Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
File:                     1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft (raw, json)
Hash identifier:          mkcfjm/1du168TVnEDo6axfKVGiTuYL9W+Ee/TQCXI8=
Subject key identifier:   20:85:89:38:03:E1:4F:21:CF:E4:AA:DF:24:C2:DA:9F:A9:22:B0:7B
Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D
Certificate issuer:       /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
Manifest number:          1B
Signing time:             Sat 23 Aug 2025 08:10:59 +0000
Manifest this update:     Sat 23 Aug 2025 08:10:59 +0000
Manifest next update:     Sat 30 Aug 2025 08:10:59 +0000
Files and hashes:         1: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl (hash: /R/C7iTirn1f9YZuvRZxoO6d74kHBJsMt1cIQsdVcZU=)
                          2: FE892768620711F0BE75F534C4F9AE02.roa (hash: lIvntJbQ3iLGqhEBLcowTkqSPPrJfP4D0bbkG1Wfg+g=)
                          3: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (hash: 945+Vkteqw/NwLcrpePu74zLw2XjOxBSUFg1u4xLkkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
        Validity
            Not Before: Aug 23 08:10:59 2025 GMT
            Not After : Aug 30 08:10:59 2025 GMT
        Subject: CN=68a97793-dd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:cc:f1:9c:93:fb:a5:27:d4:dd:67:df:8b:
                    2e:6c:ea:28:48:f4:48:da:72:6a:b3:2d:48:26:1d:
                    b1:86:2d:4d:0d:97:19:f0:21:4b:f0:07:e2:23:dc:
                    ce:fc:9d:f7:b7:7c:b7:ef:11:1c:5e:77:d6:e8:69:
                    bd:82:56:f9:e2:77:fa:96:e4:db:a2:6d:38:2e:56:
                    a1:0a:cd:30:eb:4f:69:ff:ab:23:04:ad:64:9f:29:
                    a9:64:0c:07:34:4f:f3:26:70:0f:95:b4:71:41:4c:
                    e6:50:b2:b6:be:e9:0d:f6:7f:77:25:a1:2c:3e:e9:
                    33:90:6a:12:67:7d:56:ce:d1:f5:f1:bd:00:5e:ef:
                    75:ee:e0:00:1c:fb:5f:ba:82:47:58:52:7b:a4:ce:
                    94:42:b6:04:bb:43:db:1c:03:65:0a:b1:58:25:1e:
                    4a:c0:a5:c1:8c:0c:86:e5:2c:a4:5d:5a:bc:b8:48:
                    84:c5:bc:d7:61:6e:e8:d1:b3:b9:c6:dc:d3:55:f6:
                    cf:83:bc:5b:27:a6:a0:55:8c:42:d3:80:6d:dd:83:
                    05:65:26:16:38:a9:75:14:a3:f8:dd:40:5c:65:ff:
                    23:2a:29:c8:00:22:9b:a8:0d:d0:f7:49:49:01:14:
                    84:78:48:96:5e:0b:00:62:0f:2e:97:21:20:fc:b1:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:85:89:38:03:E1:4F:21:CF:E4:AA:DF:24:C2:DA:9F:A9:22:B0:7B
            X509v3 Authority Key Identifier:
                keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0d:40:9d:5a:d6:52:63:9f:25:86:fc:44:ef:ae:bb:75:ed:
         07:14:34:74:b7:95:31:42:5d:4f:56:d2:cb:60:98:97:d2:7a:
         33:f5:5f:b8:94:29:2c:c5:71:56:37:b1:3e:81:4b:ca:dc:a9:
         d0:96:12:5e:e2:a9:81:3c:b2:56:85:0e:77:d6:dc:f7:e7:4d:
         ea:d8:92:bf:af:35:17:1f:98:97:1f:7d:b7:4d:8a:d7:a0:0c:
         80:84:f1:ce:47:3a:d4:31:18:a5:39:61:dd:fe:36:99:09:eb:
         19:69:17:a2:15:49:f8:e9:2f:f1:61:62:5f:70:22:76:b7:a2:
         8a:6d:da:3d:bd:57:cc:ac:cd:c7:77:ca:cb:99:65:68:dc:f0:
         25:d6:51:63:59:83:a8:3a:3f:1a:ec:ed:ad:f9:0a:fd:1f:25:
         61:59:e3:1f:14:f9:a9:ce:3c:0b:0e:9e:e8:97:2c:a4:d7:57:
         c9:fa:6d:92:11:7a:7e:06:ea:c8:0a:ca:eb:bf:6d:8f:59:48:
         9e:ed:a7:7f:85:27:4e:6b:74:46:55:c5:07:51:48:cf:65:6b:
         fa:e6:ac:a6:52:cc:05:f0:2f:a7:fb:c5:0f:12:4c:02:be:c9:
         cd:74:17:92:82:4c:c2:5d:47:8b:42:39:f5:7a:f9:59:ea:96:
         24:a2:a0:b4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NzRFRDExMC8GA1UEBRMoRDVCQzc5MEFCMDM3Qjg3RERGNjM5M0Q3NDEzNkJGMDc3
QTFEMjk5RDAeFw0yNTA4MjMwODEwNTlaFw0yNTA4MzAwODEwNTlaMBgxFjAUBgNV
BAMTDTY4YTk3NzkzLWRkOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJrMzxnJP7pSfU3Wffiy5s6ihI9EjacmqzLUgmHbGGLU0NlxnwIUvwB+Ij3M78
nfe3fLfvERxed9boab2CVvnid/qW5NuibTguVqEKzTDrT2n/qyMErWSfKalkDAc0
T/MmcA+VtHFBTOZQsra+6Q32f3cloSw+6TOQahJnfVbO0fXxvQBe73Xu4AAc+1+6
gkdYUnukzpRCtgS7Q9scA2UKsVglHkrApcGMDIblLKRdWry4SITFvNdhbujRs7nG
3NNV9s+DvFsnpqBVjELTgG3dgwVlJhY4qXUUo/jdQFxl/yMqKcgAIpuoDdD3SUkB
FIR4SJZeCwBiDy6XISD8sfdnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIIWJOAPh
TyHP5KrfJMLan6kisHswHwYDVR0jBBgwFoAU1bx5CrA3uH3fY5PXQTa/B3odKZ0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NEVELzE0MzU4MTYyNUQ5
MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgzZlk1UFhRVGFfQjNvZEta
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMWJ4NUNyQTN1SDNmWTVQWFFUYV9CM29kS1owLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3
NEVELzE0MzU4MTYyNUQ5MjExRjA5MERGMzgzNkM0RjlBRTAyLzFieDVDckEzdUgz
Zlk1UFhRVGFfQjNvZEtaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAE0NQJ1a1lJjnyWG/ETvrrt17QcUNHS3lTFCXU9W0stgmJfSejP1X7iU
KSzFcVY3sT6BS8rcqdCWEl7iqYE8slaFDnfW3PfnTerYkr+vNRcfmJcffbdNiteg
DICE8c5HOtQxGKU5Yd3+NpkJ6xlpF6IVSfjpL/FhYl9wIna3oopt2j29V8yszcd3
ysuZZWjc8CXWUWNZg6g6Pxrs7a35Cv0fJWFZ4x8U+anOPAsOnuiXLKTXV8n6bZIR
en4G6sgKyuu/bY9ZSJ7tp3+FJ05rdEZVxQdRSM9la/rmrKZSzAXwL6f7xQ8STAK+
yc10F5KCTMJdR4tCOfV6+VnqliSioLQ=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:25:53 2025 by rpki-client