GKHckFA87HXpfsxHfu0nFoUaM=)
                          4: A07678D893DD11ED8CA1B551C4F9AE02.roa (hash: qkkPmiKCotm8xDRLsYOYAa7+VqT8w5zL4Yd9LFXCYYg=)
                          5: 49FBE75A5DDC11ECBEA38D83C4F9AE02.roa (hash: 36x6Ech6L5Z42HwNzvc0lPGVa1TxtkLzDQK9Id2F9fA=)
                          6: 643F4A3E360611F09EAB971EC4F9AE02.roa (hash: WYALurcwi6KRd5Ja7Gk61M8Sm/VsFQDEWuo3cpkPK1w=)
                          7: FF4410C626C011EDAFBE455EC4F9AE02.roa (hash: x4jpGii4seS1HNgRIha6j22bPt7teTUTJr4Ar/gXVac=)
                          8: 5C28B7DC91B211EC838CA523C4F9AE02.roa (hash: crKRXXM/J427gXLoL1vXGlLSDoYWn3lWggijaATf0co=)
                          9: 9D08DA3E583311F0AA48A80AC4F9AE02.roa (hash: AL1JMXy1RB8REJ+5zhEsJp8t8CMFdCo3SoHeLew0wC4=)
                          10: 53A6072E7AD611EC8A330A0CC4F9AE02.roa (hash: c9Z2TSZfqohxCIBb22YrZB4ezrswRH+F9Usd0k39src=)
                          11: 4472E7B85B6011F0A2E8311CC4F9AE02.roa (hash: T5/KdpDeKUQiXnSS9T8mbCWPeI35IszMHYXsXr691fk=)
                          12: 9CEB71A45BA811ED875C2452C4F9AE02.roa (hash: w7apuGkBrd33vO4iaNCejeb+aGRR6IgdY/JRsgg6JxE=)
                          13: E7ECA23C696D11ECAD19A72DC4F9AE02.roa (hash: IQfnm1lD1TwZPDI1DiH1YZzvOmEYmRUGs/+efPt46Cs=)
                          14: 98EDBD8C91AF11EC8D647F26C4F9AE02.roa (hash: BblTx5HQY0ZaNn1tIob/PBXboJI6NchPbIZ11ypyKcI=)
                          15: 4B58FDE05DDC11ECBEA38D83C4F9AE02.roa (hash: 2CLv+ACMT3yLQgrQNEcW3dbGHb9Mc5rQuuD0ayJCAqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl
                          rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1268 (0x4f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91618BC, serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77
        Validity
            Not Before: Aug 23 00:24:19 2025 GMT
            Not After : Aug 30 00:24:19 2025 GMT
        Subject: CN=68a90a33-02cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:ba:19:c4:1d:5a:cd:62:c5:5e:27:d1:b7:
                    16:01:77:6b:3c:f8:60:0a:01:37:9f:22:cd:a1:9e:
                    f1:2a:b3:8a:a7:b7:11:bb:7f:58:12:66:fa:8b:7c:
                    be:66:bc:ff:53:84:8d:27:97:45:53:88:7a:08:97:
                    76:91:fb:bd:63:2e:32:65:19:03:11:81:ed:86:1d:
                    25:9d:a5:66:d8:68:e7:86:dd:3c:41:e2:04:ed:c4:
                    48:9c:7c:dd:d2:b2:e9:18:77:f6:9d:f3:b9:ed:56:
                    5f:3f:0e:98:d2:54:6f:5b:14:2e:6f:d9:60:a9:99:
                    c4:a3:f2:b2:86:b9:43:09:4d:32:8c:f9:6d:27:31:
                    c2:9d:cb:20:58:f7:e0:63:02:c5:c8:e8:41:4f:67:
                    41:5f:db:d9:58:40:42:5c:74:52:2e:97:9f:58:c7:
                    ae:07:e7:e6:e2:b3:cf:e3:9c:d0:db:17:a9:e3:2f:
                    6a:68:f6:7d:44:9c:6d:1c:eb:77:0a:33:d3:91:ff:
                    46:d7:e2:8f:5a:42:75:37:7a:5f:fe:92:f7:e2:f0:
                    9b:71:47:dd:84:c7:dc:06:ea:08:be:e9:ed:8b:ed:
                    40:59:91:98:d7:18:64:da:29:94:1f:60:4b:05:b8:
                    7b:eb:db:79:d4:8f:86:3e:04:9d:45:92:91:5c:bb:
                    cd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DD:96:43:33:87:55:F0:87:7E:25:86:BF:7D:38:1C:B5:27:F1:0A
            X509v3 Authority Key Identifier:
                keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e0:47:21:10:c2:ca:9c:d9:64:db:7c:47:fc:61:8a:5f:75:
         a6:43:0c:28:76:c9:c1:47:f6:18:c1:08:78:74:08:c7:43:97:
         a7:5d:0b:ae:96:1f:3a:af:eb:1d:aa:e1:10:24:ec:2f:61:26:
         46:f1:73:c9:00:da:fd:55:97:bb:43:4d:a0:68:e4:c4:63:21:
         d7:4e:3d:3f:f5:33:38:24:ea:9d:3d:23:da:1c:01:d4:fa:38:
         4f:e8:59:8c:8f:67:32:b8:17:ab:68:f1:c8:85:a5:90:67:5a:
         ff:6f:c0:3c:98:65:4e:15:ce:e6:ff:bb:04:f7:ac:28:32:a6:
         3e:ab:39:21:0e:6d:57:39:3e:54:af:27:0e:c3:53:66:7c:99:
         a5:dc:ed:6b:be:9b:97:77:38:3c:f4:de:84:5c:dd:82:49:48:
         97:e5:94:7e:f8:10:20:b3:8b:c5:eb:3c:38:47:63:4d:c1:7c:
         72:59:67:36:6d:e8:98:d0:c8:c7:5a:2c:ff:b2:06:2f:97:ad:
         96:a4:a6:5d:d8:3a:f9:ae:e3:5d:90:b1:36:b9:2d:c5:80:a4:
         d5:1d:78:30:85:b1:59:55:48:46:c2:0d:e2:a5:22:90:2c:fe:
         99:af:da:43:dc:18:70:2f:2d:22:e2:96:7e:b2:20:7f:fb:25:
         a5:fe:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:00:22 2025 by rpki-client