Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
File:                     eLB7yieVuFKmVslAPke8uKvgelo.mft (raw, json)
Hash identifier:          T1k0Nbwe1Z55JhUkQjfczyEN0JPabdNvkyCeKc9s3M8=
Subject key identifier:   A6:C9:AE:82:70:07:9F:6E:D9:D3:CB:07:5D:1D:49:5E:6F:72:42:CE
Authority key identifier: 78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A
Certificate issuer:       /CN=A91B0380/serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
Manifest number:          4B
Signing time:             Sat 15 Feb 2025 08:35:45 +0000
Manifest this update:     Sat 15 Feb 2025 08:35:44 +0000
Manifest next update:     Sat 22 Feb 2025 08:35:44 +0000
Files and hashes:         1: eLB7yieVuFKmVslAPke8uKvgelo.crl (hash: aAP5cf9Ou9BfIDZcEBqdLF/RaYlfgsgq5FIZaLSoNBE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl
                          rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0380
        Validity
            Not Before: Feb 15 08:35:44 2025 GMT
            Not After : Feb 22 08:35:44 2025 GMT
        Subject: CN=67b051e1-2f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:2f:c2:71:6b:86:07:29:3d:f8:f1:c7:d1:
                    9c:83:0b:fb:f0:cc:0a:5f:a3:73:7f:8b:ff:bb:83:
                    e4:17:0b:a3:42:ba:7f:93:f0:c6:36:4d:70:b8:97:
                    82:4f:f2:98:6a:a5:68:46:4e:6c:54:60:a9:12:ff:
                    5b:18:76:91:3f:36:9a:cc:5c:bc:3c:9f:79:79:c3:
                    cd:8d:60:30:e5:05:df:c0:77:6c:67:1f:19:41:ad:
                    68:2c:be:01:12:d0:8b:f3:08:fa:e5:4a:79:08:88:
                    5d:54:07:f1:b5:1b:58:f7:1d:cf:87:11:cc:fd:2f:
                    aa:52:63:d2:45:50:c2:98:51:e7:6d:7a:a0:da:48:
                    19:0f:c8:31:81:7f:2e:c0:d7:4d:ab:20:10:44:f9:
                    d2:40:eb:b0:b6:3b:dc:69:bd:7f:ca:4c:f6:f1:09:
                    a4:7a:75:73:4a:ee:e0:58:41:31:e6:01:41:19:70:
                    41:da:7f:c3:c8:0f:bd:a0:2f:20:e7:c7:19:e1:1e:
                    1c:c8:15:4f:60:1a:dd:ca:4b:a3:97:a2:10:62:fd:
                    6f:ae:65:21:b6:ad:d9:85:f5:04:aa:ec:b7:80:58:
                    ee:d5:7f:2b:03:0c:fd:b4:50:1a:49:49:ba:5d:a7:
                    64:9a:0e:cc:a2:30:0a:71:7b:cf:90:d4:1a:a5:99:
                    5b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C9:AE:82:70:07:9F:6E:D9:D3:CB:07:5D:1D:49:5E:6F:72:42:CE
            X509v3 Authority Key Identifier:
                keyid:78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d4:0a:09:9c:a5:4c:b1:fc:86:23:95:2d:31:0c:8c:9f:3a:
         4c:d5:37:c0:ea:82:76:f4:ff:ed:74:57:e8:e3:eb:b8:de:eb:
         88:5c:8c:d5:cc:c7:32:00:94:32:7e:38:80:45:5f:72:71:6b:
         e2:42:7b:58:01:92:30:7a:ad:0b:51:07:71:71:a9:30:64:17:
         61:fa:0e:90:98:00:de:be:fb:e6:7f:78:27:71:f9:e6:b9:3e:
         16:43:9f:dd:00:e5:c5:3a:b2:4f:81:32:18:41:3d:49:34:f7:
         93:c9:6b:6f:47:c9:49:5d:3f:3b:eb:a4:bb:84:07:31:ed:e3:
         ec:e0:77:f6:2e:32:ca:80:0d:75:d3:f9:42:32:f8:54:e1:cf:
         f5:44:51:2f:7f:59:f0:6e:6f:1b:fb:11:2a:7b:4a:05:40:c3:
         ed:3e:db:66:33:18:a9:19:17:96:73:60:5f:9c:95:8d:36:97:
         b5:a8:eb:5c:30:f1:9e:c1:b2:7a:2e:55:51:cc:b6:3d:7a:46:
         b8:ac:70:be:d0:bc:24:6e:71:48:bc:c9:f7:3d:c1:32:1c:a9:
         21:58:b3:d9:ac:37:da:f7:55:52:44:6f:85:e6:48:cc:d7:14:
         9e:34:17:6f:ef:d3:90:93:73:0d:9b:af:82:63:47:25:6d:e9:
         dc:32:0f:a6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MDM4MDExMC8GA1UEBRMoNzhCMDdCQ0EyNzk1Qjg1MkE2NTZDOTQwM0U0N0JDQjhB
QkUwN0E1QTAeFw0yNTAyMTUwODM1NDRaFw0yNTAyMjIwODM1NDRaMBgxFjAUBgNV
BAMTDTY3YjA1MWUxLTJmMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+Pi/CcWuGByk9+PHH0ZyDC/vwzApfo3N/i/+7g+QXC6NCun+T8MY2TXC4l4JP
8phqpWhGTmxUYKkS/1sYdpE/NprMXLw8n3l5w82NYDDlBd/Ad2xnHxlBrWgsvgES
0IvzCPrlSnkIiF1UB/G1G1j3Hc+HEcz9L6pSY9JFUMKYUedteqDaSBkPyDGBfy7A
102rIBBE+dJA67C2O9xpvX/KTPbxCaR6dXNK7uBYQTHmAUEZcEHaf8PID72gLyDn
xxnhHhzIFU9gGt3KS6OXohBi/W+uZSG2rdmF9QSq7LeAWO7VfysDDP20UBpJSbpd
p2SaDsyiMApxe8+Q1BqlmVszAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpsmugnAH
n27Z08sHXR1JXm9yQs4wHwYDVR0jBBgwFoAUeLB7yieVuFKmVslAPke8uKvgelow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwMzgwLzZFNkUzNjAwN0JD
QjExRUZBMjQ4OTIxMUM0RjlBRTAyL2VMQjd5aWVWdUZLbVZzbEFQa2U4dUt2Z2Vs
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZUxCN3lpZVZ1RkttVnNsQVBrZTh1S3ZnZWxvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw
MzgwLzZFNkUzNjAwN0JDQjExRUZBMjQ4OTIxMUM0RjlBRTAyL2VMQjd5aWVWdUZL
bVZzbEFQa2U4dUt2Z2Vsby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGfUCgmcpUyx/IYjlS0xDIyfOkzVN8Dqgnb0/+10V+jj67je64hcjNXM
xzIAlDJ+OIBFX3Jxa+JCe1gBkjB6rQtRB3FxqTBkF2H6DpCYAN6+++Z/eCdx+ea5
PhZDn90A5cU6sk+BMhhBPUk095PJa29HyUldPzvrpLuEBzHt4+zgd/YuMsqADXXT
+UIy+FThz/VEUS9/WfBubxv7ESp7SgVAw+0+22YzGKkZF5ZzYF+clY02l7Wo61ww
8Z7BsnouVVHMtj16RriscL7QvCRucUi8yfc9wTIcqSFYs9msN9r3VVJEb4XmSMzX
FJ40F2/v05CTcw2br4JjRyVt6dwyD6Y=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:36 2025 by rpki-client