Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
File:                     gunGO3wseQh9WrEOid0oovfEnD4.mft (raw, json)
Hash identifier:          jetna+qPdooro5mUTmJ+uhUqxACkTg1Z39JoHNbjUhA=
Subject key identifier:   D1:AA:DF:A9:32:45:E9:AD:27:9B:88:3E:E6:FC:0F:51:C3:80:80:E7
Authority key identifier: 82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E
Certificate issuer:       /CN=A915308F/serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
Manifest number:          C5
Signing time:             Fri 25 Apr 2025 04:51:02 +0000
Manifest this update:     Fri 25 Apr 2025 04:51:01 +0000
Manifest next update:     Fri 02 May 2025 04:51:01 +0000
Files and hashes:         1: gunGO3wseQh9WrEOid0oovfEnD4.crl (hash: Ny+yt/3inNPlkCVL0nTwmKInjbxiQUo5KOMB4DCT+/Q=)
                          2: 2AF6426EF71911EE82FD6B0EC4F9AE02.roa (hash: T3FHkQFBnR1D7G7E+6iXElBbCR/lDFKEW2aPMQWoc4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.crl
                          rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915308F, serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E
        Validity
            Not Before: Apr 25 04:51:01 2025 GMT
            Not After : May  2 04:51:01 2025 GMT
        Subject: CN=680b14b5-1937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4c:df:0c:e7:bc:42:1f:94:cf:79:0a:b7:74:
                    c7:bf:3f:77:2e:60:45:c8:35:ae:e1:a5:fc:d4:96:
                    13:2c:ad:96:97:59:e1:6a:ba:ba:59:56:fd:ff:fc:
                    c5:68:d4:e6:5a:34:df:0b:a0:3d:00:ec:5a:87:8a:
                    46:4e:7d:06:6f:88:68:08:3a:cc:79:c0:65:49:71:
                    2b:7e:3b:f5:16:4a:95:62:c8:0a:f1:c6:45:e4:5b:
                    b4:98:5c:f2:33:e0:96:06:92:ed:4a:d8:62:52:27:
                    b7:3d:f7:79:1d:af:a0:02:96:b3:7a:a9:5f:36:a4:
                    57:af:d3:65:ce:aa:89:21:34:b0:26:f3:e0:5f:b5:
                    54:0c:7f:ae:6b:f1:89:88:1c:53:41:2c:6b:05:bc:
                    a3:f7:a4:dc:a9:86:65:28:5b:a7:28:af:46:ce:24:
                    9f:58:15:53:71:fc:88:e0:e8:71:5c:82:f2:75:6d:
                    b4:d1:e9:e0:f6:65:d1:0f:c0:38:84:a6:60:8f:f2:
                    47:bf:38:14:10:8d:d4:8a:97:bb:1b:ee:f4:0f:3b:
                    1e:d1:36:47:07:0e:56:ec:6e:f4:90:6f:3c:4c:b6:
                    96:8b:e6:69:7a:39:5e:88:d3:76:07:fa:e9:68:e9:
                    f2:dd:41:eb:b5:11:bb:79:1c:3b:fc:10:4e:bb:f0:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AA:DF:A9:32:45:E9:AD:27:9B:88:3E:E6:FC:0F:51:C3:80:80:E7
            X509v3 Authority Key Identifier:
                keyid:82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:80:a4:2d:f0:30:d5:09:3d:e7:8a:91:e1:18:d2:5f:a4:7d:
         53:84:bc:7a:ef:a7:1f:84:20:69:3e:fa:02:93:4e:ba:9c:5f:
         3b:36:67:cd:a9:df:79:45:ef:73:78:62:c7:f2:57:de:f5:43:
         28:a8:6e:fa:97:55:80:b1:23:9d:68:00:04:9d:fe:cc:a5:11:
         3d:58:d1:16:34:fc:cc:cb:53:c1:82:38:ad:13:61:44:42:69:
         2c:94:4c:7d:7d:43:8a:9f:17:bd:ce:08:5a:f2:1a:f5:51:9c:
         88:e5:b8:80:20:f2:f0:9f:a5:fd:11:a5:7d:fb:7c:97:09:77:
         4e:51:8a:b3:39:20:8a:3d:c8:6d:9d:54:48:94:1e:07:87:3f:
         13:a5:96:45:62:14:7e:47:fd:38:54:c4:98:b9:48:82:f8:14:
         17:b5:d9:df:63:0a:d5:1e:a1:ff:60:7a:f8:3e:77:fc:06:af:
         48:24:65:14:d8:cf:31:4b:73:c4:e0:59:a2:ce:7a:6f:cb:f2:
         d9:a4:6c:02:ca:53:b1:b9:89:9b:d5:0f:5d:cb:fd:d8:62:90:
         c7:96:12:67:20:6d:77:30:b9:fb:4e:01:45:11:92:78:bb:59:
         ac:fb:9a:e3:ab:a7:11:64:f1:fe:8c:be:ac:d5:c8:fb:40:76:
         13:14:f4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:11:25 2025 by rpki-client