Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft
File:                     4BXzk-ejI8P08b_iblv-BA415VM.mft (raw, json)
Hash identifier:          F+aq8b+aXYJZ9D3g+vWoYbVMMuMtVn6caVgyHrZN8eY=
Subject key identifier:   A8:18:DB:4A:C7:F2:56:6C:30:F9:84:3A:D6:28:3C:68:44:89:9F:19
Authority key identifier: E0:15:F3:93:E7:A3:23:C3:F4:F1:BF:E2:6E:5B:FE:04:0E:35:E5:53
Certificate issuer:       /CN=A91C6CAF/serialNumber=E015F393E7A323C3F4F1BFE26E5BFE040E35E553
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft
Manifest number:          0101
Signing time:             Sat 31 May 2025 04:44:41 +0000
Manifest this update:     Sat 31 May 2025 04:44:40 +0000
Manifest next update:     Sat 07 Jun 2025 04:44:40 +0000
Files and hashes:         1: 4BXzk-ejI8P08b_iblv-BA415VM.crl (hash: f0ls8xIRPhxR7OVp87jyw8XOYfeBzLP8m+xNouCddOQ=)
                          2: C4C0B9160E4C11EF82F91F39C4F9AE02.roa (hash: kz0noASfcID+yNUD17+dcNzBgS2AhI7keu64pTKydZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.crl
                          rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 04:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6CAF, serialNumber=E015F393E7A323C3F4F1BFE26E5BFE040E35E553
        Validity
            Not Before: May 31 04:44:40 2025 GMT
            Not After : Jun  7 04:44:40 2025 GMT
        Subject: CN=683a8938-8669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4f:82:a6:81:cc:05:f9:c1:03:2a:59:01:5e:
                    a4:ae:19:f5:d4:95:dd:28:f6:ba:0e:10:83:3e:ba:
                    c7:2c:3a:9b:14:b8:c7:11:69:eb:0b:27:d9:e0:a0:
                    b9:9e:c8:a7:f1:da:96:e6:cf:83:3d:bf:82:fa:6a:
                    a7:9f:5e:9e:da:8d:4c:9e:8d:88:28:56:3c:39:fc:
                    b9:90:53:b3:aa:f9:00:a1:70:21:87:90:2e:cd:d5:
                    e2:2d:87:2f:6f:65:c8:8c:21:0d:2d:d0:5b:2f:56:
                    0b:ce:a4:0f:67:a7:17:cd:ae:02:e0:3e:1f:e3:7a:
                    89:74:e5:5b:02:bb:d0:54:24:c4:09:f1:f1:3b:67:
                    b4:59:0d:7a:b7:86:ae:24:fb:e8:e0:1f:1a:95:41:
                    86:87:a2:8b:40:07:16:91:ac:1c:f3:96:df:b0:d4:
                    a2:7b:ba:88:79:36:75:fd:d2:74:c0:3e:80:b8:cf:
                    cb:80:67:0d:42:e5:69:f3:8f:7d:f0:20:c2:cc:c1:
                    a8:7e:ee:05:16:cb:09:4f:29:30:54:bb:d9:b5:56:
                    53:ce:0a:d2:5a:04:30:3d:b1:f1:ab:6e:e9:ab:2b:
                    cb:54:80:d3:3b:f1:2c:34:be:ec:2d:7f:b8:c7:b3:
                    02:f4:37:d5:69:f1:b8:2a:a8:6d:4e:12:07:d5:1b:
                    f8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:18:DB:4A:C7:F2:56:6C:30:F9:84:3A:D6:28:3C:68:44:89:9F:19
            X509v3 Authority Key Identifier:
