Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
File:                     BFtcCGfeWB0rdIQv74BFwad76L0.mft (raw, json)
Hash identifier:          a8ayT0iaQlvTGdZhjRLA+XA7VcUYH6CbP3t5F82Ttb4=
Subject key identifier:   C9:BD:54:65:5C:1D:8F:38:C7:6C:37:11:BD:72:2C:9B:0E:17:ED:24
Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD
Certificate issuer:       /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
Certificate serial:       2414
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
Manifest number:          23DA
Signing time:             Fri 08 Aug 2025 15:53:40 +0000
Manifest this update:     Fri 08 Aug 2025 15:53:39 +0000
Manifest next update:     Fri 15 Aug 2025 15:53:39 +0000
Files and hashes:         1: BFtcCGfeWB0rdIQv74BFwad76L0.crl (hash: Yem/OYi+Uri36zRrNd1OllygEkbHOPlcnlBEX0LuQm0=)
                          2: F8623718B10D11E5894F4D1CC4F9AE02.roa (hash: 2VqKtLp4I4n3i3xfxJ0a0zauep05yhz4m6vcbsayeiY=)
                          3: FCF0A580B10D11E5894F4D1CC4F9AE02.roa (hash: +2MMI4KCUim/55I1v/CcFFWM8c4do3z3Prc4iRx7/lQ=)
                          4: F9ED1B16B10D11E5894F4D1CC4F9AE02.roa (hash: fkO78SaWxLHL6UEeOmDkgAwdKa1QD3bVWVMip2dHju0=)
                          5: FB87E4C4B10D11E5894F4D1CC4F9AE02.roa (hash: Xr4axXAE5xhZlqvtubxZ2pb3RMbCF82Tss/A5eKchFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl
                          rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9236 (0x2414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917412F, serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
        Validity
            Not Before: Aug  8 15:53:39 2025 GMT
            Not After : Aug 15 15:53:39 2025 GMT
        Subject: CN=68961d83-1c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b8:4b:c9:0a:8c:0a:87:a0:a7:24:f8:8a:16:
                    5e:5e:33:c9:b9:0d:4e:cc:28:0f:a0:d4:5b:4d:f7:
                    e2:c2:ce:0e:98:53:59:39:be:be:a7:e3:3d:87:42:
                    b4:66:c7:94:1c:0c:3b:7f:45:80:4d:4c:2d:e3:71:
                    18:5f:d2:3b:47:1e:6d:a3:d0:eb:31:34:59:47:4f:
                    5a:b6:07:0b:3f:1c:b1:ee:2f:75:92:53:a8:2d:61:
                    2b:8a:af:95:75:56:f3:b3:e0:f8:2d:60:00:60:5c:
                    78:b9:bf:dd:96:f6:a0:10:80:1f:5f:74:3f:4e:41:
                    eb:dc:aa:0c:a7:26:e5:1a:60:df:43:13:8f:10:e3:
                    45:84:1b:a1:a9:35:64:cd:ce:b8:fb:77:6c:3a:5b:
                    f4:53:96:ef:1e:2f:c3:45:47:0b:75:f8:1a:25:37:
                    ef:25:4b:87:31:a8:ba:60:c3:fe:07:bf:55:80:f8:
                    68:e0:ff:bf:36:ee:78:b4:9e:53:cb:86:0f:95:f1:
                    7f:d7:39:8a:1f:e6:87:a2:78:ba:a9:15:6f:8c:7f:
                    60:a4:1e:86:5a:d2:e8:23:c0:c6:dd:ea:b5:87:a8:
                    18:53:c3:67:2d:e2:aa:90:a6:93:7d:3a:bc:99:30:
                    b2:fb:4f:cb:4c:ed:a5:af:18:f5:0f:c9:9f:40:c9:
                    5a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BD:54:65:5C:1D:8F:38:C7:6C:37:11:BD:72:2C:9B:0E:17:ED:24
            X509v3 Authority Key Identifier:
                keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:21:e4:8e:e2:4a:b5:c9:f7:bd:b8:84:05:09:ea:d7:35:dc:
         85:6b:6f:9b:b9:dc:4b:91:3d:a1:3b:26:aa:26:f6:8d:27:86:
         c4:5f:a0:0e:31:f0:0f:80:43:68:76:d2:fc:74:c6:e1:50:ff:
         10:dc:c6:24:95:31:10:f2:2b:cd:6f:8c:79:e9:62:db:52:74:
         fa:92:91:7e:a0:01:85:78:00:13:48:41:19:ad:a5:83:fc:d8:
         1e:f7:d4:8b:25:7e:ae:3c:1f:91:da:98:57:11:0b:1d:70:7a:
         2c:d2:b7:e7:d0:be:ea:18:3a:e4:c3:39:de:df:32:56:eb:c4:
         f0:e0:87:4d:95:30:f3:39:5e:1f:a7:05:0d:0b:fe:02:e7:fd:
         6a:29:52:3f:1a:79:8e:e6:cf:0b:cc:63:ea:b9:33:d4:3f:dc:
         a8:6a:77:c4:2b:ea:c8:09:1d:ae:8e:4b:23:dc:f3:bc:08:27:
         3a:2f:82:4a:7d:41:d9:59:50:50:fd:69:69:6e:1a:2d:c2:67:
         d9:6a:46:2d:17:b0:9f:fd:25:6f:e7:34:51:76:74:54:1c:23:
         7b:14:4e:36:c9:14:9d:a8:e6:04:9e:bd:6c:8f:2c:a0:be:68:
         0f:b0:0b:ee:f7:23:c4:2f:5e:82:15:9a:8c:67:3e:0e:44:20:
         d5:5a:d2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:21:07 2025 by rpki-client