Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft
File:                     4BXzk-ejI8P08b_iblv-BA415VM.mft (raw, json)
Hash identifier:          AaH9Bji8XzTveZgOOoKGeqTD4CDmw0lK8pv3mji3+8I=
Subject key identifier:   7B:65:BF:88:48:D4:DB:F3:CD:00:A3:7D:6A:EB:8B:65:67:A7:F2:96
Authority key identifier: E0:15:F3:93:E7:A3:23:C3:F4:F1:BF:E2:6E:5B:FE:04:0E:35:E5:53
Certificate issuer:       /CN=A91C6CAF/serialNumber=E015F393E7A323C3F4F1BFE26E5BFE040E35E553
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft
Manifest number:          E8
Signing time:             Wed 09 Apr 2025 04:19:37 +0000
Manifest this update:     Wed 09 Apr 2025 04:19:37 +0000
Manifest next update:     Wed 16 Apr 2025 04:19:37 +0000
Files and hashes:         1: 4BXzk-ejI8P08b_iblv-BA415VM.crl (hash: 6dNd2+I22AHeKSep9I3re2FmKEdgUtQsYbLiyskK1Pc=)
                          2: C4C0B9160E4C11EF82F91F39C4F9AE02.roa (hash: kz0noASfcID+yNUD17+dcNzBgS2AhI7keu64pTKydZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.crl
                          rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 04:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6CAF
        Validity
            Not Before: Apr  9 04:19:37 2025 GMT
            Not After : Apr 16 04:19:37 2025 GMT
        Subject: CN=67f5f559-d139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:97:3f:8d:7d:9d:74:cc:58:26:c6:a6:5e:93:
                    52:cc:05:06:bd:3e:49:94:f6:f4:c4:61:1e:00:af:
                    41:86:6a:d4:c8:ec:e2:d9:69:89:22:11:ce:d4:fd:
                    3e:80:76:6e:a4:c1:e7:63:c5:ea:dd:95:fe:05:4f:
                    dc:85:19:21:66:3c:60:f3:74:19:fc:34:b3:43:28:
                    d3:67:4e:db:a4:1f:7c:7f:eb:b4:15:ac:d1:3d:2b:
                    0a:c1:4d:4f:ba:cf:0b:21:1b:a4:5e:1a:a3:6d:5d:
                    6e:43:a7:9e:71:58:24:83:1b:7f:3e:88:49:29:42:
                    28:66:8a:6d:9c:8d:36:1c:f8:4e:ce:97:14:d0:06:
                    3e:5c:4f:a3:34:1f:ce:8a:21:ba:50:3b:d1:91:9d:
                    70:33:45:67:4c:4c:5c:a6:5b:ef:3b:f5:a3:9d:d6:
                    e5:90:46:40:1d:a2:0c:e5:c4:76:ff:21:78:95:05:
                    e6:b1:c1:77:27:2d:49:57:05:78:60:af:c3:db:84:
                    88:bc:c1:58:e1:82:45:f6:c3:43:d4:bc:fd:d9:59:
                    fd:db:5e:3d:12:29:55:a1:b8:38:80:ca:21:c8:86:
                    99:63:25:70:65:22:3b:1c:52:19:04:11:af:27:6d:
                    ac:8a:12:c7:58:40:4e:b9:8e:21:ae:25:3a:d4:14:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:65:BF:88:48:D4:DB:F3:CD:00:A3:7D:6A:EB:8B:65:67:A7:F2:96
            X509v3 Authority Key Identifier:
                keyid:E0:15:F3:93:E7:A3:23:C3:F4:F1:BF:E2:6E:5B:FE:04:0E:35:E5:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a5:63:12:1e:b8:c3:60:36:7d:b4:5a:2b:b4:2a:53:6b:84:
         62:ae:13:e5:10:d9:39:b2:4e:a4:bd:9f:9c:eb:55:7b:c8:5d:
         c8:30:bd:7b:df:19:a2:65:43:4f:5d:31:63:a5:a9:5b:4a:36:
         43:c6:4c:6f:81:39:e1:fa:f0:f5:92:61:58:0e:3f:03:a7:7d:
         0d:1d:f5:83:9e:a5:40:48:da:88:86:ef:93:07:26:6d:e0:de:
         53:33:24:b1:e4:df:04:a9:ee:83:ee:e8:94:70:af:92:6e:49:
         ec:31:19:b4:7b:6e:1a:2c:6f:74:b4:4e:f5:7e:c3:2b:67:25:
         3d:89:6d:4d:7b:35:7d:c5:ef:c1:01:32:f9:03:8f:67:01:1e:
         94:5a:0f:f7:9f:00:ad:9c:7b:29:8c:da:55:23:75:a4:39:36:
         4b:be:23:ed:6e:c0:73:47:3b:5d:d2:f7:13:1b:e8:23:51:a8:
         00:72:ee:7e:2f:53:44:e5:b7:74:c7:28:94:23:2b:d0:f7:66:
         91:0c:78:c4:e8:f2:bc:66:e3:8f:ff:97:52:0b:d0:91:04:3c:
         b6:17:bc:cf:4e:69:25:48:c0:5f:6a:5a:00:e4:81:d1:fa:42:
         d1:c3:97:aa:e7:a8:ab:29:9d:08:dd:e0:d5:e2:61:2b:ee:f7:
         d4:de:74:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:34:31 2025 by rpki-client