Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
File:                     BFtcCGfeWB0rdIQv74BFwad76L0.mft (raw, json)
Hash identifier:          /wXWLsltxUz4cm0nXLStVhhY0bIZdfdUj3H5kuwqT3Y=
Subject key identifier:   E0:5F:53:38:51:40:4D:DB:BB:16:8D:99:F3:44:1D:31:F5:B4:17:F5
Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD
Certificate issuer:       /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
Certificate serial:       23F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
Manifest number:          23B6
Signing time:             Fri 30 May 2025 16:00:09 +0000
Manifest this update:     Fri 30 May 2025 16:00:09 +0000
Manifest next update:     Fri 06 Jun 2025 16:00:09 +0000
Files and hashes:         1: BFtcCGfeWB0rdIQv74BFwad76L0.crl (hash: U19fQKnzCX7sN/be/UrcT8aQpdT75ftNkOK8gNwb+uQ=)
                          2: F8623718B10D11E5894F4D1CC4F9AE02.roa (hash: 2VqKtLp4I4n3i3xfxJ0a0zauep05yhz4m6vcbsayeiY=)
                          3: FCF0A580B10D11E5894F4D1CC4F9AE02.roa (hash: +2MMI4KCUim/55I1v/CcFFWM8c4do3z3Prc4iRx7/lQ=)
                          4: F9ED1B16B10D11E5894F4D1CC4F9AE02.roa (hash: fkO78SaWxLHL6UEeOmDkgAwdKa1QD3bVWVMip2dHju0=)
                          5: FB87E4C4B10D11E5894F4D1CC4F9AE02.roa (hash: Xr4axXAE5xhZlqvtubxZ2pb3RMbCF82Tss/A5eKchFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl
                          rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 16:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9200 (0x23f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917412F, serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
        Validity
            Not Before: May 30 16:00:09 2025 GMT
            Not After : Jun  6 16:00:09 2025 GMT
        Subject: CN=6839d609-e166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d1:ea:3b:e5:60:4e:d1:6c:f2:f7:c2:50:9c:
                    8e:d2:d7:7f:fe:9f:e8:28:85:b9:05:68:9d:ca:1a:
                    3e:a5:df:13:76:c6:b1:c0:57:8e:04:12:ab:ba:b0:
                    7c:89:cc:44:90:a8:e3:f4:6d:42:8d:36:87:e6:01:
                    96:76:11:74:68:88:c0:ff:e5:e7:a9:d5:58:06:fa:
                    9d:b7:46:87:a0:2a:93:d6:13:6b:aa:ae:d7:f3:07:
                    9c:7e:27:6d:b7:87:ab:32:8b:42:19:1a:43:45:51:
                    f5:a4:84:b5:08:76:70:0a:b3:96:03:5f:d9:ad:34:
                    04:e6:93:c8:af:51:a0:5f:bb:4d:47:09:a9:5b:0c:
                    a7:43:7e:6c:78:e1:54:1a:e1:a7:1a:20:8f:05:5c:
                    6f:92:16:60:f0:60:a9:55:d0:e8:a7:66:77:68:02:
                    9e:2f:33:bb:7b:b2:7c:63:15:d5:f5:8d:14:5e:17:
                    94:9a:c2:42:70:34:2c:2f:d0:32:66:e9:79:f5:8f:
                    c9:f1:61:41:2b:2e:c9:4b:84:47:4b:d1:cc:f0:78:
                    81:39:8b:b8:2f:0c:ee:8a:4c:dd:d1:69:ce:71:a6:
                    c5:76:7d:07:b1:77:50:d9:39:26:8f:ec:86:42:79:
                    41:43:ee:95:4f:83:2c:34:1c:9b:a4:b3:73:3a:bb:
                    a7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5F:53:38:51:40:4D:DB:BB:16:8D:99:F3:44:1D:31:F5:B4:17:F5
            X509v3 Authority Key Identifier:
                keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:40:39:a0:61:48:28:37:06:3e:31:9f:fd:0f:6f:16:3b:10:
         d7:d6:16:77:d9:40:f8:02:f2:60:8b:fc:c7:c0:46:0c:a4:20:
         9b:76:50:87:e0:46:60:df:9d:97:47:a5:db:ca:f7:07:b1:50:
         8a:33:2c:a2:d5:72:0f:a7:bd:7b:8c:31:76:ff:d4:cb:e2:6e:
         95:77:e2:bd:24:89:df:d6:56:0e:f2:2c:d0:5e:43:6a:ff:21:
         2b:44:d1:3d:3c:14:6d:e8:31:5d:a7:bb:04:b1:ce:a6:39:79:
         7b:ab:dc:73:6f:f9:52:c5:f9:a6:02:c1:72:2e:f3:73:1d:f1:
         da:03:c0:d3:17:99:72:a0:b0:cf:83:3c:46:19:44:51:b8:f4:
         e7:92:22:c1:72:07:9d:1b:c8:dc:1a:26:5d:66:8f:26:85:4e:
         8c:59:8a:cd:66:58:6b:26:12:1e:be:7f:a7:89:88:5f:3f:c2:
         75:5a:ab:dc:29:8a:27:3c:e0:6f:a8:84:a5:44:47:05:09:4e:
         9a:2a:a4:7a:5c:b6:76:af:5e:c4:f2:7a:ad:d1:1d:95:c0:2c:
         9b:36:5a:33:ff:35:1a:f6:dc:ed:03:ca:cb:7b:a2:54:f4:4a:
         be:dc:46:d8:92:0e:af:c8:f8:08:e7:4c:51:1b:6f:90:e5:01:
         e2:a2:64:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:59:23 2025 by rpki-client