Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
File:                     gunGO3wseQh9WrEOid0oovfEnD4.mft (raw, json)
Hash identifier:          7Ba1qVIDjhG+Mop9F+UCwK4tskVDACy0gIDkCmcmoTk=
Subject key identifier:   57:1A:A0:8D:DD:47:A5:4F:1C:7B:7A:12:63:7B:FF:6B:90:D0:82:1E
Authority key identifier: 82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E
Certificate issuer:       /CN=A915308F/serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E
Certificate serial:       19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
Manifest number:          18
Signing time:             Sun 19 May 2024 08:45:55 +0000
Manifest this update:     Sun 19 May 2024 08:45:55 +0000
Manifest next update:     Sun 26 May 2024 08:45:55 +0000
Files and hashes:         1: gunGO3wseQh9WrEOid0oovfEnD4.crl (hash: yiEHsexkUdDWu6omijw8iT6lZg8OdyVzJsjH8KmGMk0=)
                          2: 2AF6426EF71911EE82FD6B0EC4F9AE02.roa (hash: T3FHkQFBnR1D7G7E+6iXElBbCR/lDFKEW2aPMQWoc4I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.crl
                          rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915308F/serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E
        Validity
            Not Before: May 19 08:45:55 2024 GMT
            Not After : May 26 08:45:55 2024 GMT
        Subject: CN=6649bc43-5c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:a6:3c:ba:f1:c7:c4:a4:25:59:eb:60:d9:
                    65:38:78:ac:c4:3b:75:5c:5b:31:2e:9f:f7:af:17:
                    72:24:63:51:35:7c:34:be:6f:7f:86:f5:94:de:be:
                    3d:9b:b5:d1:32:1c:bb:7d:10:b1:de:d5:44:d8:14:
                    a0:f7:cd:b6:c3:b8:47:c9:a0:02:8c:5e:27:52:4f:
                    2e:e4:46:c3:54:26:25:a8:f3:76:ba:15:30:ee:5f:
                    bf:95:e3:60:87:e2:c9:49:e5:22:e5:32:d6:ff:69:
                    c8:1c:3d:27:1b:81:76:5e:99:c4:39:4b:7a:ed:24:
                    8a:04:da:27:17:cb:fe:7c:d4:40:1a:70:63:96:b2:
                    b5:0d:59:df:08:b0:6a:ce:43:3e:3c:e5:0f:ef:f4:
                    d9:bc:b9:98:4f:e1:b0:86:e9:2d:42:cf:ae:56:fa:
                    06:46:59:0d:1c:b3:cf:12:2d:cf:61:ce:ea:1d:2a:
                    c0:3e:d5:81:ff:97:35:8d:db:61:ab:6a:b6:dd:90:
                    f1:47:f0:f8:06:69:bd:32:d2:ac:16:42:c3:4d:39:
                    4a:6b:3d:50:b8:25:23:a7:ce:fc:6e:1b:30:b8:b0:
                    e4:64:d7:dc:75:d0:58:17:02:ab:22:5c:d6:7f:e1:
                    d7:64:f6:22:a4:73:20:96:65:c9:fa:3f:fb:34:cc:
                    0b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1A:A0:8D:DD:47:A5:4F:1C:7B:7A:12:63:7B:FF:6B:90:D0:82:1E
