Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
File:                     BFtcCGfeWB0rdIQv74BFwad76L0.mft (raw, json)
Hash identifier:          61PMGzMUsm7q8ynNcYrisV1aICY43dUNUho1ZH2F4u4=
Subject key identifier:   1E:48:6E:A9:0C:B7:FB:16:B3:DE:1F:CC:91:EC:A5:B4:BB:D2:13:FC
Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD
Certificate issuer:       /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
Certificate serial:       2440
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
Manifest number:          2406
Signing time:             Sun 02 Nov 2025 15:49:08 +0000
Manifest this update:     Sun 02 Nov 2025 15:49:08 +0000
Manifest next update:     Sun 09 Nov 2025 15:49:08 +0000
Files and hashes:         1: BFtcCGfeWB0rdIQv74BFwad76L0.crl (hash: nBUoIy/P7DtY2ZOnMZQbS7iDcjB2o27wpOKq3DphZjE=)
                          2: F8623718B10D11E5894F4D1CC4F9AE02.roa (hash: 2VqKtLp4I4n3i3xfxJ0a0zauep05yhz4m6vcbsayeiY=)
                          3: FCF0A580B10D11E5894F4D1CC4F9AE02.roa (hash: +2MMI4KCUim/55I1v/CcFFWM8c4do3z3Prc4iRx7/lQ=)
                          4: F9ED1B16B10D11E5894F4D1CC4F9AE02.roa (hash: fkO78SaWxLHL6UEeOmDkgAwdKa1QD3bVWVMip2dHju0=)
                          5: FB87E4C4B10D11E5894F4D1CC4F9AE02.roa (hash: Xr4axXAE5xhZlqvtubxZ2pb3RMbCF82Tss/A5eKchFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl
                          rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 15:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9280 (0x2440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917412F, serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
        Validity
            Not Before: Nov  2 15:49:08 2025 GMT
            Not After : Nov  9 15:49:08 2025 GMT
        Subject: CN=69077d74-8514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:59:95:b8:65:d5:7e:80:6c:71:3c:9f:f1:
                    98:f9:9b:fa:bf:af:4c:40:66:19:d2:6f:ab:ca:d4:
                    6a:28:a0:2d:c2:78:46:bd:8b:a5:99:00:6a:9c:9f:
                    dc:69:c0:18:30:d7:18:61:b4:a6:8c:fb:2a:ee:1d:
                    d2:e1:ad:b6:47:35:8e:a6:19:a7:06:54:63:6b:5e:
                    81:94:ff:24:65:aa:51:98:da:98:7e:95:93:bf:e1:
                    8e:87:df:ec:57:41:85:00:34:05:5d:a5:e8:9f:fa:
                    0c:15:5c:c8:4a:26:f1:2b:ab:69:4f:ef:61:f1:d8:
                    dd:2e:41:b4:9e:c6:14:4f:00:96:f2:d3:73:cb:a6:
                    ea:e6:df:5f:39:10:53:09:87:a2:64:b5:fa:7a:bb:
                    10:d4:cf:00:a5:37:c4:b2:02:0b:95:10:da:48:85:
                    27:83:b3:07:02:bf:87:e9:14:17:97:7f:20:9a:2f:
                    06:c4:68:b5:57:cc:a2:b0:8c:b4:06:1d:b2:d6:9d:
                    20:27:18:c9:af:ae:dc:db:f2:ae:89:73:67:d3:6a:
                    4f:86:3a:7d:43:0e:68:15:fa:a2:a7:1c:2e:3f:a0:
                    b0:f1:89:f6:f1:f3:90:b3:5f:62:55:a0:10:d1:1e:
                    97:aa:c8:f6:a7:00:df:c8:32:7c:12:cb:12:3a:19:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:48:6E:A9:0C:B7:FB:16:B3:DE:1F:CC:91:EC:A5:B4:BB:D2:13:FC
            X509v3 Authority Key Identifier:
                keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:15:3a:8d:d6:5a:72:5c:9e:5f:b2:d1:00:32:64:e9:74:43:
         ef:1b:57:ad:5d:7d:91:3c:42:af:88:3c:64:6c:16:d6:e2:8f:
         55:cf:0a:bd:b0:e0:53:af:44:eb:bb:1a:ab:b4:f7:18:91:24:
         c1:bb:02:08:ed:2b:5b:eb:5c:15:8b:aa:ef:39:85:c6:ae:3a:
         8c:de:6a:b7:74:7e:6c:b3:47:40:b3:c2:a9:79:3b:d2:4e:2f:
         47:f3:40:53:c4:a3:a3:c9:a8:0c:71:c3:7f:1c:14:b7:27:52:
         e6:72:39:33:c0:6c:07:aa:5e:ee:f2:fc:54:e3:20:40:0f:64:
         d6:ce:fe:3f:e7:45:c8:f2:77:a8:08:30:bd:b6:f9:bf:2c:27:
         b1:b2:75:95:56:3b:7f:58:94:fc:e7:15:35:93:9d:b7:08:79:
         77:0d:b6:55:86:0e:27:33:32:fa:9f:79:67:6a:fa:85:ce:7d:
         82:c7:bf:fc:19:13:d9:99:f2:01:82:15:d8:48:87:d7:2d:12:
         a2:a4:ef:09:8d:93:e4:40:56:ab:b1:c9:d1:93:24:59:3f:93:
         9f:bd:c0:d2:d9:f9:2f:5d:cd:7a:3b:68:fd:92:4e:e0:02:85:
         8a:01:c6:b4:8a:00:6e:d0:3f:36:61:4d:71:ad:60:a5:f0:e6:
         08:2b:ae:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:20:06 2025 by rpki-client