Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
File:                     gunGO3wseQh9WrEOid0oovfEnD4.mft (raw, json)
Hash identifier:          +AnZyUlFIC0NNpow1MUUe4/rky3hUwrrub/unzld/sA=
Subject key identifier:   3F:C4:0C:91:1F:8B:34:C6:C4:37:ED:30:F1:2A:E6:18:F1:F5:4B:68
Authority key identifier: 82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E
Certificate issuer:       /CN=A915308F/serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
Manifest number:          E9
Signing time:             Thu 03 Jul 2025 05:35:15 +0000
Manifest this update:     Thu 03 Jul 2025 05:35:14 +0000
Manifest next update:     Thu 10 Jul 2025 05:35:14 +0000
Files and hashes:         1: gunGO3wseQh9WrEOid0oovfEnD4.crl (hash: veWpc8pLymja8nDUKr3ikgCpUiP4MoMpsSSiZGrgmbI=)
                          2: 2AF6426EF71911EE82FD6B0EC4F9AE02.roa (hash: uKMqZt2qvb7h6qHUQjfxf24PgOE6TEH+nsPjU9i47sc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.crl
                          rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915308F, serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E
        Validity
            Not Before: Jul  3 05:35:14 2025 GMT
            Not After : Jul 10 05:35:14 2025 GMT
        Subject: CN=68661693-0e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e5:b4:e3:38:50:b4:c4:13:ac:bb:5e:42:8d:
                    3e:d6:64:67:fc:73:d0:ed:83:b7:c3:b4:89:71:0a:
                    eb:3e:7d:0b:54:6c:ef:9d:ae:94:a7:b5:c4:7b:34:
                    48:ac:37:18:77:91:a3:9e:31:8d:bb:f1:c5:e0:88:
                    74:8a:59:a4:43:0f:24:13:5f:95:bd:43:1d:cd:78:
                    6f:d2:0a:9b:d6:06:d1:9c:1b:01:5c:08:b9:cc:7c:
                    9d:66:83:d1:88:ba:90:8f:08:85:69:db:48:ac:91:
                    97:19:d1:cd:ba:af:5b:d9:3a:ee:91:1a:64:60:c0:
                    2c:8b:40:00:ea:ea:c6:be:29:0b:50:a7:f0:7b:21:
                    db:23:b0:fe:38:15:cb:8b:93:2b:db:ec:ec:02:64:
                    c2:9d:37:ff:d8:bb:25:c7:a9:82:e7:ba:af:53:1f:
                    87:20:e4:59:2e:01:5e:eb:03:fa:24:9b:9b:ac:93:
                    3a:97:0e:fd:c5:55:d9:79:0e:97:0f:69:a2:8b:cc:
                    07:49:8c:e5:60:52:38:1d:de:ba:20:34:0f:62:ce:
                    31:f3:70:57:85:b8:91:73:d0:eb:a7:01:a8:e7:17:
                    71:2c:5e:ca:5d:b6:cc:8d:f0:9b:2a:a2:f1:1b:ad:
                    a9:0b:ff:e3:78:26:69:e8:76:7e:86:e8:e4:de:12:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C4:0C:91:1F:8B:34:C6:C4:37:ED:30:F1:2A:E6:18:F1:F5:4B:68
            X509v3 Authority Key Identifier:
                keyid:82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:82:82:1c:f6:a7:26:e8:10:08:f3:20:de:ce:bc:5c:5a:67:
         0b:ef:5c:7a:b6:81:f6:3d:a3:4a:62:b0:58:d9:63:11:b8:3a:
         38:ac:50:ff:1b:c2:f5:0b:8b:74:e0:be:01:48:6d:fd:e5:40:
         03:39:a3:4b:df:cb:e7:f5:9a:7d:2d:85:12:c3:a7:38:d3:f9:
         db:c6:e6:cf:4a:91:99:11:f9:13:ff:9e:e8:56:18:f9:73:01:
         e6:0b:6a:74:35:13:99:42:1d:ba:72:01:1f:a2:ff:f1:20:31:
         99:e7:fe:5e:4d:9b:c5:0e:48:9c:e0:68:d9:18:7c:13:67:a9:
         f3:84:dc:25:70:7b:8a:fd:d5:1c:7e:e2:c9:be:96:01:65:0c:
         20:1a:c6:99:33:74:5d:77:31:84:74:be:ff:9b:9e:b6:a7:44:
         8b:b1:bc:da:3f:b0:62:4b:e0:eb:7e:90:aa:d2:ec:48:72:88:
         e2:22:1f:70:7d:29:a8:f9:24:28:fb:03:a7:46:8c:d2:cc:ad:
         17:50:63:63:13:87:af:a6:36:57:f8:4c:bc:49:2f:52:73:99:
         78:e2:cc:ca:dc:62:a8:39:90:21:cc:97:8f:a1:ce:8b:3c:e3:
         c0:0e:33:91:4c:50:85:71:77:ff:89:6f:2e:0f:0c:d6:09:38:
         18:ad:06:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:36:32 2025 by rpki-client