Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
File:                     BtehAtOMEJaAT42lLiz3jYkaxyE.mft (raw, json)
Hash identifier:          gFsF7X4yd7NVFvpwkM0OCg8RBaLNRBIAlin+Ga3c9Zk=
Subject key identifier:   7C:72:9C:AD:8B:E4:18:4C:01:48:70:68:C9:C4:4E:84:41:B8:6F:CC
Authority key identifier: 06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21
Certificate issuer:       /CN=A916B2C1/serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721
Certificate serial:       04BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
Manifest number:          04B5
Signing time:             Wed 02 Apr 2025 23:53:27 +0000
Manifest this update:     Wed 02 Apr 2025 23:53:26 +0000
Manifest next update:     Wed 09 Apr 2025 23:53:26 +0000
Files and hashes:         1: BtehAtOMEJaAT42lLiz3jYkaxyE.crl (hash: Mq4KRigWPx0PhhaMefYlhC2ojaMnkSONSYBRT997Pko=)
                          2: 551FA6B620DE11EC8CA3EC74C4F9AE02.roa (hash: sy0Mbt4ke59HBbem5DYUNkJ8NfZs0P/CrbYjmapjxqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl
                          rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 23:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210 (0x4ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B2C1
        Validity
            Not Before: Apr  2 23:53:26 2025 GMT
            Not After : Apr  9 23:53:26 2025 GMT
        Subject: CN=67edcdf6-3f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:a1:9d:dd:95:ba:dc:de:61:22:29:d3:9f:
                    5b:60:8b:c1:fa:eb:90:26:81:f4:66:56:75:24:78:
                    c3:04:a0:49:75:2e:68:b3:b1:8d:ec:f9:1b:a6:79:
                    36:19:45:ad:7f:b0:04:34:a6:70:15:8b:d9:f1:e3:
                    b7:94:23:86:e7:6c:ba:15:84:2a:51:d1:53:f7:18:
                    bc:5e:69:fd:6e:3c:b0:55:06:c5:d3:e3:17:48:c9:
                    7f:64:f0:ee:79:c0:ef:f9:8c:9a:e1:f3:28:7c:a1:
                    49:b6:a3:be:47:3e:f0:64:8a:22:09:dc:b8:c2:c2:
                    37:7c:c7:b4:a3:ef:6a:d6:ed:42:0b:f2:5c:dc:f9:
                    ce:bd:e2:6c:24:20:70:af:96:20:e8:2a:be:c5:e5:
                    db:0a:1f:59:8a:0a:00:4d:73:dd:5d:df:92:ed:a4:
                    04:7b:b0:d7:4a:6c:bc:79:79:bf:fc:57:21:fa:73:
                    bc:c5:11:26:28:5b:74:ab:f6:c1:56:fe:c1:00:8c:
                    82:fa:e0:8c:8f:95:7c:1d:0a:2e:f6:27:c8:0a:0f:
                    ad:c1:be:9d:6a:3a:61:80:bc:9c:6f:8d:63:6d:fa:
                    7b:b7:49:d0:3c:ff:1a:02:c1:48:c4:86:d0:e8:37:
                    e1:9e:57:7c:bb:08:62:e2:44:3f:50:9f:63:98:5a:
                    67:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:72:9C:AD:8B:E4:18:4C:01:48:70:68:C9:C4:4E:84:41:B8:6F:CC
            X509v3 Authority Key Identifier:
                keyid:06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ea:86:17:fa:47:e5:d1:21:16:b4:a6:e4:e5:08:6b:b6:70:
         41:90:12:43:95:bb:52:7e:a3:4a:61:4f:48:aa:18:bb:38:04:
         34:37:52:00:9d:1e:37:2f:54:a8:eb:d1:e5:bb:1e:ee:d5:60:
         5b:cd:79:80:aa:a2:eb:7a:20:bf:f5:2e:01:18:b1:6a:ea:03:
         14:ba:22:99:61:c0:0b:84:d8:f1:ce:a7:db:fd:31:ad:6a:0a:
         77:03:70:b4:a1:ea:93:3a:91:b2:4f:81:e5:cf:21:9d:ef:8b:
         14:05:b9:f0:da:88:39:41:8f:cf:d8:f1:69:b9:0f:19:2f:02:
         6a:30:b2:2d:79:0a:8c:62:19:8f:ff:75:91:f6:60:33:87:ca:
         0f:07:88:c7:43:63:e5:14:e9:66:dd:7b:70:48:d1:cf:b7:48:
         6d:a2:64:69:5d:81:bf:ce:49:08:f2:1f:4e:07:2e:17:7e:92:
         97:e0:d2:33:36:49:80:af:60:37:59:6a:3a:30:7a:2e:f2:03:
         06:82:2e:82:b3:a6:7c:59:75:41:a7:42:d7:47:06:f2:29:5f:
         71:20:5b:01:4f:f8:96:b8:15:bc:e9:40:a6:5f:76:f7:f9:ac:
         01:3b:67:55:bb:95:46:9a:ef:9c:99:e7:aa:d4:a8:33:9d:75:
         49:74:8d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:49 2025 by rpki-client