Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft
File:                     Bats53QFyQRH8nu2EgCypDHeStw.mft (raw, json)
Hash identifier:          M9S3Xt9J0d7aj3LAZjiMC3jN67QkuaI1gWVyAt9mDhk=
Subject key identifier:   80:DF:DD:D3:96:09:80:46:DF:C4:7B:51:EA:82:59:48:33:3B:8A:26
Authority key identifier: 05:AB:6C:E7:74:05:C9:04:47:F2:7B:B6:12:00:B2:A4:31:DE:4A:DC
Certificate issuer:       /CN=A9131589/serialNumber=05AB6CE77405C90447F27BB61200B2A431DE4ADC
Certificate serial:       02B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft
Manifest number:          02B1
Signing time:             Fri 19 Sep 2025 01:56:46 +0000
Manifest this update:     Fri 19 Sep 2025 01:56:45 +0000
Manifest next update:     Fri 26 Sep 2025 01:56:45 +0000
Files and hashes:         1: Bats53QFyQRH8nu2EgCypDHeStw.crl (hash: FQnS9jznZu7iCP9Fhf1FSZ3CyjNQ/iUlCMkWHnm68gM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.crl
                          rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 01:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689 (0x2b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131589, serialNumber=05AB6CE77405C90447F27BB61200B2A431DE4ADC
        Validity
            Not Before: Sep 19 01:56:45 2025 GMT
            Not After : Sep 26 01:56:45 2025 GMT
        Subject: CN=68ccb85e-c5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:13:81:73:4d:ae:43:6f:1e:0d:c8:87:c5:da:
                    14:33:f7:ec:bc:8e:f2:19:45:55:88:ca:43:f6:16:
                    51:0d:4d:c2:11:d3:cc:cd:fc:c1:b6:95:8c:eb:ef:
                    58:a9:29:ef:17:d6:da:d3:3a:12:a6:98:77:e9:91:
                    d6:ae:c2:17:ea:3f:b5:b7:c1:84:09:c4:52:34:be:
                    9f:0f:d5:b7:8b:36:8d:7b:eb:21:ba:58:d3:a1:89:
                    70:fe:13:c1:88:ca:b8:0a:df:2d:3c:38:86:7a:00:
                    cd:2c:c1:90:c4:20:c9:79:66:e4:74:28:63:83:ce:
                    84:7e:16:0b:26:c0:a4:3f:8f:c9:52:7c:e8:6f:70:
                    fa:25:9b:e9:0c:dc:27:0d:03:a0:0e:a7:06:c9:5e:
                    79:f6:eb:f7:50:5c:78:57:cb:3f:7e:c0:7b:a2:15:
                    e5:23:19:6f:70:b1:66:39:7c:13:48:93:51:9b:00:
                    b2:93:ad:d0:cb:b8:ed:6f:ea:e8:72:7a:fb:2a:36:
                    56:3c:76:7c:b5:10:1c:38:ae:27:6c:51:87:29:b4:
                    57:de:32:de:20:ec:44:8d:67:af:b2:68:91:51:a4:
                    65:1a:55:60:ed:78:86:e7:f6:00:e5:45:93:47:9a:
                    6c:77:81:0c:4b:8e:ec:eb:d4:a4:18:12:b0:b9:2c:
                    57:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DF:DD:D3:96:09:80:46:DF:C4:7B:51:EA:82:59:48:33:3B:8A:26
            X509v3 Authority Key Identifier:
