Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
File:                     btoKR86sX5SQFUbuiaP14i4Zp2I.mft (raw, json)
Hash identifier:          XxYQeWyAKj0roqi51XvnFAZXYc5fM2t/Z1sCZo24h8o=
Subject key identifier:   D9:98:72:DD:2F:C1:1B:B8:B8:A1:BC:CB:C6:0E:82:1E:86:54:53:6B
Authority key identifier: 6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62
Certificate issuer:       /CN=A913D756/serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
Manifest number:          A7
Signing time:             Sun 19 Oct 2025 09:27:18 +0000
Manifest this update:     Sun 19 Oct 2025 09:27:18 +0000
Manifest next update:     Sun 26 Oct 2025 09:27:18 +0000
Files and hashes:         1: btoKR86sX5SQFUbuiaP14i4Zp2I.crl (hash: zTnzoCLTAwkabzcQlVsr1nGUamWZbQ6ftfkRb/fWJtU=)
                          2: A90B2F28B1F611EF86337B54C4F9AE02.roa (hash: oosdej6NCKw9+AFZHUWJ0H2pXTiyHE7ZIsFdjEUcWdo=)
                          3: C18E24EEB1F911EF80160911C4F9AE02.roa (hash: IaSXU0hhTqd/kbD/ZDjyAZBXMXMDGHq4FlHzzaXzxz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl
                          rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D756, serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
        Validity
            Not Before: Oct 19 09:27:18 2025 GMT
            Not After : Oct 26 09:27:18 2025 GMT
        Subject: CN=68f4aef6-4de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:98:7c:a8:22:66:98:98:c5:b3:0f:7b:ad:
                    37:2c:7e:7d:e0:35:c5:37:f9:0c:90:82:5c:a9:a9:
                    98:48:d0:c8:cc:94:51:19:f4:5f:98:61:6c:d1:87:
                    40:b3:38:08:27:bf:a7:03:9e:31:a2:6a:68:b7:18:
                    25:06:92:38:b7:44:41:1a:8a:19:3a:ea:49:15:5c:
                    08:05:82:f3:72:56:47:2a:3e:c5:f7:12:cd:8c:d7:
                    fb:94:4c:ae:fd:93:19:3c:99:ca:37:87:84:f1:4a:
                    41:35:29:f2:d0:dd:a0:76:e6:c6:00:8e:34:2a:40:
                    e3:da:03:8a:fb:5d:ec:c0:a9:d7:10:02:9b:22:16:
                    3f:7f:cc:c0:ed:6f:bf:ab:7d:fb:bf:c8:ac:49:9f:
                    9e:cd:1b:2e:5b:8c:d8:7d:bf:b6:fd:4b:b3:ca:ee:
                    5d:8e:65:44:0d:f0:31:5c:7d:df:29:da:ff:e5:a8:
                    c3:c0:b9:e5:eb:77:aa:de:ce:9d:1c:3d:bf:b8:83:
                    0e:5a:dc:81:3e:fe:0e:53:49:23:98:9f:70:a4:f5:
                    58:49:0b:03:63:fc:1b:dc:e9:b7:2c:1d:c5:89:3b:
                    eb:f0:9c:cf:82:5a:e1:7f:e8:ec:f3:68:9d:e4:83:
                    95:95:42:44:7d:18:a9:02:c1:a3:44:ea:e7:45:c0:
                    40:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:98:72:DD:2F:C1:1B:B8:B8:A1:BC:CB:C6:0E:82:1E:86:54:53:6B
            X509v3 Authority Key Identifier:
                keyid:6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:59:98:83:9d:34:d6:66:fa:f6:9e:da:37:f1:cc:18:0c:78:
         3e:87:38:76:bd:f3:2b:0d:15:7c:4d:24:ff:33:c2:db:cf:60:
         a0:6c:83:12:8f:c3:46:e9:98:9d:b6:18:d3:45:bc:d3:94:4f:
         56:10:ca:f3:7e:a5:3a:bf:ff:e3:16:93:e0:ba:73:61:1a:0d:
         27:6c:7f:73:ac:27:71:82:d9:28:86:bc:f1:d5:99:4d:84:11:
         b1:23:b5:4b:7b:3b:a0:8d:65:5b:b3:37:7e:15:31:16:c7:ff:
         a0:b5:9f:fe:d0:0f:4a:b8:22:85:00:10:63:07:de:4a:e5:28:
         2c:f9:4a:9e:4a:a7:af:5d:87:bd:29:63:55:84:cc:4a:8e:bf:
         dd:3c:90:db:30:1b:a0:9e:aa:aa:a1:ea:7c:27:d9:15:67:53:
         a9:21:c9:26:f6:04:2f:68:a4:a1:d0:71:1a:63:e6:48:23:63:
         30:91:2f:27:a3:7d:a7:66:8a:6c:56:6e:90:04:68:98:27:40:
         d5:f8:20:dd:3c:71:9b:7c:0e:78:fb:13:72:2f:28:96:99:6b:
         69:06:48:fe:d3:f1:40:ee:06:7b:19:41:9d:76:53:1f:9b:28:
         f3:da:4c:f6:39:8a:9b:e5:b7:a8:66:41:7c:01:c3:ce:df:06:
         34:8e:20:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:34:56 2025 by rpki-client