            X509v3 Authority Key Identifier:
                keyid:82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:2b:96:c1:6d:65:1e:47:b2:6d:68:d3:5a:bd:e3:4f:68:13:
         35:f2:e8:bd:ec:6b:44:4d:e3:fb:05:b4:75:6a:41:f7:05:23:
         ac:6b:71:92:e8:59:0a:11:e2:c6:35:0b:eb:5c:34:4b:ed:dc:
         2a:e9:cc:bc:87:4d:38:4c:6a:93:6f:72:e3:0c:d3:bc:e1:e1:
         5d:6d:4c:03:47:66:78:09:55:cb:1f:55:86:b9:17:9e:d9:57:
         60:34:2b:a9:5f:e6:24:2e:15:82:7c:85:1b:3e:d9:68:e3:28:
         a1:38:8e:de:d5:60:5f:5c:ff:39:7b:91:b2:2d:31:3b:54:8a:
         c3:32:f1:f1:4d:29:a7:66:20:a0:91:6e:11:1d:5d:55:ba:1d:
         e7:06:98:c0:af:19:cb:ac:15:27:e0:b4:ed:b7:4f:1e:85:ec:
         54:5d:73:1b:2c:de:5d:6c:ee:7a:04:f0:18:8f:4d:fb:b3:de:
         67:bd:eb:75:11:97:61:4d:7c:2b:bf:c2:30:5e:f1:1d:36:f7:
         ed:5c:1e:c3:70:63:4e:91:95:59:ab:a0:9c:df:9f:78:df:1d:
         45:ce:d0:d2:03:6c:f8:93:68:d0:44:68:ab:23:d9:23:78:3b:
         56:73:af:98:0c:56:aa:d1:5a:ca:7f:12:b2:f9:41:ca:16:56:
         12:15:3f:82
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MzA4RjExMC8GA1UEBRMoODJFOUM2M0I3QzJDNzkwODdENUFCMTBFODlERDI4QTJG
N0M0OUMzRTAeFw0yNDA1MTkwODQ1NTVaFw0yNDA1MjYwODQ1NTVaMBgxFjAUBgNV
BAMTDTY2NDliYzQzLTVjNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4c6Y8uvHHxKQlWetg2WU4eKzEO3VcWzEun/evF3IkY1E1fDS+b3+G9ZTevj2b
tdEyHLt9ELHe1UTYFKD3zbbDuEfJoAKMXidSTy7kRsNUJiWo83a6FTDuX7+V42CH
4slJ5SLlMtb/acgcPScbgXZemcQ5S3rtJIoE2icXy/581EAacGOWsrUNWd8IsGrO
Qz485Q/v9Nm8uZhP4bCG6S1Cz65W+gZGWQ0cs88SLc9hzuodKsA+1YH/lzWN22Gr
arbdkPFH8PgGab0y0qwWQsNNOUprPVC4JSOnzvxuGzC4sORk19x10FgXAqsiXNZ/
4ddk9iKkcyCWZcn6P/s0zAvlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVxqgjd1H
pU8ce3oSY3v/a5DQgh4wHwYDVR0jBBgwFoAUgunGO3wseQh9WrEOid0oovfEnD4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzMDhGLzJDMTRFQTEwRjY2
MDExRUU5Qzg4REQxRkM0RjlBRTAyL2d1bkdPM3dzZVFoOVdyRU9pZDBvb3ZmRW5E
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZ3VuR08zd3NlUWg5V3JFT2lkMG9vdmZFbkQ0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz
MDhGLzJDMTRFQTEwRjY2MDExRUU5Qzg4REQxRkM0RjlBRTAyL2d1bkdPM3dzZVFo
OVdyRU9pZDBvb3ZmRW5ENC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHQrlsFtZR5Hsm1o01q9409oEzXy6L3sa0RN4/sFtHVqQfcFI6xrcZLo
WQoR4sY1C+tcNEvt3CrpzLyHTThMapNvcuMM07zh4V1tTANHZngJVcsfVYa5F57Z
V2A0K6lf5iQuFYJ8hRs+2WjjKKE4jt7VYF9c/zl7kbItMTtUisMy8fFNKadmIKCR
bhEdXVW6HecGmMCvGcusFSfgtO23Tx6F7FRdcxss3l1s7noE8BiPTfuz3me963UR
l2FNfCu/wjBe8R029+1cHsNwY06RlVmroJzfn3jfHUXO0NIDbPiTaNBEaKsj2SN4
O1Zzr5gMVqrRWsp/ErL5QcoWVhIVP4I=
-----END CERTIFICATE-----
Generated at Sun May 19 09:38:26 2024 by rpki-client on console-fra.rpki-client.org