Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
File:                     BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json)
Hash identifier:          Vc+i7WoqTJ39lerNZxlJUk9iw/CsVhYY6nyckC0FhFI=
Subject key identifier:   0F:19:C7:39:E7:CA:5F:9D:A3:69:56:85:D1:2C:E2:C7:C1:71:1F:89
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Certificate issuer:       /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial:       0514
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
Manifest number:          0502
Signing time:             Sat 19 Jul 2025 00:05:36 +0000
Manifest this update:     Sat 19 Jul 2025 00:05:35 +0000
Manifest next update:     Sat 26 Jul 2025 00:05:35 +0000
Files and hashes:         1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: lDXyrEg48niy8qLmsUV4A3nYI026l4AQNs86H2DqKjM=)
                          2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: bWFskxvhi7CkjX9KQtUg/L6OTceIBUoGJSArRRh8yOc=)
                          3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: TEWGyyYFx9ktn3pEsyb60J6bTDtXfXp/IzUXg77M9qA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
                          rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 00:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1300 (0x514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
        Validity
            Not Before: Jul 19 00:05:35 2025 GMT
            Not After : Jul 26 00:05:35 2025 GMT
        Subject: CN=687ae14f-ecf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:af:aa:a6:0b:82:2f:89:0a:06:ff:c6:c8:4d:
                    de:9e:5c:03:42:4c:d4:78:ce:7b:45:86:91:38:30:
                    f2:d0:34:1b:15:3d:1f:01:e3:d8:c8:af:55:73:dd:
                    28:65:8a:02:d6:96:02:ce:c8:3d:9b:29:19:15:b7:
                    50:0e:49:46:d9:1b:5a:05:46:8a:0a:45:dd:6e:81:
                    ff:e1:95:5d:aa:dc:a9:7f:07:bd:eb:50:d7:65:2f:
                    4a:1a:41:8e:9f:b0:19:b8:74:c8:a3:05:14:71:ad:
                    ea:d4:f0:d8:69:60:c8:56:46:b5:b8:a7:53:4c:80:
                    11:59:de:51:b9:b9:4e:c2:b3:80:f7:bd:d5:e3:74:
                    55:fe:5c:c2:0b:02:0d:f1:49:42:09:f9:0a:86:56:
                    9a:2c:c2:5e:4c:d7:00:dc:4e:16:6a:4e:bb:f4:62:
                    91:e9:6e:29:5c:5a:65:56:97:cb:4d:6a:50:39:c6:
                    2f:b8:ea:ef:0d:f8:8b:1e:22:5d:97:ef:7d:10:e9:
                    9d:6b:df:65:d0:81:a6:e5:0c:f9:b4:e6:52:01:e1:
                    dc:b4:79:d9:d0:b5:42:b8:7f:7f:98:03:cf:58:e7:
                    f3:e3:82:dd:05:b1:23:59:b8:08:4c:29:51:d2:9d:
                    d1:52:15:83:f0:2d:13:24:1d:2e:16:cc:b8:cc:25:
                    48:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:19:C7:39:E7:CA:5F:9D:A3:69:56:85:D1:2C:E2:C7:C1:71:1F:89
            X509v3 Authority Key Identifier:
                keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:2c:24:a3:b1:7b:ba:09:ff:66:65:a2:d6:4c:7e:95:46:bc:
         09:92:2d:3a:2a:1d:6c:8a:8e:b2:74:21:66:f4:f3:66:b7:ad:
         9b:6a:26:fb:f1:1d:15:d8:44:97:98:46:ac:03:c7:71:0a:87:
         76:f9:24:0e:86:6f:9e:0b:6c:a4:2f:0b:61:b9:68:77:8b:07:
         cd:6d:d0:5b:72:2a:c4:c6:38:db:7e:23:bf:c1:00:67:d5:56:
         42:e5:49:8c:8a:0b:6b:2f:10:4c:38:68:31:c4:8f:14:14:38:
         2d:85:2f:b2:79:c0:18:5b:52:db:8b:bd:a8:a9:55:bd:a9:df:
         80:14:ab:07:f4:8d:ee:c5:ac:f8:11:72:ba:3d:cc:ef:29:29:
         30:06:a7:65:b7:08:f8:45:eb:61:93:48:54:2e:dc:f1:aa:e3:
         ea:41:b2:2b:d8:d0:dc:73:35:b3:07:63:02:94:54:09:27:84:
         75:e7:89:d6:60:2e:fc:a4:35:5f:8c:e5:a6:79:fc:2c:4f:a8:
         32:53:15:e1:8f:f6:e4:00:42:32:ad:53:29:67:d9:9b:9b:8f:
         a8:d2:1f:2e:5b:b7:3e:4f:f7:88:99:60:7b:71:e0:7b:2a:dd:
         6c:b2:b5:6d:98:27:a7:83:c3:d7:45:23:07:26:d1:c4:a1:fd:
         1b:00:0c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:02:32 2025 by rpki-client