Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
File:                     MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json)
Hash identifier:          cDpMxrmxzqx+qGKPw0fHXcgH7hkh1D6YH2WuXlryUMM=
Subject key identifier:   8F:3B:E3:EF:A6:53:CE:1C:E6:5A:F2:14:8C:5E:F1:9E:00:56:41:7D
Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
Certificate issuer:       /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
Manifest number:          83
Signing time:             Sun 27 Apr 2025 05:27:01 +0000
Manifest this update:     Sun 27 Apr 2025 05:27:00 +0000
Manifest next update:     Sun 04 May 2025 05:27:00 +0000
Files and hashes:         1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: Hs6p8vZgJ5brlzmGqlx/PGOMaZPZTxt7sP0Tx9t9/rE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
                          rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
        Validity
            Not Before: Apr 27 05:27:00 2025 GMT
            Not After : May  4 05:27:00 2025 GMT
        Subject: CN=680dc024-6d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:36:b2:fd:5d:47:e8:62:51:f1:64:54:9f:a8:
                    5d:fd:75:f8:7f:6a:b6:cb:45:2f:e4:cc:80:53:f7:
                    7a:11:9b:b0:68:03:1e:65:52:65:8b:ec:be:9a:4f:
                    42:bf:96:5c:9e:c6:5b:2e:1a:15:5b:0a:d2:53:dd:
                    9c:96:3f:67:a7:ed:5b:01:07:53:10:6e:9b:e6:65:
                    46:e4:4f:27:40:e7:38:83:c0:12:89:22:f1:cf:a0:
                    72:97:84:d7:30:f8:2d:13:b3:0e:7b:c8:5b:7c:c1:
                    69:5b:cf:80:c3:0b:13:d3:b1:66:12:02:36:97:29:
                    e5:43:40:55:25:6a:4e:49:54:0c:fc:68:f4:d1:22:
                    c6:21:23:5e:63:93:22:7a:21:05:a9:10:26:ce:dd:
                    bf:33:11:1d:47:2f:53:1d:07:16:a7:5c:c6:c6:e2:
                    54:a0:c1:0e:89:9b:2f:4f:19:30:7b:ac:1d:9f:f9:
                    35:d4:1b:f2:64:63:54:c7:18:f8:66:1c:1a:b9:f7:
                    de:58:e5:5d:83:55:eb:fb:b1:fb:00:8f:1e:51:fb:
                    6c:ca:d4:af:98:05:44:20:d8:32:5d:3f:23:a5:39:
                    7b:f4:2e:98:75:47:22:6a:d8:92:26:23:a2:ea:a6:
                    c4:69:7a:f8:78:2b:dc:2c:35:f2:ad:c8:ea:90:f5:
                    bf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3B:E3:EF:A6:53:CE:1C:E6:5A:F2:14:8C:5E:F1:9E:00:56:41:7D
            X509v3 Authority Key Identifier:
                keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ef:71:3e:28:a4:f2:35:90:c2:66:19:75:18:dd:43:90:63:
         2e:cb:80:96:db:95:c8:d0:26:ec:91:aa:bc:d5:21:49:f1:f6:
         77:bf:94:a8:dd:6a:ea:a7:0b:62:1d:d2:a8:75:b1:52:3b:f0:
         66:fd:61:ec:aa:b6:73:8c:eb:2e:cf:b4:ee:37:cf:a8:a9:e0:
         7f:af:1e:e8:3c:46:6d:41:ae:23:6e:cc:3d:83:23:49:b8:cf:
         5d:6d:fb:f2:e9:ec:7c:a8:72:59:91:c8:ec:dc:7d:57:11:96:
         c1:5c:c0:bc:0c:a8:c8:18:aa:6f:ae:a6:72:0d:42:eb:3f:c3:
         47:e4:7e:ee:e5:91:70:8e:95:1a:3a:d4:db:9f:8e:fe:25:a8:
         83:2a:2f:76:5c:73:fd:38:60:be:e0:f0:b2:89:76:ad:eb:58:
         7e:81:cc:04:72:dd:60:25:19:c3:e8:03:6b:5c:44:5b:28:39:
         77:6b:6b:dd:5c:30:f9:7b:08:a2:3b:59:7e:ac:e0:95:2c:f4:
         64:5e:3c:65:38:ef:4b:68:ff:06:1f:2d:c6:72:3f:6c:8b:06:
         be:f4:ea:2d:b0:a9:cd:90:9f:cc:b0:96:2d:df:98:50:29:1d:
         62:b5:29:7f:b2:1e:f7:f7:4b:28:4f:c7:4c:63:a1:3d:8a:8e:
         3a:7b:9f:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODgzRDMxMTAvBgNVBAUTKDMxN0E3MjdGRjYzRTI3QzI5Q0MwMUNCNjc5OTNFMkM2
MUYwODA0MUUwHhcNMjUwNDI3MDUyNzAwWhcNMjUwNTA0MDUyNzAwWjAYMRYwFAYD
VQQDEw02ODBkYzAyNC02ZDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzDay/V1H6GJR8WRUn6hd/XX4f2q2y0Uv5MyAU/d6EZuwaAMeZVJli+y+mk9C
v5ZcnsZbLhoVWwrSU92clj9np+1bAQdTEG6b5mVG5E8nQOc4g8ASiSLxz6Byl4TX
MPgtE7MOe8hbfMFpW8+AwwsT07FmEgI2lynlQ0BVJWpOSVQM/Gj00SLGISNeY5Mi
eiEFqRAmzt2/MxEdRy9THQcWp1zGxuJUoMEOiZsvTxkwe6wdn/k11BvyZGNUxxj4
ZhwauffeWOVdg1Xr+7H7AI8eUftsytSvmAVEINgyXT8jpTl79C6YdUciatiSJiOi
6qbEaXr4eCvcLDXyrcjqkPW/jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI874++m
U84c5lryFIxe8Z4AVkF9MB8GA1UdIwQYMBaAFDF6cn/2PifCnMActnmT4sYfCAQe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy85NTc2MDE2ODVF
MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4S2N3QnkyZVpQaXhoOElC
QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01YcHlmX1ktSjhLY3dCeTJlWlBpeGg4SUJCNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODNEMy85NTc2MDE2ODVFMzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4
S2N3QnkyZVpQaXhoOElCQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAx73E+KKTyNZDCZhl1GN1DkGMuy4CW25XI0Cbskaq81SFJ8fZ3v5So
3WrqpwtiHdKodbFSO/Bm/WHsqrZzjOsuz7TuN8+oqeB/rx7oPEZtQa4jbsw9gyNJ
uM9dbfvy6ex8qHJZkcjs3H1XEZbBXMC8DKjIGKpvrqZyDULrP8NH5H7u5ZFwjpUa
OtTbn47+JaiDKi92XHP9OGC+4PCyiXat61h+gcwEct1gJRnD6ANrXERbKDl3a2vd
XDD5ewiiO1l+rOCVLPRkXjxlOO9LaP8GHy3Gcj9siwa+9OotsKnNkJ/MsJYt35hQ
KR1itSl/sh7390soT8dMY6E9io46e58L
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net