Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
File:                     bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json)
Hash identifier:          YlEg7qopLEyZYvcnl6moBVx75PA25TH6hPR9sEmARr4=
Subject key identifier:   ED:12:02:62:09:B6:5E:EA:05:A5:5E:52:05:FE:49:AE:FC:B2:2E:A4
Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
Certificate issuer:       /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Certificate serial:       03AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
Manifest number:          0378
Signing time:             Sun 27 Apr 2025 00:42:11 +0000
Manifest this update:     Sun 27 Apr 2025 00:42:10 +0000
Manifest next update:     Sun 04 May 2025 00:42:10 +0000
Files and hashes:         1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: ul+2Outt3Qz9OgD63Ii4/iHaVAIHTYxcEFL8pF8LIYk=)
                          2: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: uzprXmLZAeVeFEFGMakzKpKMKq1iIlqcTuQSaK0YrGo=)
                          3: AD17704445F611EE97DF317CC4F9AE02.roa (hash: sdrVSjIs8Qd6YgjT3RuNMeG76kE1PDfBoWYkgwiCgcM=)
                          4: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: 3UjrYjj5O3Amm02WCEzbVdg/2HdFUuqdwKYNG8cKQe0=)
                          5: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: YgWtLAFjeyb8EUf6jgk5P6z3rHF4ij9vs7WYRKlGxPw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
                          rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939 (0x3ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
        Validity
            Not Before: Apr 27 00:42:10 2025 GMT
            Not After : May  4 00:42:10 2025 GMT
        Subject: CN=680d7d63-0883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2a:f2:a9:5b:c7:ab:50:1e:87:f2:6b:79:75:
                    e7:ec:c2:b1:ef:73:e2:ec:8a:31:bb:f7:cc:ca:4b:
                    2d:7a:8b:33:85:fd:59:5c:a5:31:dd:90:34:15:a6:
                    fa:90:38:ea:94:98:aa:c3:d6:42:21:b7:97:64:0b:
                    19:52:34:b1:34:a5:4c:b9:a8:0e:a8:06:7e:df:57:
                    7d:1b:8c:ff:56:b1:20:9d:00:2b:ce:b2:19:19:a3:
                    e9:5f:d0:fe:57:0a:10:0c:ff:89:73:fe:10:f6:db:
                    ef:c4:39:fe:aa:22:7d:3b:83:bd:7b:f4:79:1b:53:
                    b0:40:e8:a0:79:8a:b0:40:33:b2:1d:b0:f4:bd:c2:
                    da:c6:4b:33:ba:f3:d9:d6:82:79:c2:7d:a1:e6:6d:
                    70:bc:41:fe:42:8b:ba:82:33:34:1b:8d:d7:70:2c:
                    62:4d:89:d5:ac:ea:e9:06:59:f8:6f:66:88:bc:e1:
                    98:28:12:a6:8a:dd:bf:15:40:5e:22:8a:95:15:f1:
                    10:ae:8d:4a:1e:7a:77:33:c2:78:3c:4e:79:d6:aa:
                    94:46:e8:78:8c:dc:99:cf:c0:8d:6b:25:3a:cd:6e:
                    79:25:4d:ea:21:e0:3f:25:19:30:82:13:cb:65:8b:
