Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft
File:                     BL27YPamYNHS0BJzSQ_PCcw1m3M.mft (raw, json)
Hash identifier:          /nuc3WUEZ9KAggddjipLk0db0piQpzy5KhgpXazgf60=
Subject key identifier:   1B:C3:40:F4:E5:2E:DA:68:CA:AC:6D:F6:EB:45:D8:81:41:70:F4:F1
Authority key identifier: 04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73
Certificate issuer:       /CN=A917C59F/serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73
Certificate serial:       0876
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft
Manifest number:          086E
Signing time:             Sat 26 Apr 2025 20:25:15 +0000
Manifest this update:     Sat 26 Apr 2025 20:25:15 +0000
Manifest next update:     Sat 03 May 2025 20:25:15 +0000
Files and hashes:         1: BL27YPamYNHS0BJzSQ_PCcw1m3M.crl (hash: Wb6FQ1KBcLfaKFvGuZtqz0kvI4PhKfZ6Hn184xLTnGA=)
                          2: 12482BA205A211ED81E44F6DC4F9AE02.roa (hash: fYbzp1Oz4KIx83cDiZ+b+olfYLWh9zVxHoKcBuS5W0E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl
                          rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2166 (0x876)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C59F, serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73
        Validity
            Not Before: Apr 26 20:25:15 2025 GMT
            Not After : May  3 20:25:15 2025 GMT
        Subject: CN=680d412b-7dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:95:cd:f1:f3:5c:8d:4f:71:a6:b9:54:14:7a:
                    3b:23:d2:80:00:c1:9d:59:6b:b9:d4:02:6b:af:f3:
                    bf:fe:50:5b:4e:65:03:16:39:62:eb:b3:8f:da:9d:
                    74:e2:22:3c:dc:fc:6d:74:9a:bb:fb:c1:c2:33:78:
                    8c:88:53:e7:f4:87:b8:0a:f4:2b:c9:44:40:4d:b6:
                    73:3e:f9:6a:ae:1d:b5:36:80:7e:f1:4e:78:79:d6:
                    49:3e:9e:41:8d:38:67:7f:ee:03:d1:7f:96:8b:7f:
                    b7:83:c0:d9:f2:4f:a8:28:c8:39:d8:31:ac:fe:5e:
                    2f:3c:86:f4:6f:b2:21:5d:cc:8a:72:f5:06:e8:aa:
                    5b:8b:87:b9:2d:16:17:47:c1:6c:93:14:17:2c:5e:
                    50:75:15:0d:fa:ab:17:74:e5:f5:73:17:97:3f:91:
                    a9:d0:9c:19:54:8f:28:7f:25:d1:48:96:47:c2:56:
                    46:9f:08:35:f3:e6:3e:1e:a0:d7:8f:91:25:ef:19:
                    ba:bd:5f:1e:19:f9:7e:04:b9:1f:91:71:29:ba:1a:
                    4c:e8:b1:77:0f:b9:00:d8:ba:99:79:bf:ef:65:a9:
                    8a:5f:7c:a4:fa:26:5f:7f:b1:e7:6b:1c:de:36:a4:
                    c1:f0:a6:4f:36:06:6c:e2:ba:ca:83:4c:ac:37:cb:
                    27:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C3:40:F4:E5:2E:DA:68:CA:AC:6D:F6:EB:45:D8:81:41:70:F4:F1
