Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
File:                     BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft (raw, json)
Hash identifier:          r7Iob6Z80UTlLIjnkn+79/etvlXnOEtVoWqxRODqcRU=
Subject key identifier:   E7:4A:C2:A5:21:1F:23:43:03:E0:65:DC:D9:DA:6D:9A:F5:A2:99:C8
Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
Certificate issuer:       /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Certificate serial:       068C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
Manifest number:          0670
Signing time:             Wed 20 Aug 2025 22:43:45 +0000
Manifest this update:     Wed 20 Aug 2025 22:43:44 +0000
Manifest next update:     Wed 27 Aug 2025 22:43:44 +0000
Files and hashes:         1: BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl (hash: HkyGwxgxNAbNOtaLx7rOopyJBMT44c8ohekmMl1ZPnM=)
                          2: BFC00D26D18011EEB673FD69C4F9AE02.roa (hash: slvz1DiBN7RpHIPZvSLyRTkEJiuUppucAlEd1/xFZqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl
                          rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 22:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676 (0x68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184279, serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
        Validity
            Not Before: Aug 20 22:43:44 2025 GMT
            Not After : Aug 27 22:43:44 2025 GMT
        Subject: CN=68a64fa1-3881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:48:6c:d6:2c:7d:55:9e:82:34:1a:62:ee:
                    de:8c:64:21:72:16:e9:88:e7:d2:a5:ef:59:de:d2:
                    54:12:55:1f:25:60:31:92:1d:3d:de:10:7b:84:d2:
                    3e:ad:b0:aa:48:16:c1:13:fe:66:4b:81:cb:c9:d6:
                    b9:b5:64:0e:f5:0c:0f:3e:8d:3c:c7:94:c0:06:2e:
                    2b:aa:12:8e:0a:36:9e:7a:0e:ee:13:f9:c8:3b:08:
                    b8:1d:4d:0e:48:29:d4:36:f0:26:95:b3:45:db:28:
                    8a:2d:20:ec:7f:21:b8:57:bb:7c:7b:6c:5a:a2:ea:
                    6c:ba:cb:5b:cc:7d:c7:83:7e:9f:40:0a:c2:18:88:
                    b4:89:49:0f:97:2b:f7:d2:06:98:1a:5e:80:82:48:
                    42:d3:9a:53:6c:6f:38:af:1c:b7:a7:86:9b:bb:7d:
                    14:f3:a7:57:14:61:ea:8b:b2:f2:b1:92:27:da:68:
                    7c:18:46:4b:8d:2d:27:46:1a:ee:ce:94:48:fa:fa:
                    d1:28:6b:50:8f:32:19:b0:10:80:5b:ea:a3:39:62:
                    80:bc:16:75:5f:85:e0:c3:2b:08:bf:28:b9:f2:c2:
                    9f:9d:df:cd:ff:06:5d:6b:bd:9b:ad:08:42:30:af:
                    cc:2b:f9:24:5b:2c:6b:93:00:31:28:15:e0:66:cf:
                    4a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4A:C2:A5:21:1F:23:43:03:E0:65:DC:D9:DA:6D:9A:F5:A2:99:C8
            X509v3 Authority Key Identifier:
                keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:43:ed:47:85:80:ff:d7:6b:db:e9:66:a4:53:8a:33:39:99:
         74:0a:91:3d:d0:0c:b3:07:dd:83:a5:c1:83:56:18:ab:77:4c:
         79:44:2e:8c:38:e4:ad:4a:70:03:5e:34:db:f2:7c:5a:53:5b:
         a7:13:81:04:9e:ac:05:d2:b7:58:d0:cd:11:0c:58:ac:84:1e:
         e6:97:dd:dd:a5:6b:96:ee:0c:db:f4:99:be:ff:0e:a8:b9:e8:
         e1:79:15:19:75:c1:2c:a2:75:17:e1:6b:01:12:c3:b8:49:31:
         fc:2b:34:19:d1:76:8a:10:b3:29:0a:5a:84:5e:ad:e7:c3:a4:
         b3:c3:16:d5:bb:65:24:37:c8:9c:b4:e7:a3:54:e6:93:51:90:
         e9:37:36:aa:a6:95:92:a1:ad:8e:b1:81:35:45:fd:21:07:51:
         67:b7:e3:a4:7c:8e:3c:f4:01:e6:55:0f:ef:42:96:a2:83:ff:
         1a:26:5b:ae:6d:6d:54:a7:13:7c:74:e6:e7:01:02:12:11:83:
         b3:4c:23:58:d4:64:e6:80:27:f3:78:ae:c1:10:cc:50:99:2e:
         45:0c:cd:f5:65:12:0b:c5:49:7d:f0:b2:73:99:06:54:72:f5:
         96:cd:9a:75:29:45:be:26:3c:58:a9:13:2e:5b:06:21:1b:2e:
         31:5f:28:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:30:43 2025 by rpki-client