Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
File:                     BWvvRscxWDfrrepBeAueQaP7fqA.mft (raw, json)
Hash identifier:          e858AtyCJnQorDIW6wzZGzMgZ5ceFoXAryxitvXmsSQ=
Subject key identifier:   2C:50:2C:74:E1:72:26:AD:83:10:F6:51:F5:9D:AE:0B:91:05:34:08
Authority key identifier: 05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0
Certificate issuer:       /CN=A912391D/serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0
Certificate serial:       0280
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
Manifest number:          027C
Signing time:             Sun 15 Jun 2025 01:23:08 +0000
Manifest this update:     Sun 15 Jun 2025 01:23:07 +0000
Manifest next update:     Sun 22 Jun 2025 01:23:07 +0000
Files and hashes:         1: BWvvRscxWDfrrepBeAueQaP7fqA.crl (hash: IxEPaGnaKLZdxwpBjl4py9L+U5dcCxLnJ7/YONPGVWs=)
                          2: 207B27560EE411EDA32ABE0FC4F9AE02.roa (hash: 6uwFx8/ukSzKKH+6QOFIRRiywJ0AdBaXItyBqWPv0ck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl
                          rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 01:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912391D, serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0
        Validity
            Not Before: Jun 15 01:23:07 2025 GMT
            Not After : Jun 22 01:23:07 2025 GMT
        Subject: CN=684e207c-1e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:72:e8:cd:a1:af:14:e2:96:30:2a:ad:b8:
                    c5:0a:34:1b:b5:ad:09:3f:a1:26:61:7a:3b:02:45:
                    a5:2f:49:87:a8:47:19:15:4c:f2:f3:a2:16:c3:2d:
                    97:f9:90:3e:c8:da:9d:ea:b4:ee:da:1b:53:0d:1b:
                    e5:ed:2f:95:a4:5c:1e:e9:9a:d2:7d:f2:df:df:3c:
                    69:62:23:25:9a:46:ff:96:e9:2b:b2:a3:62:e2:7c:
                    e4:9a:9f:0e:c8:42:d4:04:b6:36:af:48:7a:c4:e3:
                    d7:4a:86:b8:30:b4:20:97:97:15:fc:0a:16:72:ca:
                    8a:1b:8b:1d:ed:16:74:68:be:4d:b9:71:13:22:2e:
                    dd:f8:f4:f6:29:60:1b:2f:d7:38:eb:80:e0:ac:7f:
                    7e:98:39:2c:a9:e4:21:a6:4d:d8:41:ee:b2:65:d4:
                    aa:7c:fb:08:f2:99:fe:f6:e9:be:27:c9:22:1c:22:
                    49:b4:b2:42:a7:2b:3b:18:9d:54:61:b3:83:e3:f3:
                    e2:b7:53:3a:49:b8:95:04:4f:30:31:3e:a3:26:be:
                    74:eb:c3:f9:b5:2e:56:1f:f9:3e:6e:0f:56:f7:23:
                    eb:72:09:2d:b5:74:c4:6b:9e:11:2d:ef:96:1c:42:
                    8f:4a:ff:f8:46:83:e1:f0:e8:b0:57:d4:f8:a0:32:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:50:2C:74:E1:72:26:AD:83:10:F6:51:F5:9D:AE:0B:91:05:34:08