                keyid:05:AB:6C:E7:74:05:C9:04:47:F2:7B:B6:12:00:B2:A4:31:DE:4A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:51:89:53:ef:c9:ba:c8:0c:98:de:f3:56:22:e9:0c:dc:e4:
         23:5c:3b:3d:61:67:bd:9d:df:e4:b5:db:ca:02:c0:ff:9f:09:
         f0:6c:20:52:77:83:46:c0:24:8f:e1:81:52:27:44:bd:d8:d3:
         6c:18:1a:8a:39:7e:70:30:de:03:c6:bb:d8:b3:91:cb:61:6e:
         6e:11:02:78:75:63:3c:41:72:3b:a1:58:cb:2d:c9:95:03:9c:
         74:f5:c7:41:17:9e:46:c9:7a:4a:97:cf:46:1e:d7:51:4e:75:
         a1:cb:40:22:12:2e:ca:6e:ef:9d:ed:e2:2c:dd:a6:c4:f0:af:
         be:39:e1:71:c3:42:8c:e6:2b:d1:6c:86:90:cc:4c:18:3b:28:
         84:30:35:9b:0a:ce:61:96:18:8c:be:ef:e6:13:ed:f7:a1:62:
         4a:9b:0f:ac:ca:98:dd:39:09:98:be:60:e2:6a:f5:c5:23:84:
         61:1d:30:c6:1f:6f:f7:9b:4c:e1:3c:74:ab:61:24:21:b1:50:
         1e:22:27:18:98:e2:93:f7:10:f7:98:8d:22:ea:bf:01:30:68:
         48:20:ca:b6:79:4f:d2:54:e1:bf:e5:3c:d0:6d:4e:4d:6f:29:
         e9:f0:fd:03:0a:80:79:b9:44:95:e7:d7:50:a8:9f:03:9c:8b:
         51:0e:2e:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE1ODkxMTAvBgNVBAUTKDA1QUI2Q0U3NzQwNUM5MDQ0N0YyN0JCNjEyMDBCMkE0
MzFERTRBREMwHhcNMjUwOTE5MDE1NjQ1WhcNMjUwOTI2MDE1NjQ1WjAYMRYwFAYD
VQQDEw02OGNjYjg1ZS1jNWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvhOBc02uQ28eDciHxdoUM/fsvI7yGUVViMpD9hZRDU3CEdPMzfzBtpWM6+9Y
qSnvF9ba0zoSpph36ZHWrsIX6j+1t8GECcRSNL6fD9W3izaNe+shuljToYlw/hPB
iMq4Ct8tPDiGegDNLMGQxCDJeWbkdChjg86EfhYLJsCkP4/JUnzob3D6JZvpDNwn
DQOgDqcGyV559uv3UFx4V8s/fsB7ohXlIxlvcLFmOXwTSJNRmwCyk63Qy7jtb+ro
cnr7KjZWPHZ8tRAcOK4nbFGHKbRX3jLeIOxEjWevsmiRUaRlGlVg7XiG5/YA5UWT
R5psd4EMS47s69SkGBKwuSxXdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDf3dOW
CYBG38R7UeqCWUgzO4omMB8GA1UdIwQYMBaAFAWrbOd0BckER/J7thIAsqQx3krc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS80MTU4NDYzQTBD
Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi9CYXRzNTNRRnlRUkg4bnUyRWdDeXBESGVT
dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JhdHM1M1FGeVFSSDhudTJFZ0N5cERIZVN0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTU4OS80MTU4NDYzQTBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi9CYXRzNTNRRnlR
Ukg4bnUyRWdDeXBESGVTdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBlUYlT78m6yAyY3vNWIukM3OQjXDs9YWe9nd/ktdvKAsD/nwnwbCBS
d4NGwCSP4YFSJ0S92NNsGBqKOX5wMN4DxrvYs5HLYW5uEQJ4dWM8QXI7oVjLLcmV
A5x09cdBF55GyXpKl89GHtdRTnWhy0AiEi7Kbu+d7eIs3abE8K++OeFxw0KM5ivR
bIaQzEwYOyiEMDWbCs5hlhiMvu/mE+33oWJKmw+sypjdOQmYvmDiavXFI4RhHTDG
H2/3m0zhPHSrYSQhsVAeIicYmOKT9xD3mI0i6r8BMGhIIMq2eU/SVOG/5TzQbU5N
bynp8P0DCoB5uUSV59dQqJ8DnItRDi5i
-----END CERTIFICATE-----
Generated at Fri Sep 19 09:09:36 2025 by rpki-client