Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
File:                     BtehAtOMEJaAT42lLiz3jYkaxyE.mft (raw, json)
Hash identifier:          fq3/YO+cnoZJRhYI22a76B/X6q1XVnp5AfOW5sfMAxM=
Subject key identifier:   F5:F6:77:F7:FB:77:2A:6F:02:BA:22:E3:5B:92:BD:43:FE:EF:09:31
Authority key identifier: 06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21
Certificate issuer:       /CN=A916B2C1/serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721
Certificate serial:       050A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
Manifest number:          0505
Signing time:             Mon 08 Sep 2025 23:41:38 +0000
Manifest this update:     Mon 08 Sep 2025 23:41:37 +0000
Manifest next update:     Mon 15 Sep 2025 23:41:37 +0000
Files and hashes:         1: BtehAtOMEJaAT42lLiz3jYkaxyE.crl (hash: aYTVMq8to+jU5N7nVTZyf58vwrV852p3JTn2XTrCubk=)
                          2: 551FA6B620DE11EC8CA3EC74C4F9AE02.roa (hash: sy0Mbt4ke59HBbem5DYUNkJ8NfZs0P/CrbYjmapjxqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl
                          rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 23:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1290 (0x50a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B2C1, serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721
        Validity
            Not Before: Sep  8 23:41:37 2025 GMT
            Not After : Sep 15 23:41:37 2025 GMT
        Subject: CN=68bf69b1-a24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b3:1a:ce:4a:78:9f:10:b1:16:84:b5:04:9e:
                    3f:5a:f4:9c:d7:84:53:3a:4a:1f:3d:6c:50:c1:05:
                    d3:4d:3f:5c:e1:28:9d:4b:5d:97:c3:f6:27:91:03:
                    97:1f:94:21:e8:d2:35:b3:f5:ad:36:32:6a:08:53:
                    98:27:1c:24:e1:37:e8:d8:bc:99:69:72:f3:d6:88:
                    5c:06:e9:6f:aa:14:f8:3f:31:b5:1e:bb:df:38:58:
                    50:c2:fc:5b:fd:ac:cb:21:36:55:5c:9c:67:1d:5b:
                    c4:d7:cc:2e:12:6d:46:d5:6a:3f:5d:3f:bf:ac:f6:
                    f3:60:77:08:46:12:8d:59:d7:b9:13:98:77:13:e5:
                    a1:43:5f:af:c0:d7:29:ea:31:84:71:2a:9a:aa:c9:
                    80:fd:97:0a:94:05:a4:80:a5:eb:85:d3:3e:7e:4a:
                    fa:fa:18:4c:3f:67:f0:9e:05:9f:72:b6:a6:94:69:
                    e5:b2:bf:29:0b:ab:12:f9:38:25:fb:64:7c:5a:89:
                    3f:88:bd:4a:16:ec:9e:56:1d:65:32:93:43:23:5b:
                    ff:c1:25:48:98:82:c1:8b:d3:ab:14:38:3b:00:f2:
                    0d:a4:e9:8f:e3:c1:a4:55:c9:c8:fe:1d:c1:22:4c:
                    f7:88:37:91:b0:d5:c5:c4:55:33:a1:09:82:97:07:
                    33:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F6:77:F7:FB:77:2A:6F:02:BA:22:E3:5B:92:BD:43:FE:EF:09:31
            X509v3 Authority Key Identifier:
                keyid:06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d1:e8:50:fe:15:17:ee:26:c8:2f:c2:8f:1c:48:74:c5:ba:
         4f:57:c7:45:31:d3:28:93:0f:77:f9:98:84:e2:4e:9f:ae:26:
         e5:e6:88:27:18:29:8f:af:a1:c7:3e:75:b6:a4:4a:59:20:2e:
         48:f2:c1:d3:16:28:d3:05:13:6d:5a:a8:f7:3a:de:d8:c8:aa:
         c8:93:50:a8:28:6a:dc:23:d0:87:75:34:83:f5:09:1b:5b:e6:
         fe:7a:a1:51:bb:29:9e:97:ce:9d:0a:a4:7a:81:11:4d:05:e7:
         55:cc:5e:ea:20:1f:87:c4:d4:2e:d9:c8:ce:d3:dd:e9:a1:a8:
         a3:df:42:0e:ae:dc:d8:25:7e:f0:3f:1d:a8:ac:f9:d2:35:d6:
         33:65:72:30:2b:69:06:40:1a:dd:8b:10:b3:f3:7f:5b:d2:fd:
         ce:ee:86:99:c9:b9:64:f8:0d:9c:92:ea:f2:4d:1a:3f:75:1c:
         99:85:a9:54:f5:25:a8:f6:3a:6f:24:2b:a7:aa:a6:20:fd:91:
         1d:f0:ac:dc:7c:9a:e4:10:94:a0:12:33:a8:2e:1b:61:96:df:
         a5:36:3f:ff:b5:7c:db:32:93:3e:61:9b:48:a1:79:cd:fa:b4:
         dd:de:a6:50:3f:85:1e:1b:36:5e:c6:9e:db:77:62:b9:87:5c:
         4e:a2:37:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:29:15 2025 by rpki-client