Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft
File:                     4BXzk-ejI8P08b_iblv-BA415VM.mft (raw, json)
Hash identifier:          uwAcLA9Obe5Ft8bz3rJXtzF8WOy7v92nKuEsqu3TXkg=
Subject key identifier:   53:98:AF:9D:25:F2:03:FD:9E:27:2B:4B:C1:85:9A:79:51:D7:22:C5
Authority key identifier: E0:15:F3:93:E7:A3:23:C3:F4:F1:BF:E2:6E:5B:FE:04:0E:35:E5:53
Certificate issuer:       /CN=A91C6CAF/serialNumber=E015F393E7A323C3F4F1BFE26E5BFE040E35E553
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft
Manifest number:          F1
Signing time:             Sun 27 Apr 2025 04:12:40 +0000
Manifest this update:     Sun 27 Apr 2025 04:12:39 +0000
Manifest next update:     Sun 04 May 2025 04:12:39 +0000
Files and hashes:         1: 4BXzk-ejI8P08b_iblv-BA415VM.crl (hash: ZZXdLurAUqrNKbXPmiCftpUNxqvCbbM2QIFxuI8B8dA=)
                          2: C4C0B9160E4C11EF82F91F39C4F9AE02.roa (hash: kz0noASfcID+yNUD17+dcNzBgS2AhI7keu64pTKydZI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.crl
                          rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6CAF, serialNumber=E015F393E7A323C3F4F1BFE26E5BFE040E35E553
        Validity
            Not Before: Apr 27 04:12:39 2025 GMT
            Not After : May  4 04:12:39 2025 GMT
        Subject: CN=680daeb8-e5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:ca:c6:5a:ce:6c:06:6e:72:b5:77:83:84:
                    9b:9c:5f:0b:5d:60:9b:dc:f1:e8:56:3d:77:a4:02:
                    2e:a0:a2:92:de:7c:98:33:ed:e1:77:11:0b:bc:93:
                    62:4d:a8:04:7d:3c:e8:a0:56:23:d1:20:81:9d:75:
                    21:5c:7f:35:a5:3e:30:51:61:74:cf:f2:55:a9:8a:
                    f1:4f:a3:9a:93:26:ca:a6:7c:eb:74:13:f3:55:61:
                    38:ca:81:17:8a:b5:c0:9e:ae:91:fe:2c:e8:28:0a:
                    07:2d:e6:4a:79:24:4e:d5:33:23:5d:26:e8:fa:b6:
                    8d:f5:fc:c1:e7:75:fe:8d:4f:b5:d9:67:3c:3d:0e:
                    cc:82:44:13:a2:d4:b3:30:51:58:92:d3:ce:89:d3:
                    50:2a:b3:5f:9f:c8:09:2e:47:48:cd:15:c5:92:4b:
                    a5:74:09:0c:20:b8:3e:21:e4:f9:9e:a0:3c:cc:bc:
                    2a:0c:a2:e8:5a:32:0d:4c:a3:46:9b:53:91:48:1c:
                    df:90:a0:78:c7:1b:de:90:78:ff:00:ad:32:16:1e:
                    95:de:2e:9c:8c:de:b1:7d:88:df:5b:4b:99:cb:82:
                    e5:5c:d7:c8:40:0c:7e:ca:5c:38:bf:2d:e2:2d:83:
                    bb:7c:2b:64:35:ad:66:26:21:ef:37:f8:87:e8:ca:
                    75:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:98:AF:9D:25:F2:03:FD:9E:27:2B:4B:C1:85:9A:79:51:D7:22:C5
            X509v3 Authority Key Identifier:
                keyid:E0:15:F3:93:E7:A3:23:C3:F4:F1:BF:E2:6E:5B:FE:04:0E:35:E5:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BXzk-ejI8P08b_iblv-BA415VM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/FD26DC22B6F411EEAC203810C4F9AE02/4BXzk-ejI8P08b_iblv-BA415VM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:35:d6:b4:f1:28:93:fe:f0:39:f5:23:22:10:15:b3:0a:54:
         9d:40:7c:1f:ba:57:f4:17:89:18:b2:89:65:e2:42:6a:09:e4:
         8c:56:75:2f:3b:24:a5:d9:6b:b7:8a:62:12:f8:29:af:77:c1:
         10:22:53:a6:d0:b2:40:7b:3c:56:f2:c7:41:34:ef:f2:41:82:
         9b:58:ec:ef:b6:20:7a:6b:8c:04:ec:f2:33:e9:a8:1b:c6:11:
         fe:c0:66:c0:25:db:28:45:c4:08:48:5b:75:65:44:ea:6d:d9:
         9f:da:07:32:7a:7e:0d:9a:2e:05:ff:27:49:ed:7f:09:d2:28:
         e5:b8:ff:73:52:65:a9:5a:0f:f3:1c:37:b0:cd:e3:a0:3f:53:
         c2:98:e6:bc:a7:b5:1c:6c:f4:cb:b1:c6:f8:d8:85:16:f2:1e:
         3f:b5:b5:7d:cf:86:6d:8d:0e:c7:2c:33:98:4d:22:2c:a2:6d:
         36:9c:c3:23:54:14:fa:06:4e:f3:7b:fc:ba:40:ec:7c:2c:be:
         30:10:78:c1:28:29:2c:c6:1c:98:e6:92:90:4c:9e:8c:d3:54:
         38:66:d3:83:bf:32:b9:06:de:2a:df:01:2d:5c:b2:73:d0:5b:
         1d:ff:7a:64:0b:89:ed:a7:ed:24:23:21:24:99:c3:0d:3d:ad:
         bc:ab:3d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:55 2025 by rpki-client on console.sobornost.net