                keyid:E0:15:F3:93:E7:A3:23:C3:F4:F1:BF:E2:6E:5B:FE:04:0E:35:E5:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:21:ac:17:c5:6e:02:20:14:3f:20:68:01:83:72:ec:56:e3:
         b0:cf:b8:f8:32:c3:a5:69:f0:57:b5:3f:0b:1d:c7:bb:9d:30:
         84:b9:94:b6:14:55:5a:87:ec:fd:8f:40:2a:26:0e:86:49:9f:
         05:5a:51:21:a0:05:0a:22:5c:9b:4d:35:c9:72:d1:b1:30:3e:
         64:f0:71:e6:cf:49:a9:06:52:83:3f:5d:26:d3:08:0c:a1:e2:
         25:1c:d5:38:05:90:2b:61:cb:72:97:ef:80:1b:e5:3b:94:0e:
         11:bd:bc:19:f5:37:56:51:66:1e:b4:c7:96:d2:68:bc:75:3c:
         d4:0e:5c:eb:45:7e:79:0b:6b:f0:44:24:7d:ce:aa:7c:00:cb:
         ca:78:d3:5a:50:e3:4b:6d:48:84:fa:67:40:78:e2:b5:f6:34:
         ca:06:d2:3b:ec:f2:df:ed:22:a4:ed:78:97:a7:de:d8:46:95:
         72:25:aa:22:7b:62:25:d2:52:99:27:00:64:ef:d4:3b:2e:f3:
         c8:ee:56:2f:ac:9b:8f:2d:d9:a9:d7:98:28:e8:0f:10:6d:98:
         61:59:1d:c1:93:f9:15:80:59:ec:bd:ae:6a:ba:cf:9b:e2:f5:
         0f:13:53:4d:01:d6:e8:35:86:7e:d6:82:f1:51:aa:70:21:92:
         a9:fb:b2:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZDQUYxMTAvBgNVBAUTKEUwMTVGMzkzRTdBMzIzQzNGNEYxQkZFMjZFNUJGRTA0
MEUzNUU1NTMwHhcNMjUwNTMxMDQ0NDQwWhcNMjUwNjA3MDQ0NDQwWjAYMRYwFAYD
VQQDEw02ODNhODkzOC04NjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzk+CpoHMBfnBAypZAV6krhn11JXdKPa6DhCDPrrHLDqbFLjHEWnrCyfZ4KC5
nsin8dqW5s+DPb+C+mqnn16e2o1Mno2IKFY8Ofy5kFOzqvkAoXAhh5AuzdXiLYcv
b2XIjCENLdBbL1YLzqQPZ6cXza4C4D4f43qJdOVbArvQVCTECfHxO2e0WQ16t4au
JPvo4B8alUGGh6KLQAcWkawc85bfsNSie7qIeTZ1/dJ0wD6AuM/LgGcNQuVp8499
8CDCzMGofu4FFssJTykwVLvZtVZTzgrSWgQwPbHxq27pqyvLVIDTO/EsNL7sLX+4
x7MC9DfVafG4KqhtThIH1Rv4wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgY20rH
8lZsMPmEOtYoPGhEiZ8ZMB8GA1UdIwQYMBaAFOAV85PnoyPD9PG/4m5b/gQONeVT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GRDI2REMyMkI2
RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi80Qlh6ay1lakk4UDA4Yl9pYmx2LUJBNDE1
Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRCWHprLWVqSThQMDhiX2libHYtQkE0MTVWTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkNBRi9GRDI2REMyMkI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi80Qlh6ay1lakk4
UDA4Yl9pYmx2LUJBNDE1Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCsIawXxW4CIBQ/IGgBg3LsVuOwz7j4MsOlafBXtT8LHce7nTCEuZS2
FFVah+z9j0AqJg6GSZ8FWlEhoAUKIlybTTXJctGxMD5k8HHmz0mpBlKDP10m0wgM
oeIlHNU4BZArYctyl++AG+U7lA4RvbwZ9TdWUWYetMeW0mi8dTzUDlzrRX55C2vw
RCR9zqp8AMvKeNNaUONLbUiE+mdAeOK19jTKBtI77PLf7SKk7XiXp97YRpVyJaoi
e2Il0lKZJwBk79Q7LvPI7lYvrJuPLdmp15go6A8QbZhhWR3Bk/kVgFnsva5qus+b
4vUPE1NNAdboNYZ+1oLxUapwIZKp+7J+
-----END CERTIFICATE-----
Generated at Sat May 31 16:38:51 2025 by rpki-client