Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
File:                     BZOGVctKEp6P3fsJQsICA-N-G8E.mft (raw, json)
Hash identifier:          whHTZF/1iHLNgxPm0vplhbfHtWdfa7IeRV72NplnSrs=
Subject key identifier:   28:19:0E:26:59:7A:26:41:E1:16:14:F4:1E:43:6B:F8:10:66:14:68
Authority key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1
Certificate issuer:       /CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
Certificate serial:       0392
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
Manifest number:          038D
Signing time:             Sun 27 Apr 2025 00:27:37 +0000
Manifest this update:     Sun 27 Apr 2025 00:27:36 +0000
Manifest next update:     Sun 04 May 2025 00:27:36 +0000
Files and hashes:         1: BZOGVctKEp6P3fsJQsICA-N-G8E.crl (hash: U0IJc+z+hIZu8/YsqZ5CdBUIMM14cIY1JHrgrWlK9z8=)
                          2: 1D45733C9AAB11ECBDD79E1EC4F9AE02.roa (hash: IDcKfjrcD970kwyhuo4LacbpxchYwfNjnBXBdXrdXbs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl
                          rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF5AE, serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
        Validity
            Not Before: Apr 27 00:27:36 2025 GMT
            Not After : May  4 00:27:36 2025 GMT
        Subject: CN=680d79f9-0626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:f4:43:aa:d8:29:f4:ae:69:51:45:3d:59:
                    a4:e3:20:0d:db:b2:53:d3:f4:78:d9:9f:b2:70:3c:
                    03:4d:79:95:d3:59:9c:0c:c0:3c:bb:e9:b2:28:d2:
                    93:7f:f7:b0:df:b8:2d:00:9d:54:dc:6c:46:69:04:
                    23:c1:81:7a:57:59:0d:76:85:55:0a:1b:f7:61:2c:
                    2f:58:8e:28:ca:81:6f:73:c6:76:6d:89:e8:05:d2:
                    98:87:0f:b2:fa:5d:e8:94:2b:37:27:c0:46:19:0a:
                    0f:a8:6b:e8:0a:16:63:84:08:c7:81:e0:e9:e0:fc:
                    cf:d0:13:16:7f:05:59:8f:82:84:a6:e2:b5:46:63:
                    1e:94:bf:fa:55:32:f8:ca:a9:42:1d:36:8b:db:e5:
                    f4:41:4a:d0:b9:98:23:6d:a4:3d:56:c9:67:89:43:
                    4d:69:27:a3:ec:f2:25:9b:3f:1b:40:08:96:57:f9:
                    a1:1e:91:7a:a9:67:00:3a:1f:8a:15:40:1c:60:ab:
                    bc:d9:06:43:2b:f3:2b:cc:a5:eb:fc:c2:7a:ec:80:
                    d5:e2:c9:59:76:d8:8e:2b:5d:02:49:8c:5e:31:b7:
                    ad:3d:b6:a7:28:36:a1:35:a3:e1:08:bd:f3:81:42:
                    80:02:78:5e:7e:f0:d8:f8:2d:3f:c2:93:33:5f:5e:
                    98:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:19:0E:26:59:7A:26:41:E1:16:14:F4:1E:43:6B:F8:10:66:14:68
            X509v3 Authority Key Identifier:
                keyid:05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:24:8d:d4:9d:ba:d3:8f:a3:b3:4d:d2:34:95:76:85:fe:a1:
         ed:e8:e1:9b:35:38:e3:c1:c9:38:d3:20:d0:6b:c9:76:98:0c:
         ed:2e:18:af:37:26:80:35:07:c4:43:b1:f5:4c:56:b8:8d:b7:
         ad:c3:52:0c:26:d2:f2:a9:11:ff:cb:85:19:44:31:85:c0:54:
         da:04:8e:2c:88:ea:8e:dc:03:ff:1e:47:4a:6a:83:9c:e4:21:
         c0:c3:b8:4b:aa:19:89:6c:a2:04:9a:45:de:8e:68:62:54:9b:
         2e:a0:c8:4a:5a:9d:f9:12:e5:e4:6b:a3:65:b7:44:36:eb:ba:
         19:9a:a2:af:aa:c5:4c:44:38:3a:f0:8f:31:84:11:41:fc:2c:
         cc:94:23:99:51:80:25:65:e6:1e:83:1a:61:74:a5:23:ff:a6:
         58:cf:45:a3:09:b2:ec:dd:02:42:f3:be:f4:b4:99:c1:30:43:
         e7:f0:49:b4:cc:4e:9a:6e:41:91:62:08:a3:b6:e4:bb:f1:69:
         a4:08:8c:c7:78:cc:3e:24:e3:6b:b7:89:d4:32:67:a8:6f:ce:
         cb:c5:7f:05:62:ac:2c:34:17:3c:73:ee:25:64:8c:92:47:54:
         37:98:3c:a4:02:8a:3d:9e:c2:ce:95:63:87:4b:34:d4:2c:68:
         ae:63:5b:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY1QUUxMTAvBgNVBAUTKDA1OTM4NjU1Q0I0QTEyOUU4RkRERkIwOTQyQzIwMjAz
RTM3RTFCQzEwHhcNMjUwNDI3MDAyNzM2WhcNMjUwNTA0MDAyNzM2WjAYMRYwFAYD
VQQDEw02ODBkNzlmOS0wNjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvsb0Q6rYKfSuaVFFPVmk4yAN27JT0/R42Z+ycDwDTXmV01mcDMA8u+myKNKT
f/ew37gtAJ1U3GxGaQQjwYF6V1kNdoVVChv3YSwvWI4oyoFvc8Z2bYnoBdKYhw+y
+l3olCs3J8BGGQoPqGvoChZjhAjHgeDp4PzP0BMWfwVZj4KEpuK1RmMelL/6VTL4
yqlCHTaL2+X0QUrQuZgjbaQ9VslniUNNaSej7PIlmz8bQAiWV/mhHpF6qWcAOh+K
FUAcYKu82QZDK/MrzKXr/MJ67IDV4slZdtiOK10CSYxeMbetPbanKDahNaPhCL3z
gUKAAnhefvDY+C0/wpMzX16YWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgZDiZZ
eiZB4RYU9B5Da/gQZhRoMB8GA1UdIwQYMBaAFAWThlXLShKej937CULCAgPjfhvB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjVBRS81RTZFMjA3ODlB
QTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0VwNlAzZnNKUXNJQ0EtTi1H
OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JaT0dWY3RLRXA2UDNmc0pRc0lDQS1OLUc4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjVBRS81RTZFMjA3ODlBQTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0Vw
NlAzZnNKUXNJQ0EtTi1HOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDTJI3UnbrTj6OzTdI0lXaF/qHt6OGbNTjjwck40yDQa8l2mAztLhiv
NyaANQfEQ7H1TFa4jbetw1IMJtLyqRH/y4UZRDGFwFTaBI4siOqO3AP/HkdKaoOc
5CHAw7hLqhmJbKIEmkXejmhiVJsuoMhKWp35EuXka6Nlt0Q267oZmqKvqsVMRDg6
8I8xhBFB/CzMlCOZUYAlZeYegxphdKUj/6ZYz0WjCbLs3QJC8770tJnBMEPn8Em0
zE6abkGRYgijtuS78WmkCIzHeMw+JONrt4nUMmeob87LxX8FYqwsNBc8c+4lZIyS
R1Q3mDykAoo9nsLOlWOHSzTULGiuY1vt
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:17 2025 by rpki-client on console.sobornost.net