Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
File:                     b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json)
Hash identifier:          9iOj8fPIfwxfcpKf5WQlvZ0M6PNqc+jSHcy1AooJlWI=
Subject key identifier:   51:7C:8D:F4:8C:9A:C9:9D:72:46:08:9F:49:5C:FB:BD:AA:F7:14:6A
Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00
Certificate issuer:       /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
Certificate serial:       11BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
Manifest number:          1188
Signing time:             Thu 24 Jul 2025 17:23:12 +0000
Manifest this update:     Thu 24 Jul 2025 17:23:12 +0000
Manifest next update:     Thu 31 Jul 2025 17:23:12 +0000
Files and hashes:         1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: ty19QFQufGimKmM/Nwdn8uejtj4v+Jg0UZGarPV0cCQ=)
                          2: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: jot76CXrAz3dE65zS5eFuiF7pvf8X1MVAGSlp7hXRdo=)
                          3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: C3b1kJVj/ZgKAe5Ws86NLC+2MF3aglPyf/qxRhLS+ZQ=)
                          4: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: L9KTvljF01QWUS68uL1ITUuZceQQf452UdFJmG0kCrI=)
                          5: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: jh4/v+GyjU9Au0Vxs0XDzRjJtWql8kiBFNvqkmZsApQ=)
                          6: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: IlX871gTVlMjHgxawx+1RHJJOHvxDDWwU+dINDtj5G0=)
                          7: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: 0Ni5FHtxPqtRB1YXZ5zRXDqJAM/35OEWFhDuPTdXe6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl
                          rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 17:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4538 (0x11ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
        Validity
            Not Before: Jul 24 17:23:12 2025 GMT
            Not After : Jul 31 17:23:12 2025 GMT
        Subject: CN=68826c00-3802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3c:f6:e5:c4:4f:56:75:7c:9c:2e:ac:5f:89:
                    c0:24:32:ac:54:7a:ae:6e:83:91:d0:94:0a:f7:e7:
                    e2:b3:4a:00:ae:e7:64:6e:2b:87:75:96:6e:49:df:
                    df:ad:94:e4:5e:1a:71:92:f5:12:2b:c6:42:de:29:
                    20:52:6f:d3:73:73:18:02:51:02:fb:00:98:df:3a:
                    0c:85:42:52:79:4a:00:ca:d8:74:e5:4d:3a:fd:e5:
                    03:ee:2e:0d:95:4b:48:86:ae:7b:7a:fb:00:79:46:
                    99:33:6f:62:21:a8:bb:3e:58:a0:c8:7a:58:0a:8b:
                    95:cc:50:53:70:2e:97:b7:32:ed:46:1e:89:04:fc:
                    ac:2c:82:7a:f6:87:3e:c2:95:5a:65:59:64:c0:d5:
                    31:76:43:96:33:e3:e6:4e:f2:c3:96:b4:a0:b8:fb:
                    6c:91:27:f1:9f:55:42:a0:90:a9:f0:72:59:56:e5:
                    3d:ab:ab:b3:94:2b:ab:dc:31:e4:87:0a:e9:81:3b:
                    48:86:e1:25:91:b0:3e:a7:9d:1c:fc:c3:df:df:1f:
                    73:4c:29:09:1c:64:76:9a:eb:d0:5e:82:6e:56:8c:
                    3e:a6:5e:11:03:2d:79:19:91:38:15:42:a2:16:cb:
                    ec:66:bc:03:bd:be:23:b5:10:b0:1f:b2:fc:dc:c1:
                    46:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7C:8D:F4:8C:9A:C9:9D:72:46:08:9F:49:5C:FB:BD:AA:F7:14:6A
            X509v3 Authority Key Identifier:
                keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:6e:36:19:38:17:b3:5e:00:55:ef:0c:fb:eb:c3:0a:63:12:
         f5:95:ae:55:a1:35:26:33:b6:d6:ed:21:81:d9:9a:50:01:04:
         4b:a1:20:51:83:a5:4f:73:a6:39:45:fa:e5:a9:91:7c:20:c1:
         12:52:f7:17:0c:bd:8c:23:74:1a:6a:d8:aa:72:17:f5:95:d6:
         63:89:c8:60:03:9a:33:b0:93:ec:a9:af:9c:25:dc:cc:cf:ad:
         cf:d8:d9:dd:c1:94:4a:5a:87:2b:56:19:f1:5c:e8:06:8d:ce:
         1e:1a:6c:82:97:0c:04:20:7e:23:4e:c4:fe:c3:a7:23:86:0b:
         3a:77:2a:3f:1f:2e:ee:5a:84:c7:4c:db:ca:b0:b4:23:a3:6c:
         ba:9e:6a:92:21:c3:04:ea:ba:4c:d5:ad:ac:c2:f2:70:60:63:
         0a:1d:ac:7d:ee:c2:1e:e9:26:1d:4b:fa:e6:10:4c:b5:27:5b:
         b5:bd:dc:e3:b9:28:b0:3a:cd:98:9e:59:76:2a:6f:da:b0:90:
         21:2b:0b:45:09:54:23:2e:b9:6d:7e:ce:39:61:24:40:1e:9a:
         c2:17:56:52:b9:de:c1:57:d6:93:51:17:e3:ed:0e:e2:19:b7:
         e0:1b:58:69:12:2a:58:8a:20:92:5f:aa:51:0a:5d:03:67:a8:
         cf:dc:70:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5
MTBFQzJFMDAwHhcNMjUwNzI0MTcyMzEyWhcNMjUwNzMxMTcyMzEyWjAYMRYwFAYD
VQQDEw02ODgyNmMwMC0zODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAujz25cRPVnV8nC6sX4nAJDKsVHquboOR0JQK9+fis0oArudkbiuHdZZuSd/f
rZTkXhpxkvUSK8ZC3ikgUm/Tc3MYAlEC+wCY3zoMhUJSeUoAyth05U06/eUD7i4N
lUtIhq57evsAeUaZM29iIai7PligyHpYCouVzFBTcC6XtzLtRh6JBPysLIJ69oc+
wpVaZVlkwNUxdkOWM+PmTvLDlrSguPtskSfxn1VCoJCp8HJZVuU9q6uzlCur3DHk
hwrpgTtIhuElkbA+p50c/MPf3x9zTCkJHGR2muvQXoJuVow+pl4RAy15GZE4FUKi
FsvsZrwDvb4jtRCwH7L83MFGOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFF8jfSM
msmdckYIn0lc+72q9xRqMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0
RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM
Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTJCQy9FQkNGMTY4MjA0RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJo
YkhvS1R1RHVhaUtSRHNMZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA3bjYZOBezXgBV7wz768MKYxL1la5VoTUmM7bW7SGB2ZpQAQRLoSBR
g6VPc6Y5RfrlqZF8IMESUvcXDL2MI3Qaatiqchf1ldZjichgA5ozsJPsqa+cJdzM
z63P2NndwZRKWocrVhnxXOgGjc4eGmyClwwEIH4jTsT+w6cjhgs6dyo/Hy7uWoTH
TNvKsLQjo2y6nmqSIcME6rpM1a2swvJwYGMKHax97sIe6SYdS/rmEEy1J1u1vdzj
uSiwOs2Ynll2Km/asJAhKwtFCVQjLrltfs45YSRAHprCF1ZSud7BV9aTURfj7Q7i
GbfgG1hpEipYiiCSX6pRCl0DZ6jP3HBs
-----END CERTIFICATE-----
Generated at Fri Jul 25 13:30:23 2025 by rpki-client