Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
File:                     btoKR86sX5SQFUbuiaP14i4Zp2I.mft (raw, json)
Hash identifier:          r6tZ7yBziRairTOcq4ueiAPuAnfqDf5UCShAEuSgrEo=
Subject key identifier:   55:3D:89:AF:F9:2B:87:DA:40:1F:D4:E0:C4:D2:BA:49:A0:45:28:8D
Authority key identifier: 6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62
Certificate issuer:       /CN=A913D756/serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
Manifest number:          8A
Signing time:             Sat 23 Aug 2025 06:50:05 +0000
Manifest this update:     Sat 23 Aug 2025 06:50:05 +0000
Manifest next update:     Sat 30 Aug 2025 06:50:05 +0000
Files and hashes:         1: btoKR86sX5SQFUbuiaP14i4Zp2I.crl (hash: GX/mHRqW8OQQvT6Q5W0NP9K9rlnL97nHzGoAPVZSNSY=)
                          2: A90B2F28B1F611EF86337B54C4F9AE02.roa (hash: oosdej6NCKw9+AFZHUWJ0H2pXTiyHE7ZIsFdjEUcWdo=)
                          3: C18E24EEB1F911EF80160911C4F9AE02.roa (hash: IaSXU0hhTqd/kbD/ZDjyAZBXMXMDGHq4FlHzzaXzxz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl
                          rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D756, serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
        Validity
            Not Before: Aug 23 06:50:05 2025 GMT
            Not After : Aug 30 06:50:05 2025 GMT
        Subject: CN=68a9649d-0b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:6f:68:a2:4b:c4:9e:86:79:b2:85:a3:33:
                    3a:5e:f4:28:56:64:4c:02:fc:8d:f4:d2:c0:09:43:
                    37:78:53:c7:9a:de:4e:b0:08:28:be:e2:b4:87:38:
                    69:d3:37:02:c2:10:de:5d:43:ba:5e:66:5b:f8:71:
                    cb:ff:8c:4d:de:21:ab:b7:fd:8a:a3:50:f4:96:90:
                    b5:2b:68:10:b1:b9:b7:57:00:af:14:9d:a6:e7:f6:
                    5a:6e:25:31:a5:3e:43:0e:24:9b:66:e4:bc:23:5b:
                    26:26:6c:ff:e7:de:12:6c:eb:7f:84:3c:68:a5:21:
                    a1:73:24:35:17:f3:95:26:15:80:b6:0f:2e:a8:76:
                    7f:8e:0a:bb:63:15:91:5a:9a:5b:21:f2:c0:79:25:
                    24:b2:b3:71:e4:ea:ac:17:1c:e2:cf:87:d9:85:47:
                    cf:a8:2c:d3:c6:46:7d:30:40:cf:c4:4a:5c:b5:81:
                    fa:ad:3b:08:8a:8c:5e:34:cf:76:73:dd:ea:d5:3b:
                    af:c0:d4:9d:7b:c9:27:8b:d4:dc:11:38:c6:5d:37:
                    b3:e4:5f:61:25:30:a9:7f:15:0c:e3:3e:99:01:be:
                    94:e2:8e:e7:12:18:d3:af:15:a2:43:d6:41:38:f1:
                    50:44:2f:93:74:c2:7b:38:14:ed:c4:86:73:bc:ff:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3D:89:AF:F9:2B:87:DA:40:1F:D4:E0:C4:D2:BA:49:A0:45:28:8D
            X509v3 Authority Key Identifier:
                keyid:6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ee:5b:65:49:6d:a2:3b:24:6e:02:24:13:c2:bc:57:96:06:
         26:67:3e:c1:dc:d6:ee:4b:dd:5a:28:6c:33:9a:12:de:a9:a3:
         21:95:4b:61:b5:9e:06:c2:06:ed:91:d4:d4:63:4c:74:68:81:
         eb:d8:e5:be:7c:6b:4b:88:73:08:28:65:d5:8b:26:eb:0d:c4:
         88:84:90:92:c2:74:9a:10:e1:9b:00:e0:a7:85:d1:06:04:c2:
         1e:20:dd:ad:47:81:8e:36:5f:74:df:ed:aa:48:0d:3e:65:a9:
         a3:9e:1a:50:15:d8:4d:ed:60:2d:c5:ab:cb:97:b6:a3:19:3f:
         c9:4a:f1:4f:aa:46:cf:b0:53:73:b1:33:82:52:d1:14:25:31:
         66:d8:9a:98:24:32:ba:eb:a9:4a:28:92:9f:3d:2f:fd:0d:53:
         78:e2:9d:d3:fe:6b:d1:fa:18:36:71:ee:a5:2f:48:69:20:67:
         07:54:08:49:db:68:15:59:7b:6c:98:23:1b:23:6b:04:ea:80:
         c7:cc:f8:fb:6f:9e:b9:e3:d4:36:12:4f:4c:fc:bb:bf:a3:ad:
         5e:db:6e:5c:db:67:26:38:7b:98:2a:0b:40:4d:5e:7b:4d:6b:
         4f:e0:fc:be:4d:f4:bd:d6:62:64:61:40:5e:08:cd:4b:98:80:
         8d:8f:3c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:46:23 2025 by rpki-client