Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
File:                     B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft (raw, json)
Hash identifier:          ip8VmuZ0XhjHAWLRBRqdRSdEr055nNSep4qlsBvWR7c=
Subject key identifier:   74:3C:80:39:51:98:0F:8C:2C:44:1F:A2:8C:36:B6:9E:64:6E:CC:27
Authority key identifier: 07:53:FE:22:FF:ED:6B:00:B6:E6:E3:C5:AB:1C:3C:84:20:2A:63:74
Certificate issuer:       /CN=A91276F9/serialNumber=0753FE22FFED6B00B6E6E3C5AB1C3C84202A6374
Certificate serial:       14DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
Manifest number:          14DE
Signing time:             Mon 30 Jun 2025 17:01:21 +0000
Manifest this update:     Mon 30 Jun 2025 17:01:21 +0000
Manifest next update:     Mon 07 Jul 2025 17:01:21 +0000
Files and hashes:         1: B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl (hash: ebHPbz4tyvtpce+y+fch8VEFXxmHzQs5+0Ey1XpBG8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 17:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5343 (0x14df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91276F9, serialNumber=0753FE22FFED6B00B6E6E3C5AB1C3C84202A6374
        Validity
            Not Before: Jun 30 17:01:21 2025 GMT
            Not After : Jul  7 17:01:21 2025 GMT
        Subject: CN=6862c2e1-d17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:0c:59:14:07:b4:10:94:22:a0:c6:79:9f:
                    a5:65:21:e7:4a:2c:ea:b2:72:6f:af:b0:bf:01:e9:
                    88:3b:42:3f:6e:bc:07:c8:85:d1:12:30:fb:d4:0a:
                    21:97:49:41:0f:db:2c:45:9f:13:a3:23:1f:0b:30:
                    75:a9:f5:5b:f5:fe:0b:fe:2c:64:8c:81:fe:14:e7:
                    0e:0d:31:9d:b9:6a:2c:cd:5f:47:65:d8:aa:e6:53:
                    3a:92:b6:22:56:f8:5b:5b:3d:41:e4:6c:5f:46:83:
                    7e:06:e6:a6:3f:d4:cd:eb:0e:c5:66:d3:bf:6c:51:
                    c6:f4:e3:f1:76:ee:16:93:47:10:c6:79:53:a0:a5:
                    13:81:a3:1c:0d:e8:66:1f:57:2a:cb:25:6f:62:9e:
                    51:d0:a3:40:4c:6c:5f:1c:2f:be:40:72:8e:7b:d3:
                    88:b2:8a:eb:b1:03:71:e6:4f:96:f9:75:be:83:c7:
                    32:4f:d9:a7:08:f5:fe:90:5e:c0:52:f8:a2:0d:4b:
                    48:99:99:ab:2b:b7:cf:19:d3:6a:50:68:9a:a2:dd:
                    8c:4d:aa:d9:13:8f:4f:cc:17:d9:c7:a8:e7:7e:82:
                    08:e3:62:44:a6:ff:89:39:8c:17:7f:4d:81:43:a4:
                    78:df:8c:49:df:61:e1:d9:70:98:c6:01:12:63:21:
                    e7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3C:80:39:51:98:0F:8C:2C:44:1F:A2:8C:36:B6:9E:64:6E:CC:27
            X509v3 Authority Key Identifier:
                keyid:07:53:FE:22:FF:ED:6B:00:B6:E6:E3:C5:AB:1C:3C:84:20:2A:63:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b9:c3:dd:03:af:39:55:44:34:4e:94:8c:90:22:93:7a:19:
         e1:81:7e:a6:b9:61:43:17:d9:fc:59:2f:d3:07:68:96:82:f2:
         36:79:1c:3d:bf:96:fd:c2:9b:99:5f:3c:db:3c:70:3d:87:66:
         41:68:dd:02:2d:d5:ca:60:a7:01:40:2c:db:63:f5:96:d2:0e:
         f5:1b:e8:cf:ad:f7:b1:93:c0:ee:d1:79:e2:27:ee:3e:af:b8:
         71:da:55:6d:7b:cc:7f:4e:e3:f3:96:b0:8b:32:d6:e7:f8:44:
         e0:01:6d:b1:42:6f:6a:ca:cb:9e:04:e4:19:73:8a:27:22:f7:
         43:18:e5:69:ac:b4:97:28:f0:14:87:94:65:8e:4d:3e:9d:79:
         b8:3a:e4:d3:9c:53:d2:fa:d0:3b:5c:76:f2:8c:6a:b1:60:1d:
         55:a3:c3:11:81:b1:2c:cb:e3:4c:1c:ac:4d:7a:24:9a:c6:74:
         31:07:8d:31:27:48:a1:e8:6d:f0:7b:95:f6:d2:9b:38:06:ac:
         84:c1:b1:c7:06:a1:ea:37:c2:c8:f3:e6:3f:0f:d3:0a:c1:84:
         69:b7:70:97:ab:d5:97:a7:e1:43:10:68:42:f7:c6:14:1d:e3:
         3b:30:0a:25:6c:99:ad:84:e9:48:63:7b:db:97:cd:6b:31:12:
         60:39:aa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:43:30 2025 by rpki-client