Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
File:                     RRIms-l3zxGWF1WwaTfB9-c13F4.mft (raw, json)
Hash identifier:          N2skCqSFqwXhdMfGW9hxZMuS94kId8JeKOR6NyD/qxQ=
Subject key identifier:   FC:AF:78:4F:65:1C:F8:0C:DD:27:39:67:EE:5B:6B:E4:42:63:06:1E
Authority key identifier: 45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
Certificate issuer:       /CN=A91D18DA/serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
Certificate serial:       06C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
Manifest number:          06B0
Signing time:             Thu 24 Apr 2025 21:58:19 +0000
Manifest this update:     Thu 24 Apr 2025 21:58:18 +0000
Manifest next update:     Thu 01 May 2025 21:58:18 +0000
Files and hashes:         1: RRIms-l3zxGWF1WwaTfB9-c13F4.crl (hash: pR/wf4sdj6qF7M7qbDYpIw772x5fg4yYt0+PLuYXnu4=)
                          2: 4D5AE9DC5EEB11EB9D80C03EC4F9AE02.roa (hash: CkC6ANX758VxZawlsLHGSAa3XJCkHalxckMndJyeulg=)
                          3: 277A0A5A642B11EBBB477E4EC4F9AE02.roa (hash: HVXaOsNZoPltolHevFPiB1XXc2ZtYhS+FxC+Zs4U1G4=)
                          4: 76A8A3E460F111EBBA7FFA79C4F9AE02.roa (hash: u0IXLJwtvydpHb+eS/CGN5IGunShgi4NMqu7a7fC+84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl
                          rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1730 (0x6c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D18DA, serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
        Validity
            Not Before: Apr 24 21:58:18 2025 GMT
            Not After : May  1 21:58:18 2025 GMT
        Subject: CN=680ab3fa-d5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:a9:10:e7:e7:d8:a8:2b:97:46:a6:a2:2e:
                    3c:9b:62:d1:11:40:e0:99:a8:d6:76:c9:26:c7:0f:
                    94:97:ae:ef:a1:64:8a:4b:3a:90:60:38:dc:3d:07:
                    6a:07:25:49:b9:61:f6:13:13:fe:d4:db:65:15:bc:
                    d3:34:2a:f5:a3:d2:85:7f:67:96:4d:16:84:39:97:
                    01:e6:7a:ef:8e:e3:87:b2:36:b0:c6:de:e7:54:b4:
                    86:7c:30:01:94:2b:e3:cc:34:81:8d:1e:9b:24:44:
                    c1:a0:4a:45:55:0d:f6:e7:73:1a:4a:c5:d2:d6:9b:
                    a6:30:ef:2b:88:e0:17:1e:64:50:0f:cf:4e:77:9b:
                    2b:09:d5:89:06:0f:9c:e7:c6:2e:9f:b6:cf:53:18:
                    61:32:44:84:66:22:7c:31:90:e4:83:cb:9a:bd:b4:
                    26:f9:18:b4:e0:4f:73:d5:49:1e:6b:08:66:fe:36:
                    a9:84:cb:6d:e8:b9:f2:74:cd:c2:bd:e9:0b:78:10:
                    8c:a0:ac:00:ba:fa:ea:af:9e:b3:b9:e7:a7:e4:35:
                    36:a0:49:41:d3:aa:61:ee:45:6b:b6:ee:43:94:67:
                    bf:5b:86:94:7f:b4:32:19:5b:a5:a7:26:0e:23:71:
                    b8:79:49:c8:4b:bb:b2:e1:40:eb:d4:51:f1:76:e8:
                    ad:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AF:78:4F:65:1C:F8:0C:DD:27:39:67:EE:5B:6B:E4:42:63:06:1E
            X509v3 Authority Key Identifier:
                keyid:45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:52:01:16:b7:f9:69:ff:ad:2b:bd:cc:ad:2f:82:f9:df:d9:
         83:35:3e:16:73:1b:46:fb:81:bc:a4:2a:73:a1:bc:a5:cd:1c:
         80:75:4f:4a:e5:3c:bc:b7:c5:2f:45:93:81:e0:a1:26:14:5c:
         bf:66:fb:31:32:1a:b1:1b:19:d5:0b:37:61:2b:6e:1f:e7:04:
         67:6f:47:05:d9:e5:fd:34:a5:ac:7d:3e:9e:8f:7f:7b:4b:1c:
         7d:75:8c:99:01:fd:cb:32:5d:bb:7b:ee:af:2e:d3:b5:b8:17:
         78:ba:ce:0b:de:96:02:31:5d:30:c0:ca:a3:fa:4e:7f:06:0d:
         e6:c4:6b:46:c1:48:97:88:1e:1b:68:3e:e7:d7:b3:c2:ac:f5:
         70:44:38:9c:7d:b7:66:f5:ba:7b:32:b2:ba:b9:3e:11:53:a0:
         0b:93:01:3e:72:d2:45:0e:8b:2c:c3:d5:24:b9:3f:52:dc:79:
         da:1d:f9:e6:18:9d:cd:0f:58:c1:02:0a:45:04:a2:cf:0f:15:
         0d:54:6d:d8:d9:9a:15:32:62:bb:17:bc:df:7a:c4:b8:92:03:
         9b:59:fe:49:48:08:80:04:ee:cd:fa:c4:0e:41:9e:76:ab:b7:
         f6:fb:20:16:89:b3:65:bb:a9:9b:60:ad:fd:c1:2a:72:a9:66:
         13:0b:fe:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:43:57 2025 by rpki-client