Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
File:                     B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft (raw, json)
Hash identifier:          4+4jAjKcbqsI0QBisEn1P4cKN5I2qV3GFkWPyKuCyYw=
Subject key identifier:   10:23:61:67:FF:DF:BE:09:E3:AF:B4:DA:F6:CD:AF:62:6E:4D:69:6B
Authority key identifier: 07:53:FE:22:FF:ED:6B:00:B6:E6:E3:C5:AB:1C:3C:84:20:2A:63:74
Certificate issuer:       /CN=A91276F9/serialNumber=0753FE22FFED6B00B6E6E3C5AB1C3C84202A6374
Certificate serial:       14F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
Manifest number:          14F3
Signing time:             Sun 10 Aug 2025 16:48:37 +0000
Manifest this update:     Sun 10 Aug 2025 16:48:36 +0000
Manifest next update:     Sun 17 Aug 2025 16:48:36 +0000
Files and hashes:         1: B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl (hash: k1O2mWU52HSYicenKFkxJCAaxaz024uUe/ODfeIMpow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5364 (0x14f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91276F9, serialNumber=0753FE22FFED6B00B6E6E3C5AB1C3C84202A6374
        Validity
            Not Before: Aug 10 16:48:36 2025 GMT
            Not After : Aug 17 16:48:36 2025 GMT
        Subject: CN=6898cd65-452c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5b:a8:5c:65:7c:32:01:60:97:e4:98:e4:52:
                    b0:ab:39:f2:5b:65:82:51:e1:32:4f:cc:5a:89:f0:
                    4d:54:52:c3:57:46:b4:f1:84:f9:a8:b2:e2:92:2c:
                    10:1d:b3:d3:a7:ed:f8:02:5b:2b:31:1e:42:64:e5:
                    d9:73:a0:5a:54:47:3e:c5:12:d9:df:79:43:9a:a9:
                    cf:79:5b:97:1e:ee:dd:8c:9c:d4:49:b3:8a:0c:34:
                    e1:b6:18:a9:ed:e3:72:ef:a6:0b:ea:44:fb:fc:90:
                    1d:a1:06:a2:46:93:09:a5:69:30:e1:c4:6b:d9:4c:
                    fe:34:2f:60:bc:dc:88:bb:a4:1b:fb:ed:c7:b9:b0:
                    85:c9:ee:aa:fd:66:02:e3:5b:a2:fa:0c:5a:09:af:
                    88:7c:43:ec:a9:e1:d6:f7:57:89:4d:ea:82:9c:0e:
                    14:8d:00:01:e6:ee:e7:75:ff:d5:8c:7b:59:d2:7d:
                    57:2b:73:9c:ad:5a:41:ec:22:d4:fe:9f:c7:6e:5e:
                    7d:6a:01:00:01:a1:95:39:40:2a:70:26:75:8a:9c:
                    89:d7:61:61:ea:2e:0d:4c:8f:ec:c5:a3:9f:10:24:
                    78:e6:20:a7:f4:e6:c5:7a:45:17:fd:a9:26:67:fb:
                    f9:89:b9:9e:62:55:f3:43:4f:d5:e4:23:5e:5b:74:
                    7e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:23:61:67:FF:DF:BE:09:E3:AF:B4:DA:F6:CD:AF:62:6E:4D:69:6B
            X509v3 Authority Key Identifier:
