Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
File:                     b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json)
Hash identifier:          Y1S1EsFX8KOvRRcbU4u25Qnawwp6ztlbnKs0Ru99ELg=
Subject key identifier:   C7:20:E1:0D:C1:DA:D9:30:D4:BB:62:16:B1:86:4F:55:46:F6:DD:8E
Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00
Certificate issuer:       /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
Certificate serial:       11B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
Manifest number:          1187
Signing time:             Tue 22 Jul 2025 17:23:08 +0000
Manifest this update:     Tue 22 Jul 2025 17:23:08 +0000
Manifest next update:     Tue 29 Jul 2025 17:23:08 +0000
Files and hashes:         1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: Rl5li/3t7h4v5cQQ5qkXM06Ns50dgXhgw2Ph9zLb1dg=)
                          2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: jot76CXrAz3dE65zS5eFuiF7pvf8X1MVAGSlp7hXRdo=)
                          3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: C3b1kJVj/ZgKAe5Ws86NLC+2MF3aglPyf/qxRhLS+ZQ=)
                          4: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: L9KTvljF01QWUS68uL1ITUuZceQQf452UdFJmG0kCrI=)
                          5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: jh4/v+GyjU9Au0Vxs0XDzRjJtWql8kiBFNvqkmZsApQ=)
                          6: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: IlX871gTVlMjHgxawx+1RHJJOHvxDDWwU+dINDtj5G0=)
                          7: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: 0Ni5FHtxPqtRB1YXZ5zRXDqJAM/35OEWFhDuPTdXe6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl
                          rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 17:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4537 (0x11b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
        Validity
            Not Before: Jul 22 17:23:08 2025 GMT
            Not After : Jul 29 17:23:08 2025 GMT
        Subject: CN=687fc8fc-7293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:18:aa:ab:a4:27:86:a9:bb:21:f6:73:60:4d:
                    2a:37:52:a9:4e:4b:c4:27:f9:48:e5:bb:a0:66:da:
                    74:00:2b:a3:75:47:cf:06:56:16:86:54:cb:b8:1e:
                    35:06:41:82:f0:9e:0c:1f:f8:ce:ff:cb:8c:63:24:
                    5a:22:af:d5:bd:27:28:2f:65:48:f7:d5:f5:25:18:
                    3b:c2:b5:b1:0d:ae:92:85:85:ce:51:b9:73:69:60:
                    2b:de:be:45:b5:60:6e:55:5c:31:41:d9:cf:56:8d:
                    58:7b:be:76:fd:97:ea:29:9b:54:6e:45:22:b9:a2:
                    94:45:81:08:30:12:47:28:6a:de:70:1a:0e:71:f1:
                    92:a7:6f:f9:04:f9:2f:8c:bf:4c:4d:a9:61:18:35:
                    52:75:0b:f7:34:c9:8f:31:6b:8e:5b:53:6e:97:a4:
                    58:39:15:50:71:21:23:aa:f3:98:1a:27:b2:fb:8a:
                    16:2d:89:74:d3:62:3c:84:e0:78:cf:87:c6:6e:1b:
                    0d:56:0a:45:2c:aa:df:7b:01:5b:59:f0:8a:fb:9b:
                    b5:e3:5e:cf:c7:0f:f5:a5:a6:81:0c:2f:45:a4:0b:
                    73:c9:50:7e:31:44:fa:ce:8b:f7:11:91:18:7e:0f:
                    50:e2:e0:70:cf:df:2d:15:0c:8e:f1:9d:cd:6a:52:
                    a0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:20:E1:0D:C1:DA:D9:30:D4:BB:62:16:B1:86:4F:55:46:F6:DD:8E
            X509v3 Authority Key Identifier:
                keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4f:06:63:27:66:54:11:0a:2e:8a:03:17:48:ac:b5:5f:fc:
         93:45:c9:67:b6:d0:9b:44:63:a4:17:cc:1a:ea:b1:95:ee:4f:
         31:43:52:d2:32:d2:9a:52:99:ad:e2:c6:b8:79:cd:c9:2b:45:
         2d:bb:84:e8:4b:b0:26:24:f0:98:24:ce:d5:3b:39:54:36:34:
         47:63:2c:1a:c1:1d:ac:ce:1b:5a:05:dd:ad:85:da:0f:c2:a4:
         8f:ee:71:6c:38:29:d3:ed:0a:bc:3e:7f:61:81:54:1b:7d:0e:
         0e:cf:19:dc:a9:59:1b:94:69:07:58:c8:fa:79:30:8b:f5:e8:
         04:0e:d5:68:07:c0:83:36:3a:60:ea:ca:29:89:7e:7b:b4:44:
         95:99:6a:09:59:5a:2d:64:03:0c:7e:f2:69:ce:36:7a:da:5b:
         ab:6b:1e:f3:72:09:02:90:48:3c:22:82:a3:f3:7f:ec:33:1f:
         59:79:35:f5:28:99:43:9e:7e:14:1e:b4:80:2e:85:34:80:df:
         a4:b6:23:c4:cd:d3:92:5e:cd:56:13:4e:fd:40:35:1a:b3:ee:
         1a:33:a5:36:bd:ce:c7:7f:4d:6d:3e:e8:1a:b2:a8:cd:52:c4:
         ff:45:13:cb:3e:66:d6:bf:78:59:a4:ec:2c:47:d7:fb:26:98:
         11:c9:38:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:30:03 2025 by rpki-client