            X509v3 Authority Key Identifier:
                keyid:04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:7c:6d:a3:d6:af:ac:a2:1a:b4:d1:3a:10:4b:4f:56:a6:35:
         91:a0:8f:3d:fc:8f:3f:7c:a3:25:b6:3e:bf:95:c9:1e:48:6b:
         e2:20:11:ff:2f:80:30:27:3d:94:08:09:af:0f:5f:a0:0a:db:
         17:2c:ab:40:4a:6e:c7:3a:f3:41:54:c1:a1:75:2e:f8:b0:f0:
         67:db:ff:8e:e9:78:eb:5c:f9:2a:8a:a9:0f:e5:24:6a:aa:f8:
         ab:a9:2d:f9:2c:59:b5:64:ce:81:b4:c2:fe:b1:b5:8e:42:d6:
         d4:b0:c3:2d:c5:46:4d:73:dd:8f:a0:d8:eb:b6:80:93:03:6c:
         21:45:ab:a6:56:4d:07:13:c0:75:8e:16:68:8e:9d:d2:f9:f6:
         f3:46:29:cd:f8:a0:51:aa:df:f9:38:40:5f:81:b7:08:2a:02:
         d2:25:13:3a:c9:ed:83:d5:83:fc:61:e6:14:72:34:a1:47:f0:
         38:7a:f1:c4:74:10:b0:f0:15:32:31:4b:c4:fb:2d:c6:d0:49:
         d6:25:18:eb:b0:47:8f:35:d3:d2:4a:33:75:50:b2:c0:f2:61:
         e0:62:fe:0e:7e:64:0f:6c:df:5f:22:55:7f:0d:71:0d:96:6f:
         f0:e1:71:a2:2b:3c:81:40:bd:15:d7:45:61:42:1b:75:66:1f:
         4b:74:fb:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M1OUYxMTAvBgNVBAUTKDA0QkRCQjYwRjZBNjYwRDFEMkQwMTI3MzQ5MEZDRjA5
Q0MzNTlCNzMwHhcNMjUwNDI2MjAyNTE1WhcNMjUwNTAzMjAyNTE1WjAYMRYwFAYD
VQQDEw02ODBkNDEyYi03ZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA05XN8fNcjU9xprlUFHo7I9KAAMGdWWu51AJrr/O//lBbTmUDFjli67OP2p10
4iI83PxtdJq7+8HCM3iMiFPn9Ie4CvQryURATbZzPvlqrh21NoB+8U54edZJPp5B
jThnf+4D0X+Wi3+3g8DZ8k+oKMg52DGs/l4vPIb0b7IhXcyKcvUG6Kpbi4e5LRYX
R8FskxQXLF5QdRUN+qsXdOX1cxeXP5Gp0JwZVI8ofyXRSJZHwlZGnwg18+Y+HqDX
j5El7xm6vV8eGfl+BLkfkXEpuhpM6LF3D7kA2LqZeb/vZamKX3yk+iZff7Hnaxze
NqTB8KZPNgZs4rrKg0ysN8snFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvDQPTl
Ltpoyqxt9utF2IFBcPTxMB8GA1UdIwQYMBaAFAS9u2D2pmDR0tASc0kPzwnMNZtz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzU5Ri80MjVFODkwMkMx
NDQxMUVBOTFGMDNBNkZDNEY5QUUwMi9CTDI3WVBhbVlOSFMwQkp6U1FfUENjdzFt
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JMMjdZUGFtWU5IUzBCSnpTUV9QQ2N3MW0zTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzU5Ri80MjVFODkwMkMxNDQxMUVBOTFGMDNBNkZDNEY5QUUwMi9CTDI3WVBhbVlO
SFMwQkp6U1FfUENjdzFtM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBufG2j1q+sohq00ToQS09WpjWRoI89/I8/fKMltj6/lckeSGviIBH/
L4AwJz2UCAmvD1+gCtsXLKtASm7HOvNBVMGhdS74sPBn2/+O6XjrXPkqiqkP5SRq
qvirqS35LFm1ZM6BtML+sbWOQtbUsMMtxUZNc92PoNjrtoCTA2whRaumVk0HE8B1
jhZojp3S+fbzRinN+KBRqt/5OEBfgbcIKgLSJRM6ye2D1YP8YeYUcjShR/A4evHE
dBCw8BUyMUvE+y3G0EnWJRjrsEePNdPSSjN1ULLA8mHgYv4OfmQPbN9fIlV/DXEN
lm/w4XGiKzyBQL0V10VhQht1Zh9LdPs5
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:01 2025 by rpki-client on console.sobornost.net