Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
File:                     Im9yidTjf-ziJgxk07y6esAxWnU.mft (raw, json)
Hash identifier:          SSlOQXMb7mLOJY15UkukxJDmwweN3/KW7fTMKd0Xqr4=
Subject key identifier:   8F:74:70:CE:18:65:AF:2F:6E:AA:F0:64:2A:02:0B:59:62:1C:5F:31
Authority key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75
Certificate issuer:       /CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
Certificate serial:       0316
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
Manifest number:          030F
Signing time:             Fri 25 Apr 2025 00:59:48 +0000
Manifest this update:     Fri 25 Apr 2025 00:59:48 +0000
Manifest next update:     Fri 02 May 2025 00:59:47 +0000
Files and hashes:         1: Im9yidTjf-ziJgxk07y6esAxWnU.crl (hash: DO9ESbS7wD/E9C5DV5/d6UWITVWdWyczsfbR+JVro8c=)
                          2: 16DDC0F4CFE811ECA193B36BC4F9AE02.roa (hash: d8hKEngO/LeUHQoe5AIEcocjfTWcuilabUG2KLlGFLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl
                          rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790 (0x316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC269, serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
        Validity
            Not Before: Apr 25 00:59:48 2025 GMT
            Not After : May  2 00:59:47 2025 GMT
        Subject: CN=680ade84-7642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4b:8a:8a:07:86:7c:a6:66:34:bb:7d:89:6e:
                    9b:bd:f1:9d:f3:18:3f:b6:73:05:27:7e:91:dc:41:
                    b4:d7:5b:77:4d:2f:e4:b2:77:f1:87:7a:b5:75:4f:
                    a6:e8:30:9f:25:7d:63:74:78:52:de:38:44:85:53:
                    da:47:ea:23:f1:eb:c1:db:e5:5f:0a:a9:74:08:ea:
                    8a:fb:1a:9e:9e:b1:6a:6f:19:d0:b9:fe:e6:25:0d:
                    40:c7:27:9b:e0:6f:e0:38:db:05:22:99:46:52:05:
                    a2:e5:f1:bd:42:2d:5f:6b:03:ac:a5:c0:79:2b:5f:
                    02:96:96:6f:83:9c:fb:c7:0a:eb:01:e2:99:6b:12:
                    3a:16:f3:c6:66:c7:5c:0d:81:11:48:19:66:31:91:
                    74:b8:6d:11:d2:2e:e8:4d:c1:10:50:8d:0f:61:fc:
                    59:9c:96:a0:76:8d:43:4d:c0:17:bf:f4:a0:4b:4f:
                    30:01:01:a1:ba:7f:e4:66:a3:8c:bd:54:b6:09:60:
                    07:ce:9d:2a:5d:da:9b:0b:f3:4b:1a:96:80:2f:a0:
                    cd:3e:00:56:76:5d:e2:b1:13:52:ee:2a:4b:cf:e7:
                    97:af:85:1d:ec:07:19:78:fd:dc:3f:2a:9e:52:fc:
                    14:33:b8:62:85:dc:9b:f8:d7:c8:8d:45:8c:5c:2a:
                    d5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:74:70:CE:18:65:AF:2F:6E:AA:F0:64:2A:02:0B:59:62:1C:5F:31
            X509v3 Authority Key Identifier:
                keyid:22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:1d:ca:4b:dc:1b:b7:36:63:d5:e7:ce:88:2b:36:97:3c:2c:
         c8:f5:cc:48:46:33:9f:5a:7f:9f:61:32:dc:4e:4d:91:1e:c6:
         ce:ae:53:dc:0a:f1:fa:c5:40:7d:72:9a:86:83:48:f1:a9:a5:
         e8:a7:51:45:54:6a:a9:19:ca:6a:54:8c:7f:b5:94:3e:19:eb:
         b1:3b:d2:41:f4:b7:3d:ad:3c:dc:f5:7a:ba:e4:68:ae:16:9a:
         7a:78:31:42:93:e8:63:a2:77:1b:a9:97:4c:11:87:26:f8:36:
         02:d5:09:20:6a:46:16:71:8e:3f:95:a0:40:95:c2:f0:b8:3a:
         47:cf:b5:47:83:15:ba:1a:cd:46:b3:0b:a7:a7:e2:69:6b:b4:
         09:a0:a3:90:07:5e:72:2b:e8:be:9e:e4:fe:d4:76:3f:09:ba:
         df:8a:ef:9e:3f:74:62:e0:de:0d:5d:e3:f4:c0:d2:ba:b5:7e:
         aa:53:88:c5:bb:e7:7b:68:d4:ad:2c:9b:d1:66:00:ac:e3:78:
         5c:5a:ba:69:83:86:38:e3:d8:fb:e1:3a:a0:bd:fb:f5:d7:14:
         c1:e9:a7:cd:2e:96:c1:97:c8:8e:91:87:a9:76:f9:24:39:18:
         7d:c4:09:c9:f2:d1:f2:99:3b:66:39:49:27:29:ad:23:8b:2a:
         bc:d4:b8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:00:23 2025 by rpki-client