Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
File:                     BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft (raw, json)
Hash identifier:          bSQwfzHav/wQlnqS3pBgTbdb902Fd0QTLEBigI3WCC8=
Subject key identifier:   DC:A0:B3:18:90:69:5F:3F:83:74:05:B0:6D:21:5A:C1:29:A3:99:CB
Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
Certificate issuer:       /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Certificate serial:       064E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
Manifest number:          0633
Signing time:             Thu 24 Apr 2025 22:36:54 +0000
Manifest this update:     Thu 24 Apr 2025 22:36:53 +0000
Manifest next update:     Thu 01 May 2025 22:36:53 +0000
Files and hashes:         1: BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl (hash: 1NFwDW3eMfLbXwsi+n9borEou7HSqrq4QE78glnkzko=)
                          2: BFC00D26D18011EEB673FD69C4F9AE02.roa (hash: Cvx2yiI1oVNG4J0lF2K+6YI8jeJN0PgnkGUOcXS5I48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl
                          rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184279, serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
        Validity
            Not Before: Apr 24 22:36:53 2025 GMT
            Not After : May  1 22:36:53 2025 GMT
        Subject: CN=680abd05-65bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:16:be:f6:c1:96:e5:3c:01:1c:65:61:f6:
                    76:b7:1a:0d:77:70:22:87:b8:d6:b2:5e:61:c6:2b:
                    35:44:55:9c:76:d2:b8:2e:88:f6:0a:3d:ee:52:70:
                    f4:c2:5d:91:1c:2d:26:58:66:39:4e:d8:63:d7:e7:
                    9f:6e:08:2c:81:e8:b5:31:54:36:4e:09:d4:7a:fd:
                    cb:5d:b8:05:28:ff:d5:5c:2f:df:f1:52:8d:26:93:
                    da:62:7f:be:1b:1e:5c:cb:28:c6:d5:5b:09:c9:c6:
                    8f:42:33:54:74:f1:82:db:2d:4f:d9:14:eb:c5:bb:
                    0d:fc:bd:e9:c8:94:ca:68:24:db:05:7c:5d:e6:7f:
                    9c:50:22:34:81:25:14:1a:0f:07:16:45:13:53:7a:
                    c0:7c:ad:3f:8c:b5:a4:9c:5d:f8:7a:b5:a8:32:16:
                    26:5b:d0:0b:37:37:9a:b5:3c:d5:bd:b6:26:23:ea:
                    8d:6a:be:8c:d7:69:2c:c7:17:71:a5:4e:21:c1:54:
                    1a:81:24:3f:a0:16:68:3c:09:27:bb:8b:77:84:32:
                    39:cd:70:26:91:45:1c:b9:44:05:d7:a2:7c:70:99:
                    d0:c9:f5:27:40:4e:39:d1:95:a3:6e:0f:5c:78:cb:
                    4d:1c:d1:0d:4b:69:6b:db:1f:a6:c3:19:08:49:47:
                    75:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A0:B3:18:90:69:5F:3F:83:74:05:B0:6D:21:5A:C1:29:A3:99:CB
            X509v3 Authority Key Identifier:
                keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e1:ef:1e:30:4f:95:62:af:83:62:26:77:98:5d:4e:15:5e:
         cb:71:70:89:87:e7:8b:69:dc:06:c0:08:30:7c:22:3e:58:d0:
         73:6a:64:0d:9e:46:6b:1b:88:5c:00:f3:fd:5b:2d:9a:bb:06:
         3b:bd:dc:d4:54:64:2b:b4:47:d1:3a:05:7b:2d:04:b9:7f:10:
         0a:1b:2d:7c:d6:2b:df:9c:d6:62:83:b9:ad:ba:e9:08:58:d6:
         b2:d1:13:9e:ac:62:6c:e5:be:ef:32:36:be:c2:ff:71:4d:fe:
         ff:62:6e:87:6d:04:8a:21:10:9b:72:8b:e3:85:ec:50:a2:ec:
         47:76:8f:b8:a0:99:e8:58:ef:f8:f1:c3:8c:43:61:c9:2a:6b:
         ed:d0:5f:4d:10:b9:18:84:05:49:9e:ab:48:22:2d:c8:4c:6e:
         ea:ef:84:aa:1f:c4:35:6c:27:d6:ff:53:f9:dc:ed:78:86:75:
         8b:51:2e:76:b0:d7:3e:e1:64:b0:00:9d:27:ca:01:76:e2:3e:
         83:9f:9a:61:b5:18:5f:37:2f:a0:fe:04:8b:7b:32:26:6a:02:
         a5:5e:da:0e:ba:66:d2:05:91:35:ed:c0:08:8d:74:3c:fa:0f:
         15:c0:eb:f5:95:f0:0d:f5:36:be:9b:10:4e:96:19:69:2c:0c:
         19:9e:6c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:03:10 2025 by rpki-client