Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
File:                     btoKR86sX5SQFUbuiaP14i4Zp2I.mft (raw, json)
Hash identifier:          0/Ez6ueksWqBk6PX66ynFUSfiDuyRFB9MIL5cEjgdfM=
Subject key identifier:   F5:33:F2:71:1D:6A:C6:24:02:9B:99:A0:D7:E3:1C:CA:22:F8:D4:30
Authority key identifier: 6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62
Certificate issuer:       /CN=A913D756/serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
Manifest number:          48
Signing time:             Sun 13 Apr 2025 06:09:28 +0000
Manifest this update:     Sun 13 Apr 2025 06:09:28 +0000
Manifest next update:     Sun 20 Apr 2025 06:09:28 +0000
Files and hashes:         1: btoKR86sX5SQFUbuiaP14i4Zp2I.crl (hash: TOBe4g+XFAcUz1JuCw+w8bAglZQnJWT6RyBWTtm1mYo=)
                          2: A90B2F28B1F611EF86337B54C4F9AE02.roa (hash: oosdej6NCKw9+AFZHUWJ0H2pXTiyHE7ZIsFdjEUcWdo=)
                          3: C18E24EEB1F911EF80160911C4F9AE02.roa (hash: IaSXU0hhTqd/kbD/ZDjyAZBXMXMDGHq4FlHzzaXzxz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl
                          rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Apr 2025 06:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D756, serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
        Validity
            Not Before: Apr 13 06:09:28 2025 GMT
            Not After : Apr 20 06:09:28 2025 GMT
        Subject: CN=67fb5518-a912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:43:0a:8f:60:e1:9a:f4:d5:22:2b:29:38:75:
                    f8:6d:4a:61:fb:7d:cd:20:d0:b0:5f:7a:16:3a:13:
                    54:d5:01:a3:a8:dd:e2:69:35:89:40:12:1f:24:03:
                    78:34:15:4d:e0:65:2b:f5:d6:ba:ae:54:d5:47:bc:
                    e7:22:3b:ed:a6:1d:13:43:76:34:7a:b2:91:a5:22:
                    05:d6:0c:91:ec:1d:2d:7d:29:74:47:91:ae:56:57:
                    ab:0d:6d:27:52:2a:2e:c8:cb:de:17:97:0e:d7:0f:
                    7c:6a:cf:ef:b9:21:2b:50:92:66:a2:14:ad:fb:00:
                    a5:b4:78:06:ed:ed:e2:e5:6c:c2:e8:a8:02:ac:6a:
                    ed:ea:bc:5e:24:7d:26:8e:80:96:cc:e9:30:ee:30:
                    f2:81:4c:31:a5:dc:51:82:ac:da:77:12:e3:46:9c:
                    0b:f3:19:61:2b:ce:76:98:3f:1b:bc:64:2a:16:8c:
                    2e:7b:f4:87:6e:09:45:f8:79:4c:01:f6:b7:4a:5d:
                    44:24:74:e2:78:23:02:16:8d:8d:98:24:5b:0b:65:
                    9c:c2:83:6a:92:13:34:f6:d0:29:31:ff:43:8c:a2:
                    ef:39:af:88:9b:a7:96:fc:b7:bf:cc:be:f3:61:0f:
                    88:de:2f:29:a1:bf:ac:1c:72:5f:28:ff:61:8b:8d:
                    86:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:33:F2:71:1D:6A:C6:24:02:9B:99:A0:D7:E3:1C:CA:22:F8:D4:30
            X509v3 Authority Key Identifier:
                keyid:6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:8c:90:80:e2:33:50:d4:ee:f3:92:c5:a3:60:6d:a3:e0:86:
         c6:52:5a:dc:91:d7:14:8c:47:28:66:58:01:7a:0d:61:61:6d:
         44:b6:28:2c:a5:64:bb:38:16:7e:96:31:b4:99:1e:53:bd:26:
         00:b8:b1:be:09:dd:e8:b2:c2:05:93:13:a3:69:f4:aa:8b:d4:
         7e:05:db:ea:21:3d:ba:5b:55:4e:c4:c1:79:22:23:f6:0a:dd:
         53:10:52:cf:d3:57:42:25:16:b6:fe:aa:7b:3e:17:bc:21:ad:
         94:58:7e:c8:22:e7:79:29:59:43:99:a3:50:64:be:ed:34:eb:
         90:7b:04:d5:86:e1:6b:69:3d:dc:9f:47:b5:02:3b:24:52:d8:
         3d:1a:dc:4f:a8:cb:b0:a6:97:c6:d3:14:40:eb:0b:70:dd:d4:
         8c:95:59:e9:98:16:1f:ee:4b:9d:86:40:17:c5:54:aa:b2:30:
         f8:fd:57:7d:47:1f:a9:ab:a3:29:26:6b:83:1c:72:d6:18:45:
         54:e2:7f:6e:ee:23:c6:cf:e6:bb:e1:45:6b:a4:05:b9:29:7f:
         b8:1c:29:45:c1:a5:f6:83:3c:71:19:6f:f1:9e:38:56:16:f8:
         27:85:47:f2:9b:0d:4d:48:3d:90:cc:dc:52:c6:ac:54:87:1b:
         6f:b4:a3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:21:15 2025 by rpki-client