Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
File:                     B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft (raw, json)
Hash identifier:          DCKVaj46TZAX543tMFKE5rW4xMICufRybi1gs7H7FBI=
Subject key identifier:   1B:13:DB:3E:13:6A:32:2F:C2:3C:97:41:A3:A0:4A:AB:3B:5F:CA:CC
Authority key identifier: 07:53:FE:22:FF:ED:6B:00:B6:E6:E3:C5:AB:1C:3C:84:20:2A:63:74
Certificate issuer:       /CN=A91276F9/serialNumber=0753FE22FFED6B00B6E6E3C5AB1C3C84202A6374
Certificate serial:       1517
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
Manifest number:          1516
Signing time:             Sat 18 Oct 2025 17:15:38 +0000
Manifest this update:     Sat 18 Oct 2025 17:15:37 +0000
Manifest next update:     Sat 25 Oct 2025 17:15:37 +0000
Files and hashes:         1: B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl (hash: /ME0hvfbT3C+bn8qTBiU4Te6xSTmNgicD552xopjqrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5399 (0x1517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91276F9, serialNumber=0753FE22FFED6B00B6E6E3C5AB1C3C84202A6374
        Validity
            Not Before: Oct 18 17:15:37 2025 GMT
            Not After : Oct 25 17:15:37 2025 GMT
        Subject: CN=68f3cb3a-db5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a0:11:a8:92:74:a6:be:3d:7b:48:a8:1d:ee:
                    cb:df:36:2a:60:e5:70:37:ac:7c:c6:ca:e6:f1:68:
                    2c:b5:1f:ff:d4:09:11:f7:24:1c:03:87:80:e8:44:
                    c2:fa:cf:c6:7b:8f:0b:2b:fc:bd:08:10:d5:30:09:
                    a2:d9:10:c0:0c:39:17:07:f5:d5:8d:1b:d1:09:0f:
                    fe:27:e5:60:a2:a5:a9:82:42:50:b1:3d:68:2b:62:
                    b4:86:8d:a3:7c:a2:db:d9:7a:6d:95:01:eb:40:7e:
                    d2:73:53:fd:5f:82:a1:46:46:52:39:5f:9f:72:9d:
                    7e:fc:6b:6e:7b:32:cc:39:0b:a9:65:00:cf:ab:a7:
                    86:ad:10:54:5e:f3:5f:26:b9:7c:ad:59:7c:53:b9:
                    08:eb:ad:e5:b0:87:2a:bb:63:62:c4:6a:22:a1:f5:
                    6c:83:38:c0:83:9b:6a:34:46:ab:e1:f7:3c:a1:b6:
                    e0:d3:77:9b:2e:49:d9:53:5b:2a:6b:f7:ea:d9:48:
                    42:2a:03:2c:94:14:b5:7d:ce:96:9c:f4:95:f4:dd:
                    11:47:06:74:ec:17:9d:99:c0:f6:b0:de:9b:3f:7f:
                    0a:7e:43:8d:45:34:9f:c4:55:65:e1:88:df:08:e8:
                    74:1c:ae:55:04:aa:9c:fc:cf:61:c6:b5:51:e6:4e:
                    12:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:13:DB:3E:13:6A:32:2F:C2:3C:97:41:A3:A0:4A:AB:3B:5F:CA:CC
            X509v3 Authority Key Identifier:
                keyid:07:53:FE:22:FF:ED:6B:00:B6:E6:E3:C5:AB:1C:3C:84:20:2A:63:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:bb:28:9d:64:7e:87:3d:4b:6a:a8:4e:a5:b7:07:a4:68:3c:
         db:af:2b:75:2c:95:a1:04:16:6a:39:06:4a:f6:27:6c:57:e4:
         b3:86:31:5b:37:bf:a5:11:ef:19:a8:24:ec:cb:9a:97:3e:12:
         c3:7e:28:7e:58:88:98:c1:05:4a:d7:7f:93:9d:93:74:3f:a9:
         12:e4:d7:22:f2:c3:15:e6:42:4a:35:07:9b:00:13:99:86:94:
         d4:d1:64:d6:2e:9d:72:6b:a6:f5:dc:9f:bd:a5:bd:12:11:2e:
         d5:26:33:6f:c0:57:90:7c:b2:fa:4d:6b:a0:87:94:93:76:35:
         14:ff:cf:d8:c2:1e:12:0b:69:1a:47:f7:41:28:db:8d:66:c7:
         65:9a:76:ec:9b:47:05:5b:d9:25:ad:d6:75:31:89:54:61:f7:
         a8:ec:f9:89:2f:eb:2c:8b:eb:bd:5c:bb:24:c6:4b:16:05:0a:
         6b:cf:4f:5c:c9:54:58:72:04:27:cb:26:31:c8:50:5b:18:28:
         d3:c0:0f:4b:14:f1:41:8a:75:d6:00:8b:91:4a:ba:e0:f8:9d:
         f3:c8:a6:52:8c:d6:72:36:55:b7:94:76:a8:fd:d6:66:b9:19:
         4a:48:af:92:f6:3d:4f:2f:86:76:ab:aa:ff:a7:c8:d1:7f:7f:
         5e:ba:4a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:08:30 2025 by rpki-client