Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
File:                     RevxDdQ0xSgZEpy5XhoT7ML81e0.mft (raw, json)
Hash identifier:          +rJXvC1JSLIecW5KFPf1auVUyXJt2LFm3jmGjy581MM=
Subject key identifier:   E6:55:F7:44:A2:C2:4B:D3:6F:C3:01:A9:39:49:FF:6D:EA:64:E7:87
Authority key identifier: 45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED
Certificate issuer:       /CN=A916ED2B/serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
Manifest number:          92
Signing time:             Sun 27 Apr 2025 05:15:12 +0000
Manifest this update:     Sun 27 Apr 2025 05:15:12 +0000
Manifest next update:     Sun 04 May 2025 05:15:12 +0000
Files and hashes:         1: RevxDdQ0xSgZEpy5XhoT7ML81e0.crl (hash: fB7tutzaJYCX6l6hqO1LTlNmAjSJ/N3+Ua2IEl5EYWQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl
                          rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED2B, serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED
        Validity
            Not Before: Apr 27 05:15:12 2025 GMT
            Not After : May  4 05:15:12 2025 GMT
        Subject: CN=680dbd60-3235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:80:d1:eb:30:37:1b:15:3d:c0:eb:1b:06:0b:
                    85:28:c4:5f:93:d1:e1:48:32:ed:c4:06:38:cd:a4:
                    59:1a:49:c6:d2:64:47:ab:42:b5:0b:84:e1:de:5c:
                    a3:d5:87:c8:29:1f:ea:be:7a:22:6c:6e:40:5c:82:
                    f9:77:e6:98:98:aa:16:09:9a:ec:48:2a:ae:eb:c4:
                    a4:d3:9e:50:e2:97:d0:86:34:f2:4a:bd:3b:8a:4a:
                    ae:a6:df:97:d4:64:28:e0:3e:60:f6:13:2b:60:a6:
                    39:dc:f5:ad:26:7e:ce:9c:0a:78:23:16:e8:3c:78:
                    cf:b8:aa:f6:b6:51:47:71:bc:06:37:22:4d:21:02:
                    7d:b0:3c:d6:54:da:ca:bf:29:5e:bc:b2:47:16:43:
                    b3:f0:50:3c:83:3f:b2:3f:c3:06:f5:18:a9:75:af:
                    9c:86:10:be:46:bf:09:cc:ba:83:5b:fb:05:0a:ea:
                    b9:e9:5d:e7:85:89:9d:37:bb:82:30:d5:4e:82:9f:
                    4f:86:5f:e2:5f:8e:07:92:aa:78:43:72:30:d3:f4:
                    2b:b8:a5:47:16:9b:63:11:7c:e3:fe:49:7f:cb:f2:
                    bf:c7:cf:34:43:81:ee:1f:fd:5f:07:2f:1f:25:17:
                    18:a4:bc:47:d3:ad:f8:6a:68:3a:2e:d9:9f:da:09:
                    95:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:55:F7:44:A2:C2:4B:D3:6F:C3:01:A9:39:49:FF:6D:EA:64:E7:87
            X509v3 Authority Key Identifier:
                keyid:45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:64:ea:be:b4:e0:a5:ef:1f:b6:56:93:86:ba:b3:a8:5f:66:
         d2:eb:6e:5e:1f:64:b7:b8:46:23:90:bc:41:e5:17:08:80:37:
         be:78:c5:82:dc:3f:c0:2d:95:82:4c:80:af:2c:5e:99:22:c5:
         c0:9d:66:41:03:ab:ff:2c:fa:12:5a:c8:a6:61:9e:ee:cd:6c:
         d5:85:08:5a:cf:a3:81:c7:66:a9:3f:b9:d0:9b:ec:3d:a8:98:
         ec:d8:ea:2f:a6:8f:05:4e:fd:00:f9:23:41:d3:11:fe:d6:5f:
         5f:4c:94:41:e9:57:19:6c:b3:70:a6:0d:b6:1f:d5:14:a8:fd:
         ec:2d:1e:fb:90:b7:be:68:e9:53:02:63:61:1f:57:56:00:be:
         ee:da:26:89:9b:6f:3c:9d:42:bd:90:55:7a:86:3f:ad:93:3d:
         f7:96:47:3b:2d:f4:2f:bf:05:48:78:46:07:38:10:d4:35:33:
         55:46:01:8a:5b:d5:b0:ee:89:31:26:a8:1e:9d:5a:49:80:ab:
         4b:f7:95:5c:6d:de:e6:8d:8c:98:49:ba:7e:a6:2b:ae:9f:16:
         0b:c4:bf:cc:5d:0d:27:66:5f:9e:b3:5a:0e:ec:07:ff:fa:fa:
         36:5c:5e:ad:1b:f1:ca:17:ed:5f:a4:90:21:70:ad:0d:45:83:
         cf:e2:24:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVEMkIxMTAvBgNVBAUTKDQ1RUJGMTBERDQzNEM1MjgxOTEyOUNCOTVFMUExM0VD
QzJGQ0Q1RUQwHhcNMjUwNDI3MDUxNTEyWhcNMjUwNTA0MDUxNTEyWjAYMRYwFAYD
VQQDEw02ODBkYmQ2MC0zMjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwIDR6zA3GxU9wOsbBguFKMRfk9HhSDLtxAY4zaRZGknG0mRHq0K1C4Th3lyj
1YfIKR/qvnoibG5AXIL5d+aYmKoWCZrsSCqu68Sk055Q4pfQhjTySr07ikqupt+X
1GQo4D5g9hMrYKY53PWtJn7OnAp4IxboPHjPuKr2tlFHcbwGNyJNIQJ9sDzWVNrK
vylevLJHFkOz8FA8gz+yP8MG9Ripda+chhC+Rr8JzLqDW/sFCuq56V3nhYmdN7uC
MNVOgp9Phl/iX44Hkqp4Q3Iw0/QruKVHFptjEXzj/kl/y/K/x880Q4HuH/1fBy8f
JRcYpLxH0634amg6Ltmf2gmVoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZV90Si
wkvTb8MBqTlJ/23qZOeHMB8GA1UdIwQYMBaAFEXr8Q3UNMUoGRKcuV4aE+zC/NXt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQyQi8wNEY3QTU4MDQ1
QjExMUVGQkQ1OThCNzdDNEY5QUUwMi9SZXZ4RGRRMHhTZ1pFcHk1WGhvVDdNTDgx
ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JldnhEZFEweFNnWkVweTVYaG9UN01MODFlMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUQyQi8wNEY3QTU4MDQ1QjExMUVGQkQ1OThCNzdDNEY5QUUwMi9SZXZ4RGRRMHhT
Z1pFcHk1WGhvVDdNTDgxZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFZOq+tOCl7x+2VpOGurOoX2bS625eH2S3uEYjkLxB5RcIgDe+eMWC
3D/ALZWCTICvLF6ZIsXAnWZBA6v/LPoSWsimYZ7uzWzVhQhaz6OBx2apP7nQm+w9
qJjs2Oovpo8FTv0A+SNB0xH+1l9fTJRB6VcZbLNwpg22H9UUqP3sLR77kLe+aOlT
AmNhH1dWAL7u2iaJm288nUK9kFV6hj+tkz33lkc7LfQvvwVIeEYHOBDUNTNVRgGK
W9Ww7okxJqgenVpJgKtL95Vcbd7mjYyYSbp+piuunxYLxL/MXQ0nZl+es1oO7Af/
+vo2XF6tG/HKF+1fpJAhcK0NRYPP4iSX
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net