Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
File:                     B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft (raw, json)
Hash identifier:          UWHzwWhflD5VGyiOAUnCJRbe3w8wmCPphlss6ZzeGPw=
Subject key identifier:   CF:D4:6F:CC:67:31:CB:F1:9A:64:F3:FD:FA:9F:F5:2F:39:04:F8:2B
Authority key identifier: 07:53:FE:22:FF:ED:6B:00:B6:E6:E3:C5:AB:1C:3C:84:20:2A:63:74
Certificate issuer:       /CN=A91276F9/serialNumber=0753FE22FFED6B00B6E6E3C5AB1C3C84202A6374
Certificate serial:       14E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
Manifest number:          14DF
Signing time:             Wed 02 Jul 2025 16:59:37 +0000
Manifest this update:     Wed 02 Jul 2025 16:59:36 +0000
Manifest next update:     Wed 09 Jul 2025 16:59:36 +0000
Files and hashes:         1: B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl (hash: 9tq+61UasGyl3JJvbpbDX263mPXCteqE078hxUAVzEA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 16:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5344 (0x14e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91276F9, serialNumber=0753FE22FFED6B00B6E6E3C5AB1C3C84202A6374
        Validity
            Not Before: Jul  2 16:59:36 2025 GMT
            Not After : Jul  9 16:59:36 2025 GMT
        Subject: CN=68656579-37b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:12:e8:dc:a1:12:eb:cf:79:0c:d7:f2:9c:35:
                    0a:84:3c:16:fe:b9:e1:54:26:4c:e9:ff:9b:33:32:
                    c9:28:f9:a2:69:68:f2:14:4b:61:a6:07:7e:84:2e:
                    bf:32:e6:19:69:29:4d:77:3b:b1:65:18:05:3f:e6:
                    c1:84:ec:fa:df:03:48:9b:81:53:9b:fc:ad:b2:ac:
                    85:4a:58:61:39:3c:8a:e5:96:71:50:c7:3c:19:12:
                    08:6e:11:45:53:ef:97:08:bc:63:87:10:20:16:a0:
                    b1:e4:8e:27:84:3e:2f:bc:f0:50:2b:6c:20:ef:31:
                    b4:d7:4a:91:99:3f:34:f8:08:83:d0:d4:fd:b2:a6:
                    39:ba:df:cc:30:71:22:0b:06:a2:ec:99:3a:89:68:
                    59:03:86:1c:1d:64:cf:46:db:46:eb:6e:f2:19:f0:
                    e8:38:d5:cf:2b:bb:64:91:07:e0:10:05:47:87:b3:
                    c5:ff:aa:a3:70:2f:94:79:ee:77:fc:c6:2d:b2:a9:
                    6d:4e:db:41:24:3e:0a:82:65:0a:ac:ac:f8:e5:8b:
                    6d:07:15:14:f2:99:6c:54:c2:1c:7a:44:91:c4:ec:
                    c2:5c:17:84:a0:5e:3b:22:74:dd:e7:9f:82:11:be:
                    c9:eb:5f:14:a5:f7:aa:33:c2:e8:ba:ba:07:72:8a:
                    16:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D4:6F:CC:67:31:CB:F1:9A:64:F3:FD:FA:9F:F5:2F:39:04:F8:2B
            X509v3 Authority Key Identifier:
                keyid:07:53:FE:22:FF:ED:6B:00:B6:E6:E3:C5:AB:1C:3C:84:20:2A:63:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:7c:54:c7:1c:10:f8:8e:79:5e:c4:b9:5e:0b:56:8c:8d:b0:
         e3:ba:03:9a:5d:8e:a5:bc:cf:7d:31:18:c8:8e:b6:77:9f:da:
         1e:77:df:67:e8:89:e8:2a:9b:7f:86:24:6b:d0:db:f5:6d:2b:
         50:5c:30:91:b7:f6:d5:db:75:a6:3f:f0:fe:d5:fc:8b:91:d6:
         f0:00:35:bc:58:89:a6:78:d0:c1:22:15:fd:98:57:ea:3b:1f:
         75:70:96:4f:28:8c:e4:c4:eb:4f:2d:bc:d6:f9:fc:d0:c6:05:
         24:47:ba:9c:86:35:96:51:90:77:80:61:54:b3:c3:93:5a:fa:
         f0:11:1a:52:c1:8e:cc:64:53:22:c8:e2:49:da:4c:b4:fc:a3:
         ad:9a:3f:d7:2c:21:12:3a:db:31:c5:07:c0:e1:af:fe:a8:85:
         67:2c:7d:dc:c7:25:4d:7b:d0:b5:af:a2:af:83:a2:ec:8d:f9:
         93:0f:18:9c:2b:47:b3:9b:e4:e0:9a:d4:11:4e:a5:1c:c2:1f:
         49:86:0c:e7:23:44:89:47:f8:9b:1c:34:0e:e8:4e:7a:6f:37:
         ff:95:b4:21:d2:99:72:5f:5c:a3:8e:d2:5d:71:a5:d4:d6:24:
         09:5e:71:16:92:49:09:9c:42:0c:b4:9e:69:4f:58:f8:fe:bc:
         65:c2:81:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:03:32 2025 by rpki-client