                    cb:fa:5c:e5:fd:52:68:2c:2e:68:4f:4d:05:e3:29:
                    b1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:12:02:62:09:B6:5E:EA:05:A5:5E:52:05:FE:49:AE:FC:B2:2E:A4
            X509v3 Authority Key Identifier:
                keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:33:96:5e:db:44:e2:88:10:7d:d9:a5:96:bf:c7:0e:c7:6a:
         16:cb:f0:f4:8c:5e:e3:9f:8b:ed:57:b1:bd:59:58:7d:c2:92:
         6f:5f:3b:b4:0a:81:4e:83:f1:22:c7:7b:7b:bb:35:28:af:cc:
         94:68:c0:e1:91:c5:28:23:94:35:ae:0d:c4:75:11:b6:43:a2:
         da:d6:f5:39:c9:b9:a7:3d:f0:80:cd:99:6e:56:07:e8:be:07:
         df:5b:43:ce:f4:19:48:31:48:44:2f:70:a2:76:3e:f8:aa:16:
         26:4b:fb:e9:43:5e:72:ff:d2:82:a0:11:1f:95:92:e7:e7:b2:
         9c:63:f5:de:75:9b:82:46:9b:89:6e:9d:52:7a:07:fd:55:36:
         cb:d7:26:f3:67:25:7f:c2:78:3a:e4:e0:ad:f1:26:2e:84:16:
         04:5c:ee:f6:c6:b2:5b:46:7d:a8:3b:a3:25:38:b9:69:74:69:
         a2:49:b0:29:98:72:54:2b:c8:3a:8d:9f:e8:db:eb:8e:e5:25:
         85:d1:03:a4:90:e8:35:95:b4:3f:24:e2:c3:1d:4e:db:41:0c:
         23:4e:c6:b5:f6:58:72:c6:25:6f:2d:db:b0:31:8a:05:24:05:
         9a:a4:ff:ae:f2:09:d5:bf:ae:fe:4a:df:06:46:98:0c:62:16:
         6a:23:a6:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDEyMTYxMTAvBgNVBAUTKDZEQkQ1QzREMDEyMUZDQjMxOEU3OEM0NTFCNkY1Njcz
MjA5ODYwMDIwHhcNMjUwNDI3MDA0MjEwWhcNMjUwNTA0MDA0MjEwWjAYMRYwFAYD
VQQDEw02ODBkN2Q2My0wODgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3yryqVvHq1Aeh/JreXXn7MKx73Pi7Ioxu/fMyksteoszhf1ZXKUx3ZA0Fab6
kDjqlJiqw9ZCIbeXZAsZUjSxNKVMuagOqAZ+31d9G4z/VrEgnQArzrIZGaPpX9D+
VwoQDP+Jc/4Q9tvvxDn+qiJ9O4O9e/R5G1OwQOigeYqwQDOyHbD0vcLaxkszuvPZ
1oJ5wn2h5m1wvEH+Qou6gjM0G43XcCxiTYnVrOrpBln4b2aIvOGYKBKmit2/FUBe
IoqVFfEQro1KHnp3M8J4PE551qqURuh4jNyZz8CNayU6zW55JU3qIeA/JRkwghPL
ZYvL+lzl/VJoLC5oT00F4ymxuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0SAmIJ
tl7qBaVeUgX+Sa78si6kMB8GA1UdIwQYMBaAFG29XE0BIfyzGOeMRRtvVnMgmGAC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIxNi9EQzc4MjY4Q0I5
NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9MTVk1NHhGRzI5V2N5Q1lZ
QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JiMWNUUUVoX0xNWTU0eEZHMjlXY3lDWVlBSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTIxNi9EQzc4MjY4Q0I5NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9M
TVk1NHhGRzI5V2N5Q1lZQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBAM5Ze20TiiBB92aWWv8cOx2oWy/D0jF7jn4vtV7G9WVh9wpJvXzu0
CoFOg/Eix3t7uzUor8yUaMDhkcUoI5Q1rg3EdRG2Q6La1vU5ybmnPfCAzZluVgfo
vgffW0PO9BlIMUhEL3Cidj74qhYmS/vpQ15y/9KCoBEflZLn57KcY/XedZuCRpuJ
bp1Segf9VTbL1ybzZyV/wng65OCt8SYuhBYEXO72xrJbRn2oO6MlOLlpdGmiSbAp
mHJUK8g6jZ/o2+uO5SWF0QOkkOg1lbQ/JOLDHU7bQQwjTsa19lhyxiVvLduwMYoF
JAWapP+u8gnVv67+St8GRpgMYhZqI6aY
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:12 2025 by rpki-client on console.sobornost.net