Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
File:                     G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json)
Hash identifier:          cS099hm/yRAtBUf4d5IBnFH506m13hSmWc1E2aJGKds=
Subject key identifier:   51:50:A9:B1:12:29:DB:72:32:A9:8D:52:E0:71:73:FB:88:F6:B5:72
Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE
Certificate issuer:       /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
Manifest number:          017C
Signing time:             Sat 26 Apr 2025 23:10:42 +0000
Manifest this update:     Sat 26 Apr 2025 23:10:41 +0000
Manifest next update:     Sat 03 May 2025 23:10:41 +0000
Files and hashes:         1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: rcrITwuy9aUK+gpBTqjJrk9Wsi/2VU8E4qNVFGtvBEg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE
        Validity
            Not Before: Apr 26 23:10:41 2025 GMT
            Not After : May  3 23:10:41 2025 GMT
        Subject: CN=680d67f1-a005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6c:0f:db:cd:b6:3e:88:8d:a5:20:fb:78:35:
                    39:a5:d5:66:f8:36:20:02:75:e6:b7:b0:6c:5d:78:
                    b5:40:d2:c2:7c:70:06:f4:c4:7b:c3:5c:95:ea:4d:
                    2f:b1:6d:1d:99:e0:41:df:3b:9e:27:ad:c2:76:9c:
                    58:79:11:64:92:76:7f:9c:89:c9:23:2d:b2:e1:bd:
                    41:36:ab:32:cd:6c:d2:cf:47:ec:a0:aa:e7:7e:d8:
                    10:3c:7e:f2:03:d7:a9:d3:76:41:15:f4:d6:f5:21:
                    7e:3b:f1:d0:ca:94:f0:86:1a:3a:09:cd:33:f7:72:
                    81:fe:ae:82:16:15:67:00:d7:5e:f9:4b:7c:6e:9d:
                    92:5d:e5:9e:ae:8a:69:d2:4c:62:05:56:7d:e9:9e:
                    fc:d3:fa:68:d9:ac:a9:d4:97:60:cb:bf:42:c6:0a:
                    9d:d6:92:f3:fa:d2:33:d5:03:02:d5:a5:83:20:7d:
                    59:46:b7:1d:45:4a:aa:f3:2d:57:98:d8:07:1c:a5:
                    f0:a1:55:d6:1e:3b:53:5c:62:83:fe:f8:0b:a1:53:
                    78:a5:b5:28:c4:e6:a9:c3:10:45:e8:e3:ce:fe:ee:
                    b1:8a:ed:d5:a2:cd:ca:d9:43:59:ba:1a:21:49:07:
                    6d:78:eb:91:fb:7c:32:cc:72:0a:a7:3b:c4:d8:89:
                    57:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:50:A9:B1:12:29:DB:72:32:A9:8D:52:E0:71:73:FB:88:F6:B5:72
            X509v3 Authority Key Identifier:
                keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:5d:32:0f:ed:0c:ec:a8:6d:b0:93:62:80:8e:1a:62:d1:c3:
         57:1f:c2:f4:38:7c:cf:bf:f2:07:76:54:68:86:55:0b:77:97:
         d0:99:33:3c:03:b2:82:45:59:51:cb:ae:7b:ed:c5:e2:01:c1:
         4d:1c:86:0f:c4:46:ec:9c:81:c3:2c:00:ea:8a:76:54:2f:94:
         3e:0a:39:9b:6d:bf:19:d8:af:2f:35:ba:c5:72:a9:48:5b:33:
         7c:05:40:aa:dc:dc:75:8f:77:4f:ac:6c:0a:86:9c:e9:ef:b6:
         0e:ee:a4:f2:f5:3f:8c:78:af:8d:cc:ab:27:16:70:37:9b:87:
         94:0f:b7:39:22:98:d8:0b:52:ce:70:f3:2e:ce:a3:d9:fb:7f:
         53:72:80:85:e1:bb:19:94:51:33:72:06:2c:84:e9:a6:a7:84:
         f5:3f:88:b6:93:92:f9:68:95:72:7c:23:a8:9d:7d:88:71:a3:
         74:b1:63:1e:53:52:55:ee:1f:fd:ac:2d:f8:2f:54:81:0d:da:
         35:2f:63:ce:ff:55:59:29:e7:18:ab:5c:d4:d0:63:e9:e3:db:
         1c:be:29:ec:96:c0:d0:09:7a:90:f8:c5:dd:81:93:45:d6:63:
         01:99:2e:72:62:ad:91:04:95:92:75:84:c1:a3:f8:fd:f0:93:
         c4:42:41:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF
MDQ2QzZCRUUwHhcNMjUwNDI2MjMxMDQxWhcNMjUwNTAzMjMxMDQxWjAYMRYwFAYD
VQQDEw02ODBkNjdmMS1hMDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnmwP2822PoiNpSD7eDU5pdVm+DYgAnXmt7BsXXi1QNLCfHAG9MR7w1yV6k0v
sW0dmeBB3zueJ63CdpxYeRFkknZ/nInJIy2y4b1BNqsyzWzSz0fsoKrnftgQPH7y
A9ep03ZBFfTW9SF+O/HQypTwhho6Cc0z93KB/q6CFhVnANde+Ut8bp2SXeWeropp
0kxiBVZ96Z780/po2ayp1Jdgy79Cxgqd1pLz+tIz1QMC1aWDIH1ZRrcdRUqq8y1X
mNgHHKXwoVXWHjtTXGKD/vgLoVN4pbUoxOapwxBF6OPO/u6xiu3Vos3K2UNZuhoh
SQdteOuR+3wyzHIKpzvE2IlXTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFQqbES
KdtyMqmNUuBxc/uI9rVyMB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG
RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh
LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i
bkFRM043eXY3SExnUnNhLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAMXTIP7QzsqG2wk2KAjhpi0cNXH8L0OHzPv/IHdlRohlULd5fQmTM8
A7KCRVlRy6577cXiAcFNHIYPxEbsnIHDLADqinZUL5Q+Cjmbbb8Z2K8vNbrFcqlI
WzN8BUCq3Nx1j3dPrGwKhpzp77YO7qTy9T+MeK+NzKsnFnA3m4eUD7c5IpjYC1LO
cPMuzqPZ+39TcoCF4bsZlFEzcgYshOmmp4T1P4i2k5L5aJVyfCOonX2IcaN0sWMe
U1JV7h/9rC34L1SBDdo1L2PO/1VZKecYq1zU0GPp49scvinslsDQCXqQ+MXdgZNF
1mMBmS5yYq2RBJWSdYTBo/j98JPEQkEJ
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:32 2025 by rpki-client on console.sobornost.net