            X509v3 Authority Key Identifier:
                keyid:05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:44:25:80:0d:8a:b3:84:bb:b6:e3:78:60:3f:a9:04:de:7d:
         85:78:54:22:10:57:38:ff:26:3b:c8:51:bc:de:c7:90:83:7e:
         25:24:b7:bc:3e:d0:c4:ee:02:ed:56:94:50:1e:39:d8:3a:3c:
         33:f9:53:5a:07:27:1b:98:39:36:2d:26:fc:f0:82:72:2e:48:
         e2:68:4a:57:b9:68:d8:0a:f6:04:bf:c4:de:34:09:b6:6c:86:
         38:9d:d2:78:91:04:8f:c9:f5:76:39:b4:5a:41:54:24:aa:92:
         19:fb:fc:b2:6d:b4:2b:c3:66:dd:ad:d8:85:34:a6:31:1e:5c:
         61:65:34:59:2b:ec:a8:91:ea:9d:a3:14:eb:26:57:a0:1f:f9:
         b9:b6:6f:64:47:85:a8:07:ed:db:15:69:d3:29:74:fc:a9:58:
         29:5d:ca:b4:32:c1:f8:9c:d2:69:1a:75:17:73:09:20:2e:91:
         2e:c7:38:52:bb:b5:0c:13:77:6e:d9:5b:5f:25:00:23:98:b7:
         af:ed:6a:25:3e:a6:45:ac:86:04:2b:3f:af:53:0d:43:79:38:
         f3:79:69:d0:14:87:0e:95:19:d6:99:e9:61:1b:16:50:28:3e:
         b6:40:2b:dd:58:22:11:53:a3:27:ea:47:2f:59:04:d5:72:23:
         44:ac:eb:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjM5MUQxMTAvBgNVBAUTKDA1NkJFRjQ2QzczMTU4MzdFQkFERUE0MTc4MEI5RTQx
QTNGQjdFQTAwHhcNMjUwNjE1MDEyMzA3WhcNMjUwNjIyMDEyMzA3WjAYMRYwFAYD
VQQDEw02ODRlMjA3Yy0xZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs0Ny6M2hrxTiljAqrbjFCjQbta0JP6EmYXo7AkWlL0mHqEcZFUzy86IWwy2X
+ZA+yNqd6rTu2htTDRvl7S+VpFwe6ZrSffLf3zxpYiMlmkb/lukrsqNi4nzkmp8O
yELUBLY2r0h6xOPXSoa4MLQgl5cV/AoWcsqKG4sd7RZ0aL5NuXETIi7d+PT2KWAb
L9c464DgrH9+mDksqeQhpk3YQe6yZdSqfPsI8pn+9um+J8kiHCJJtLJCpys7GJ1U
YbOD4/Pit1M6SbiVBE8wMT6jJr5068P5tS5WH/k+bg9W9yPrcgkttXTEa54RLe+W
HEKPSv/4RoPh8OiwV9T4oDIQ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxQLHTh
ciatgxD2UfWdrguRBTQIMB8GA1UdIwQYMBaAFAVr70bHMVg3663qQXgLnkGj+36g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzkxRC9CNTcxQ0NCRTBF
RTExMUVEODQ2NzRDMEVDNEY5QUUwMi9CV3Z2UnNjeFdEZnJyZXBCZUF1ZVFhUDdm
cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JXdnZSc2N4V0RmcnJlcEJlQXVlUWFQN2ZxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzkxRC9CNTcxQ0NCRTBFRTExMUVEODQ2NzRDMEVDNEY5QUUwMi9CV3Z2UnNjeFdE
ZnJyZXBCZUF1ZVFhUDdmcUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCRCWADYqzhLu243hgP6kE3n2FeFQiEFc4/yY7yFG83seQg34lJLe8
PtDE7gLtVpRQHjnYOjwz+VNaBycbmDk2LSb88IJyLkjiaEpXuWjYCvYEv8TeNAm2
bIY4ndJ4kQSPyfV2ObRaQVQkqpIZ+/yybbQrw2bdrdiFNKYxHlxhZTRZK+yokeqd
oxTrJlegH/m5tm9kR4WoB+3bFWnTKXT8qVgpXcq0MsH4nNJpGnUXcwkgLpEuxzhS
u7UME3du2VtfJQAjmLev7WolPqZFrIYEKz+vUw1DeTjzeWnQFIcOlRnWmelhGxZQ
KD62QCvdWCIRU6Mn6kcvWQTVciNErOto
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:37:14 2025 by rpki-client