Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
File:                     R0Blek4vuGe_tE2_bLi8HdGywg4.mft (raw, json)
Hash identifier:          59xNM8OKiunZG0Pm7Ba0Yq7FWqrq5YUkAjbDfMOZBWQ=
Subject key identifier:   1F:D6:42:88:A9:7E:E8:4A:85:AE:E3:1D:A2:74:CE:DB:F2:59:13:03
Authority key identifier: 47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E
Certificate issuer:       /CN=A91BA733/serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
Certificate serial:       0280
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
Manifest number:          027B
Signing time:             Sat 07 Jun 2025 01:43:14 +0000
Manifest this update:     Sat 07 Jun 2025 01:43:14 +0000
Manifest next update:     Sat 14 Jun 2025 01:43:14 +0000
Files and hashes:         1: R0Blek4vuGe_tE2_bLi8HdGywg4.crl (hash: 96DlNGp4uSgtqIY9das4X1ySOBYBcMDJJmHQnBMtjkE=)
                          2: 7AD326AC663911EDA919A02AC4F9AE02.roa (hash: +hdEozIbVn2GYt8jwfbthhL8PpPkZpGYDiLEr/d+5Rk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl
                          rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Jun 2025 00:28:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA733, serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
        Validity
            Not Before: Jun  7 01:43:14 2025 GMT
            Not After : Jun 14 01:43:14 2025 GMT
        Subject: CN=68439932-a3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:83:97:4b:de:2e:f9:38:7d:c2:95:ae:4b:3f:
                    18:25:29:fc:11:9b:ae:bd:73:24:d8:a9:36:9f:bd:
                    e5:45:31:f8:7b:7b:9a:bb:ff:84:35:ca:3e:5e:f2:
                    34:30:01:05:f3:7c:77:92:fa:12:a5:12:b9:26:fe:
                    78:a1:30:ae:45:14:c0:12:72:81:64:4a:96:53:2b:
                    8d:78:87:d3:f2:f4:38:7b:08:30:48:35:55:de:4b:
                    64:84:39:66:97:02:80:0f:20:b1:09:98:ae:dc:c6:
                    00:bf:f7:80:6f:8a:7d:e2:bd:c8:0f:c3:3a:a6:91:
                    83:7e:9e:5b:53:dc:ef:a8:c8:2f:d2:01:5b:c0:33:
                    84:b5:da:15:2f:d4:d2:d4:ea:dc:3d:44:03:a8:12:
                    ef:31:7b:b2:36:e1:9a:f4:08:ba:28:6e:60:25:6a:
                    bb:be:84:fb:a1:d1:d5:86:24:7c:f9:d6:33:50:85:
                    f3:52:83:e4:27:fa:3b:8b:dd:c1:c6:43:3e:9c:e9:
                    1d:b0:f4:b2:2f:24:28:a5:66:e8:2c:19:35:a8:6e:
                    64:45:c4:be:0b:4a:0d:33:ed:b2:e6:1e:ed:66:b2:
                    80:d0:a7:d7:8e:d0:45:9f:6d:64:8a:21:70:ba:d3:
                    7e:03:b9:0e:e1:e6:66:51:d8:42:f1:0f:e4:03:5b:
                    0e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D6:42:88:A9:7E:E8:4A:85:AE:E3:1D:A2:74:CE:DB:F2:59:13:03
