Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
File:                     RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft (raw, json)
Hash identifier:          v9I4v4ucedGgu5znPWseNEVkMmAHCyZ7xC/8gvSVMao=
Subject key identifier:   09:BA:95:3B:4F:EE:C6:12:07:33:68:61:AC:AC:98:F0:34:63:94:ED
Authority key identifier: 46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73
Certificate issuer:       /CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573
Certificate serial:       04FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
Manifest number:          04D2
Signing time:             Thu 24 Apr 2025 23:41:07 +0000
Manifest this update:     Thu 24 Apr 2025 23:41:07 +0000
Manifest next update:     Thu 01 May 2025 23:41:07 +0000
Files and hashes:         1: RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl (hash: lcgKDghDUuIEGS5yTHJ1WoF+8EXZTWH9/kl1e9JJ8dE=)
                          2: 7AD7390CD15111EE98EBEC1EC4F9AE02.roa (hash: EYW2sKPf+G2Sx9ydD4pDWi9he+aSK802wxvxfjM5I2Y=)
                          3: 20C2C8980D4111EEB385BA83C4F9AE02.roa (hash: 9YEdcRP/xwcEXvASqrHWB8HPt3we6VKlBGcd9dDANWk=)
                          4: 5A306016D15111EE98E6801EC4F9AE02.roa (hash: +6P6AQHkzNOzm6kHVQO5a81bv5yPJUOJbWXMWV3KVfA=)
                          5: D26FE5F62BC511EEA4569A67C4F9AE02.roa (hash: HwIXxMyVB5TDC6OnRXgKUZIRg3PpPlLxsrzUfJFlIrY=)
                          6: C6E67CEACB0911ECA16E4A19C4F9AE02.roa (hash: eSOO4OZJq9oAUGzG+Jm/RF9DAg/VCtKcVYa1dGAc4zo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl
                          rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 23:41:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1279 (0x4ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B2EC, serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573
        Validity
            Not Before: Apr 24 23:41:07 2025 GMT
            Not After : May  1 23:41:07 2025 GMT
        Subject: CN=680acc13-a023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:ce:a1:ab:0b:c1:a5:ab:79:53:70:f2:72:
                    4b:a9:fe:3a:27:de:2b:b5:c7:f9:d4:c5:83:9b:aa:
                    31:0a:ba:f4:9e:c3:e5:d7:5a:01:82:27:d5:5d:36:
                    6d:dc:20:b3:db:b5:42:66:a1:d6:90:2d:f3:6d:fe:
                    c6:60:f9:2b:a2:12:b1:5a:42:98:bf:a0:0a:a7:49:
                    ef:fd:4e:d0:f6:2a:4d:af:1d:72:56:7c:1e:e9:d6:
                    35:e0:3b:e6:4d:da:18:20:f4:6e:91:b4:9b:e3:a7:
                    9e:fe:4c:9e:84:47:ce:2d:51:b4:63:5e:47:a0:23:
                    87:c6:71:ad:3f:42:29:36:61:e1:60:50:d5:a7:62:
                    7c:86:50:8d:dd:13:ac:b5:0a:2d:e2:21:89:45:46:
                    78:75:6a:25:39:9b:f2:a8:9a:66:aa:eb:b1:5b:99:
                    27:c6:76:db:39:10:00:84:e5:38:fe:15:b3:b0:c6:
                    a9:0a:b7:ec:c9:49:b9:21:c0:36:1e:64:61:db:0c:
                    4a:99:89:ab:ee:7d:da:de:cc:29:67:6c:4c:0e:22:
                    29:e1:09:e9:83:46:30:a0:dc:6d:b8:fa:42:6e:ad:
                    8e:f5:bb:08:f9:85:e3:78:e9:df:4d:25:5f:65:c4:
                    e0:9d:11:80:23:bf:56:2c:cc:79:45:97:5c:48:e3:
                    ff:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BA:95:3B:4F:EE:C6:12:07:33:68:61:AC:AC:98:F0:34:63:94:ED
            X509v3 Authority Key Identifier:
                keyid:46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c4:04:2b:52:5b:1b:29:66:b2:95:a7:ca:c2:c6:ec:83:9a:
         ef:c2:aa:5d:27:00:bb:91:81:0c:37:6c:b2:9b:0f:c0:17:c2:
         73:de:ed:20:0c:61:4e:45:27:a8:10:dc:38:2e:e4:94:4a:44:
         eb:b1:a2:3c:02:d7:d7:c3:7b:59:e7:e6:28:82:55:b0:78:e0:
         5b:32:5a:45:30:3e:8d:cd:95:c9:60:5d:cd:32:d2:57:89:47:
         4e:08:1a:1a:dc:0b:33:da:c7:7a:b3:da:49:74:31:20:1a:c1:
         09:91:4c:80:fe:95:ae:a3:50:3e:12:00:83:6e:6f:25:f9:5f:
         1c:cd:28:00:13:b4:44:98:64:88:24:9a:31:6f:1b:1d:39:ed:
         9a:27:95:48:4d:64:4a:21:a0:2f:a4:e2:92:bf:b4:de:77:55:
         42:bf:c0:6f:d6:df:f3:ed:0f:85:14:f7:9a:58:62:c7:70:c5:
         91:ac:81:44:4b:22:ef:c2:60:d7:87:e1:83:68:86:3d:5e:96:
         44:fb:bd:43:71:2a:c0:58:22:0d:a3:16:d3:78:bb:79:6c:9b:
         85:d9:3e:29:c3:10:5b:f1:85:f8:d1:e6:bd:59:9f:c4:5d:89:
         9b:15:20:7b:5a:a0:e7:7f:67:a2:a3:ed:5e:76:e7:f9:6d:fd:
         28:b6:2b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:23:59 2025 by rpki-client