Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.mft
File:                     GUG9CIuIgrZhVo5krJLeasogoFY.mft (raw, json)
Hash identifier:          7CyzZHQZmussIvbG23z2LMTzdjrA1Yz2EjYuHKHYTYw=
Subject key identifier:   C9:95:92:12:29:35:8C:9F:DC:0A:6D:84:B4:58:67:A3:AE:EB:96:50
Authority key identifier: 19:41:BD:08:8B:88:82:B6:61:56:8E:64:AC:92:DE:6A:CA:20:A0:56
Certificate issuer:       /CN=A914AD92/serialNumber=1941BD088B8882B661568E64AC92DE6ACA20A056
Certificate serial:       0370
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUG9CIuIgrZhVo5krJLeasogoFY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.mft
Manifest number:          04C0
Signing time:             Sat 31 May 2025 01:07:51 +0000
Manifest this update:     Sat 31 May 2025 01:07:51 +0000
Manifest next update:     Sat 07 Jun 2025 01:07:51 +0000
Files and hashes:         1: GUG9CIuIgrZhVo5krJLeasogoFY.crl (hash: Ahg0IVa9coSS++gxoGeM30wkfkSAPRaQUSgZEz6JtrY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.crl
                          rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUG9CIuIgrZhVo5krJLeasogoFY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 01:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AD92, serialNumber=1941BD088B8882B661568E64AC92DE6ACA20A056
        Validity
            Not Before: May 31 01:07:51 2025 GMT
            Not After : Jun  7 01:07:51 2025 GMT
        Subject: CN=683a5667-51a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:92:0c:83:8f:9b:50:ce:4d:e6:8f:46:5d:e5:
                    68:d6:ff:0f:84:aa:2b:9d:ed:b8:97:97:26:ce:f8:
                    d8:39:33:87:0e:0e:82:30:fb:13:6a:99:64:7a:d8:
                    21:00:39:44:56:25:e6:ea:a8:87:d7:65:9e:fb:f0:
                    e2:4e:df:b1:4e:53:61:bf:85:ea:f8:fd:eb:39:99:
                    7b:14:3a:5c:70:3f:c8:83:c6:14:96:27:10:4b:96:
                    b1:c4:aa:ed:ce:0d:8e:0d:bd:eb:73:f8:a0:50:86:
                    6a:cb:be:94:b9:d3:8e:77:85:0a:a1:9b:22:4a:e5:
                    45:d3:f3:95:6d:b0:08:56:da:12:80:e1:d0:e0:97:
                    e6:38:b9:74:f1:46:95:0c:23:bf:65:fc:95:ed:2c:
                    a1:2e:da:a7:a9:01:82:ce:b1:05:ed:d3:47:3f:ad:
                    b5:5b:1a:cb:35:36:59:4c:77:eb:b8:40:56:0b:94:
                    8c:b4:06:6d:99:7c:35:41:c6:3e:d8:2d:bd:12:52:
                    89:86:a5:6f:c8:4b:77:78:14:4d:bb:14:e4:91:8d:
                    fe:cd:90:f2:e7:03:6a:65:03:94:13:e2:6a:99:86:
                    12:0c:ce:f1:e3:ed:8f:13:97:2e:9c:a0:2c:e9:b1:
                    ef:55:f0:7b:d4:e7:2d:92:12:59:5f:73:83:51:13:
                    e8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:95:92:12:29:35:8C:9F:DC:0A:6D:84:B4:58:67:A3:AE:EB:96:50
            X509v3 Authority Key Identifier:
                keyid:19:41:BD:08:8B:88:82:B6:61:56:8E:64:AC:92:DE:6A:CA:20:A0:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUG9CIuIgrZhVo5krJLeasogoFY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/GUG9CIuIgrZhVo5krJLeasogoFY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:2e:27:4a:6a:96:48:1e:e6:42:8a:39:9b:ed:66:55:69:b8:
         e0:02:9c:f2:b3:fc:89:9b:7b:ec:90:06:bd:72:cd:97:45:b8:
         42:ff:03:61:60:b7:d4:ed:68:f8:a1:e3:da:b2:f4:19:b1:df:
         95:72:ba:6d:91:bb:fd:c2:62:75:ef:16:0c:80:e1:f0:20:4f:
         6b:27:f6:25:cc:8a:75:18:e5:dc:af:8c:23:ea:48:ca:60:e3:
         af:d9:e8:84:92:14:f6:e2:10:f1:45:ab:aa:6c:2c:d6:15:27:
         69:96:7b:37:26:34:f1:48:df:a4:23:9b:00:a6:8b:d4:06:3b:
         fa:3a:2b:3c:07:0c:ed:b7:f4:39:73:47:9d:04:b3:da:17:59:
         13:d8:7d:9e:86:6a:2f:25:5e:7e:0f:df:75:fb:78:fa:ab:81:
         d2:a8:40:8f:0f:8c:2b:16:e7:6f:1f:eb:0e:c2:8b:92:88:59:
         f5:bb:7d:35:35:4a:26:27:7b:6c:b8:fd:59:b7:6a:5e:8c:4c:
         e5:7f:85:17:ef:4f:47:38:a1:66:8b:c9:41:c8:20:bd:25:09:
         a6:a0:32:61:2f:e5:20:ce:2a:87:15:bb:6e:f3:90:e0:6c:7b:
         1a:b9:0d:60:be:9c:32:db:c6:1d:9a:64:34:e0:d2:d3:e8:fd:
         c6:98:6d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:39:22 2025 by rpki-client