                keyid:07:53:FE:22:FF:ED:6B:00:B6:E6:E3:C5:AB:1C:3C:84:20:2A:63:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3a:76:79:87:c5:38:25:12:9c:9e:ee:3a:a3:3f:0b:2c:43:
         f8:23:ef:c8:15:2f:84:ec:a2:28:ab:0b:32:db:1a:39:61:49:
         af:97:a4:ae:f0:26:bd:13:88:c8:0d:ac:50:34:2d:ea:72:0e:
         b3:2c:67:8b:a8:5c:5d:b6:45:55:da:82:4c:43:90:ce:21:84:
         0d:f0:ad:b1:49:5a:c3:d4:c9:24:4d:3c:09:d0:64:09:7b:35:
         50:46:a5:54:77:96:a3:35:fb:3b:6c:81:7c:ec:48:71:92:24:
         dc:63:de:37:2c:cb:82:3e:06:b9:b0:7a:08:08:bc:e2:35:22:
         7d:95:d3:b4:a9:3f:41:d6:18:58:16:4f:b2:fb:d3:fb:8d:c4:
         d4:8e:42:80:54:83:65:a9:65:a4:57:55:be:d2:1a:cc:70:69:
         d7:6e:cc:b7:3d:8b:80:4a:5d:6f:46:93:4d:ac:63:20:39:74:
         0a:d8:40:64:a6:b7:01:42:9e:fb:da:5c:36:2f:01:78:38:01:
         b4:c3:26:10:00:6b:57:89:f9:49:51:a0:88:b0:ce:da:cd:9e:
         0a:80:8f:c1:0c:94:b6:52:d9:ca:17:7e:15:e2:33:e5:7a:00:
         b6:be:b2:88:11:88:6a:28:7b:25:23:5c:ca:27:84:17:45:99:
         27:0c:cb:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc2RjkxMTAvBgNVBAUTKDA3NTNGRTIyRkZFRDZCMDBCNkU2RTNDNUFCMUMzQzg0
MjAyQTYzNzQwHhcNMjUwODEwMTY0ODM2WhcNMjUwODE3MTY0ODM2WjAYMRYwFAYD
VQQDEw02ODk4Y2Q2NS00NTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzFuoXGV8MgFgl+SY5FKwqznyW2WCUeEyT8xaifBNVFLDV0a08YT5qLLikiwQ
HbPTp+34AlsrMR5CZOXZc6BaVEc+xRLZ33lDmqnPeVuXHu7djJzUSbOKDDThthip
7eNy76YL6kT7/JAdoQaiRpMJpWkw4cRr2Uz+NC9gvNyIu6Qb++3HubCFye6q/WYC
41ui+gxaCa+IfEPsqeHW91eJTeqCnA4UjQAB5u7ndf/VjHtZ0n1XK3OcrVpB7CLU
/p/Hbl59agEAAaGVOUAqcCZ1ipyJ12Fh6i4NTI/sxaOfECR45iCn9ObFekUX/akm
Z/v5ibmeYlXzQ0/V5CNeW3R+mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAjYWf/
374J46+02vbNr2JuTWlrMB8GA1UdIwQYMBaAFAdT/iL/7WsAtubjxascPIQgKmN0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzZGOS9DNTFGMzk0QTU1
OUUxMUU4ODAwNDdFNDhDNEY5QUUwMi9CMVAtSXZfdGF3QzI1dVBGcXh3OGhDQXFZ
M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0IxUC1Jdl90YXdDMjV1UEZxeHc4aENBcVkzUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzZGOS9DNTFGMzk0QTU1OUUxMUU4ODAwNDdFNDhDNEY5QUUwMi9CMVAtSXZfdGF3
QzI1dVBGcXh3OGhDQXFZM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBhOnZ5h8U4JRKcnu46oz8LLEP4I+/IFS+E7KIoqwsy2xo5YUmvl6Su
8Ca9E4jIDaxQNC3qcg6zLGeLqFxdtkVV2oJMQ5DOIYQN8K2xSVrD1MkkTTwJ0GQJ
ezVQRqVUd5ajNfs7bIF87EhxkiTcY943LMuCPga5sHoICLziNSJ9ldO0qT9B1hhY
Fk+y+9P7jcTUjkKAVINlqWWkV1W+0hrMcGnXbsy3PYuASl1vRpNNrGMgOXQK2EBk
prcBQp772lw2LwF4OAG0wyYQAGtXiflJUaCIsM7azZ4KgI/BDJS2UtnKF34V4jPl
egC2vrKIEYhqKHslI1zKJ4QXRZknDMs2
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:05:20 2025 by rpki-client