Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.mft
File:                     GUG9CIuIgrZhVo5krJLeasogoFY.mft (raw, json)
Hash identifier:          KekrgyN7Ld115On9hJupix+B+4Pj+jeAcCpjVO3HWjg=
Subject key identifier:   D0:0E:C8:7A:D3:16:0A:E3:6C:3D:9C:EE:E4:9C:FD:94:A6:CB:01:09
Authority key identifier: 19:41:BD:08:8B:88:82:B6:61:56:8E:64:AC:92:DE:6A:CA:20:A0:56
Certificate issuer:       /CN=A914AD92/serialNumber=1941BD088B8882B661568E64AC92DE6ACA20A056
Certificate serial:       0310
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUG9CIuIgrZhVo5krJLeasogoFY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.mft
Manifest number:          03FF
Signing time:             Sat 23 Nov 2024 00:46:55 +0000
Manifest this update:     Sat 23 Nov 2024 00:46:54 +0000
Manifest next update:     Sat 30 Nov 2024 00:46:54 +0000
Files and hashes:         1: GUG9CIuIgrZhVo5krJLeasogoFY.crl (hash: v2xeao6N33rK0ns4ZaYnbj1zELyWjeFZYycmorTLGwY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.crl
                          rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUG9CIuIgrZhVo5krJLeasogoFY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 00:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 784 (0x310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AD92/serialNumber=1941BD088B8882B661568E64AC92DE6ACA20A056
        Validity
            Not Before: Nov 23 00:46:54 2024 GMT
            Not After : Nov 30 00:46:54 2024 GMT
        Subject: CN=674125ff-0855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:78:ca:95:64:89:e8:44:33:5c:f8:97:31:7f:
                    dc:77:aa:2a:b7:24:e5:b4:7a:6f:1b:99:37:ca:ad:
                    38:17:0f:ce:fc:ff:b5:73:1b:5d:92:cf:ab:df:b2:
                    87:d1:7e:a5:65:f6:35:b4:74:da:d3:12:9d:54:44:
                    d4:8a:78:69:d1:18:0d:42:19:55:93:ae:d0:c8:84:
                    88:ea:07:6a:bd:f7:8c:a6:53:47:f4:77:f3:7d:22:
                    80:81:3d:89:8a:90:da:11:e7:ab:a5:88:c8:31:7d:
                    bf:43:6c:12:fa:de:74:6c:59:af:9c:5e:f6:27:d5:
                    b1:75:00:2f:2f:6b:ab:8d:8e:c8:b5:fc:8a:4a:4e:
                    f7:94:09:3e:04:62:94:2d:54:b4:1c:89:28:db:6f:
                    08:69:96:ad:92:71:c6:e7:98:4e:75:1e:85:d6:4d:
                    63:20:39:76:36:2d:19:d7:67:00:1b:d7:68:19:8e:
                    f8:cf:b2:93:d5:24:0e:ee:48:0a:eb:b3:61:9a:8d:
                    a6:e8:71:11:7f:f6:38:49:96:3f:e0:c0:c9:b4:a7:
                    21:86:b2:5b:40:51:46:23:41:25:4b:f2:4b:c0:3b:
                    8b:1f:3a:c3:63:15:43:c0:11:64:8c:a1:22:c8:74:
                    44:f2:14:f8:fb:e2:31:3a:42:94:41:f7:6f:48:8e:
                    7a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0E:C8:7A:D3:16:0A:E3:6C:3D:9C:EE:E4:9C:FD:94:A6:CB:01:09
            X509v3 Authority Key Identifier:
                keyid:19:41:BD:08:8B:88:82:B6:61:56:8E:64:AC:92:DE:6A:CA:20:A0:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUG9CIuIgrZhVo5krJLeasogoFY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b4:a2:25:85:5c:7c:c9:0c:34:b4:d6:4c:35:37:1d:40:01:
         63:6b:9d:3f:96:62:44:60:c4:a7:08:52:b0:15:19:b9:46:d2:
         66:95:d3:2a:32:36:6c:63:88:9a:d8:23:dc:61:8e:59:1a:2f:
         28:f9:23:87:47:aa:b7:96:17:20:37:a7:b7:2d:4b:a1:cf:2f:
         39:e6:9c:69:4d:fb:4c:1c:72:ad:83:ae:99:2c:4f:37:f4:0c:
         82:cd:40:85:38:ee:6a:d4:82:9c:67:bd:ed:ee:3d:4a:f3:9c:
         29:a3:24:e0:44:2d:5a:90:14:ef:7e:1a:38:b0:30:a8:a0:05:
         ec:79:ed:d1:14:05:f3:22:49:8d:f2:79:fe:f7:93:9b:a9:65:
         0c:45:43:90:af:5f:c9:fe:41:5d:2b:3f:75:ec:3d:d4:21:f0:
         ad:a7:43:b3:5a:17:bd:d1:47:f8:06:c3:c9:41:e0:50:38:c3:
         82:f8:24:c5:57:02:05:e1:ce:ce:7a:20:ca:f7:6c:04:76:5e:
         96:d4:19:38:19:53:5c:a7:cc:f6:db:f8:78:7e:5c:97:4b:7c:
         54:b1:0b:cd:76:1f:ad:4c:15:d9:a3:67:d4:af:8d:3c:3f:50:
         18:97:6e:eb:b2:22:d8:6c:a6:ec:f1:9e:c7:bc:3e:48:8a:a9:
         00:34:fa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:38 2024 by rpki-client on console-ams.rpki-client.org