Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
File:                     RRIms-l3zxGWF1WwaTfB9-c13F4.mft (raw, json)
Hash identifier:          ukIAiIV7BX1X4xqSSJXz5nHFL45bEDUjlYAZNzfnsVA=
Subject key identifier:   C4:F4:33:6C:7F:06:86:6C:5C:E0:C7:82:DD:77:06:25:4F:B2:39:EA
Authority key identifier: 45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E
Certificate issuer:       /CN=A91D18DA/serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
Certificate serial:       0674
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
Manifest number:          0662
Signing time:             Fri 22 Nov 2024 21:58:08 +0000
Manifest this update:     Fri 22 Nov 2024 21:58:07 +0000
Manifest next update:     Fri 29 Nov 2024 21:58:07 +0000
Files and hashes:         1: RRIms-l3zxGWF1WwaTfB9-c13F4.crl (hash: 4BoGHGr4MaVqwCmOcysU4je8KUePasKyzPwIBBwXdZQ=)
                          2: 4D5AE9DC5EEB11EB9D80C03EC4F9AE02.roa (hash: CkC6ANX758VxZawlsLHGSAa3XJCkHalxckMndJyeulg=)
                          3: 277A0A5A642B11EBBB477E4EC4F9AE02.roa (hash: HVXaOsNZoPltolHevFPiB1XXc2ZtYhS+FxC+Zs4U1G4=)
                          4: 76A8A3E460F111EBBA7FFA79C4F9AE02.roa (hash: u0IXLJwtvydpHb+eS/CGN5IGunShgi4NMqu7a7fC+84=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl
                          rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1652 (0x674)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D18DA/serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E
        Validity
            Not Before: Nov 22 21:58:07 2024 GMT
            Not After : Nov 29 21:58:07 2024 GMT
        Subject: CN=6740fe6f-0efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:de:26:28:cc:58:cf:86:98:12:94:aa:3e:6f:
                    b5:f0:f8:85:c8:0d:39:77:a9:9b:bb:9c:d3:53:18:
                    ff:21:db:9f:84:d1:c7:3c:2f:17:11:cc:ca:77:2a:
                    36:c7:52:42:45:95:d2:48:d6:e3:d1:59:ea:da:00:
                    50:46:b9:c8:e3:18:7a:92:a1:ac:05:ef:ce:15:c3:
                    c1:79:ca:58:d4:40:ab:66:53:23:47:8b:6b:08:bb:
                    09:ac:84:33:1d:79:98:4d:9c:67:14:dd:c1:96:40:
                    f2:3f:6e:95:18:0e:62:a7:67:f5:c9:b2:13:fc:81:
                    19:26:6b:5a:02:9a:58:2f:a2:ec:ac:6a:54:b9:9a:
                    27:d5:37:08:a6:8d:d1:0d:05:93:63:64:a4:d6:f0:
                    d7:34:71:02:f7:69:9f:b1:a1:ef:bf:dc:86:e1:6b:
                    5c:bb:bf:d0:91:08:0c:56:fd:cf:f2:6a:e8:5c:9b:
                    c7:69:e9:ae:bd:c8:77:50:ca:99:a1:82:b7:c0:46:
                    c1:fc:5c:6c:29:30:cd:82:64:bd:ed:b0:a0:b5:04:
                    e3:7f:e9:56:b6:a1:24:0a:14:c3:db:88:94:6f:45:
                    c7:02:bc:2f:01:91:d4:73:99:0f:3d:dd:fb:5a:8e:
                    bc:55:24:f5:f8:6b:14:46:bc:8f:f8:67:27:f4:23:
                    b8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F4:33:6C:7F:06:86:6C:5C:E0:C7:82:DD:77:06:25:4F:B2:39:EA
            X509v3 Authority Key Identifier:
                keyid:45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:97:59:9c:9c:32:76:44:15:0e:b7:c2:ce:de:84:28:52:9e:
         b9:f7:11:76:69:dd:7d:8a:a8:9c:79:b6:00:25:78:a4:e0:50:
         9a:96:82:9d:63:10:94:61:30:6d:ef:93:6c:2b:0c:e3:65:df:
         c4:eb:79:f7:51:dd:7c:de:1e:ff:7c:1f:2b:b3:66:dc:0d:53:
         74:86:e3:c6:8b:d6:6e:a5:c6:b5:8b:a8:02:3a:87:47:82:40:
         55:19:7c:1a:01:4c:e3:26:a2:13:49:59:9d:45:a1:4a:61:ce:
         39:75:10:64:23:e4:2a:66:8c:70:5b:bd:5d:dd:a9:e3:c5:0f:
         bf:4b:9e:07:64:cc:f2:93:df:20:70:ac:00:6a:a3:52:39:15:
         9f:cd:d5:2a:c9:2d:1b:2b:68:45:ed:f3:0b:9c:23:71:01:da:
         d3:37:ff:cb:8b:21:67:bc:a6:b5:42:93:5e:68:09:a8:2d:db:
         9e:d6:28:d6:3d:a1:62:9a:1e:73:2d:94:0f:03:b4:38:14:4e:
         60:05:30:f6:00:6a:cf:af:65:15:72:98:76:15:53:9f:fe:bb:
         77:10:6b:0e:5a:7c:b6:e2:2c:eb:d9:92:ef:fd:80:f5:2c:79:
         96:d7:49:5e:59:c5:a9:e5:b7:eb:81:67:5a:91:96:f9:67:14:
         a9:39:39:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:50 2024 by rpki-client on console-ams.rpki-client.org