            X509v3 Authority Key Identifier:
                keyid:47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:4b:11:ab:73:49:72:d9:f7:de:aa:3e:f0:a3:3c:10:3a:70:
         24:5e:16:6e:cb:fb:f4:7d:d7:15:f2:1a:db:0f:17:aa:b2:22:
         bd:44:de:a4:6f:29:83:e7:97:0a:df:be:87:8d:2f:8b:b7:09:
         72:d1:85:13:f8:a7:22:3e:14:97:2f:57:38:21:e0:11:a9:87:
         27:36:7d:19:94:c8:61:7b:77:66:be:bd:ce:03:21:f0:91:e8:
         03:95:6e:29:23:99:28:dc:30:18:41:20:35:5e:e3:b0:ac:70:
         62:1a:8b:b4:b9:38:56:a7:1d:24:34:fd:bd:d6:cf:b1:e0:64:
         07:68:31:06:66:be:18:95:53:56:f4:02:59:12:63:f7:e4:e3:
         31:cc:39:fc:e7:54:86:0d:09:3f:b7:76:e0:9a:f9:25:77:a8:
         a1:3b:1e:4f:7e:bf:e3:a8:3b:08:16:3a:b3:13:cb:f8:a5:6c:
         88:d5:4f:f4:62:bf:ba:30:97:2a:e2:86:44:fd:02:e2:bc:0c:
         36:6f:62:05:90:a0:2c:0b:9a:e2:7c:e3:f5:93:81:39:e7:40:
         62:9f:f5:e8:a3:a2:90:8e:59:ab:3c:61:28:b6:15:85:de:6b:
         f4:1a:85:f6:72:0b:6f:39:9a:f6:13:b9:ee:dc:0f:f4:d2:5f:
         a2:79:ae:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkE3MzMxMTAvBgNVBAUTKDQ3NDA2NTdBNEUyRkI4NjdCRkI0NERCRjZDQjhCQzFE
RDFCMkMyMEUwHhcNMjUwNjA3MDE0MzE0WhcNMjUwNjE0MDE0MzE0WjAYMRYwFAYD
VQQDEw02ODQzOTkzMi1hM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzIOXS94u+Th9wpWuSz8YJSn8EZuuvXMk2Kk2n73lRTH4e3uau/+ENco+XvI0
MAEF83x3kvoSpRK5Jv54oTCuRRTAEnKBZEqWUyuNeIfT8vQ4ewgwSDVV3ktkhDlm
lwKADyCxCZiu3MYAv/eAb4p94r3ID8M6ppGDfp5bU9zvqMgv0gFbwDOEtdoVL9TS
1OrcPUQDqBLvMXuyNuGa9Ai6KG5gJWq7voT7odHVhiR8+dYzUIXzUoPkJ/o7i93B
xkM+nOkdsPSyLyQopWboLBk1qG5kRcS+C0oNM+2y5h7tZrKA0KfXjtBFn21kiiFw
utN+A7kO4eZmUdhC8Q/kA1sORQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/WQoip
fuhKha7jHaJ0ztvyWRMDMB8GA1UdIwQYMBaAFEdAZXpOL7hnv7RNv2y4vB3RssIO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTczMy8zMzM4NzJBMjBE
NzQxMUVEQTg5NjA2MkZDNEY5QUUwMi9SMEJsZWs0dnVHZV90RTJfYkxpOEhkR3l3
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1IwQmxlazR2dUdlX3RFMl9iTGk4SGRHeXdnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTczMy8zMzM4NzJBMjBENzQxMUVEQTg5NjA2MkZDNEY5QUUwMi9SMEJsZWs0dnVH
ZV90RTJfYkxpOEhkR3l3ZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCySxGrc0ly2ffeqj7wozwQOnAkXhZuy/v0fdcV8hrbDxeqsiK9RN6k
bymD55cK376HjS+Ltwly0YUT+KciPhSXL1c4IeARqYcnNn0ZlMhhe3dmvr3OAyHw
kegDlW4pI5ko3DAYQSA1XuOwrHBiGou0uThWpx0kNP291s+x4GQHaDEGZr4YlVNW
9AJZEmP35OMxzDn851SGDQk/t3bgmvkld6ihOx5Pfr/jqDsIFjqzE8v4pWyI1U/0
Yr+6MJcq4oZE/QLivAw2b2IFkKAsC5rifOP1k4E550Bin/Xoo6KQjlmrPGEothWF
3mv0GoX2cgtvOZr2E7nu3A/00l+iea7Q
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:19:33 2025 by rpki-client