Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
File:                     btoKR86sX5SQFUbuiaP14i4Zp2I.mft (raw, json)
Hash identifier:          ewWMSHKFoEd5/PVgjAAOGyW5cTYdL9SEV8ZLdHiIR98=
Subject key identifier:   AB:CD:CF:4C:24:6A:3C:B2:88:89:A2:A8:C0:3F:13:76:DD:6A:84:70
Authority key identifier: 6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62
Certificate issuer:       /CN=A913D756/serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
Manifest number:          70
Signing time:             Thu 03 Jul 2025 07:08:59 +0000
Manifest this update:     Thu 03 Jul 2025 07:08:58 +0000
Manifest next update:     Thu 10 Jul 2025 07:08:58 +0000
Files and hashes:         1: btoKR86sX5SQFUbuiaP14i4Zp2I.crl (hash: yO1M+xryU2PxKpyvUygWAN3sRwRnr5JPgWpv9HGZMmc=)
                          2: A90B2F28B1F611EF86337B54C4F9AE02.roa (hash: oosdej6NCKw9+AFZHUWJ0H2pXTiyHE7ZIsFdjEUcWdo=)
                          3: C18E24EEB1F911EF80160911C4F9AE02.roa (hash: IaSXU0hhTqd/kbD/ZDjyAZBXMXMDGHq4FlHzzaXzxz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl
                          rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D756, serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
        Validity
            Not Before: Jul  3 07:08:58 2025 GMT
            Not After : Jul 10 07:08:58 2025 GMT
        Subject: CN=68662c8a-d1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c4:8d:60:dc:62:7e:eb:ab:7f:31:ad:a0:16:
                    dd:09:5a:9f:7c:58:35:85:e8:76:50:b6:27:c5:a7:
                    6f:84:d9:ec:c1:53:f8:96:27:ff:8a:5f:4d:34:3e:
                    64:ce:d1:6b:54:bb:ec:5a:36:0a:b6:3b:d3:7c:16:
                    83:a0:ff:5e:2b:3c:88:10:dd:13:af:5a:2d:2d:a3:
                    52:5c:60:7d:ba:92:fc:57:4e:c0:e2:dc:41:4a:c9:
                    ea:2b:69:9d:91:13:09:d6:a4:98:85:26:5e:51:12:
                    da:1f:e8:f8:c0:6b:38:fa:9d:90:17:a1:88:ec:6d:
                    39:5f:5b:f5:01:df:10:97:8b:e7:40:2c:a8:e4:8d:
                    d6:04:b7:1a:75:f2:50:3e:22:8f:3e:46:46:c3:e6:
                    ae:16:30:2c:95:71:b3:59:84:e3:8a:b8:61:5a:37:
                    5c:6b:b1:0a:8b:2c:c2:5a:59:94:c3:b1:b5:43:79:
                    a9:6b:45:bd:df:44:87:c4:43:04:70:f1:ff:a3:f6:
                    dc:ef:59:86:66:5d:1d:15:30:4c:72:78:0c:da:fc:
                    75:42:bb:a8:51:8f:7f:6a:ec:e0:b9:a2:19:de:4a:
                    3e:c8:e9:af:dc:80:16:a8:6d:fa:99:64:eb:ac:c1:
                    09:0c:4d:96:0a:0f:22:20:8b:bd:aa:a8:3c:2a:69:
                    4e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CD:CF:4C:24:6A:3C:B2:88:89:A2:A8:C0:3F:13:76:DD:6A:84:70
            X509v3 Authority Key Identifier:
                keyid:6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:9f:40:83:3b:da:d2:10:2d:40:9e:ef:fa:f5:4f:fd:67:b2:
         93:1c:f1:30:47:02:49:bd:76:eb:96:43:cd:34:39:55:98:ee:
         29:57:70:87:30:7c:16:8e:df:0a:f0:9a:af:fe:18:67:f1:3b:
         71:91:fc:f1:6e:a6:e2:a6:72:aa:02:88:b1:53:1b:88:2f:d6:
         a1:90:16:c6:2d:14:17:55:b9:26:ec:23:2d:f9:2c:2c:0b:ce:
         ed:33:d2:7a:89:f5:b0:1b:45:fa:ee:7c:87:3a:1d:e5:10:98:
         94:00:ac:18:d8:5a:4e:6f:fc:29:de:6b:d6:8c:63:de:5b:fe:
         ad:c6:cb:78:7b:19:a0:0f:4d:69:ca:f4:3d:89:1d:5f:d5:c1:
         60:03:fe:9b:45:70:4b:5b:38:e8:7e:67:22:ad:14:6f:43:a3:
         f5:53:de:1e:68:4e:62:57:97:72:4f:bc:4b:03:4c:e6:fd:17:
         9e:9f:e9:8c:36:8c:74:b0:7b:0c:e7:0b:81:b8:fe:ef:bd:23:
         49:05:c1:39:85:cc:67:00:3a:a7:b8:ef:25:0a:49:f7:56:b1:
         f6:bb:cc:12:8e:23:a2:e3:d1:e2:00:53:84:34:e8:41:fb:92:
         1c:e1:f1:92:b7:02:21:3f:eb:90:ff:09:aa:cc:88:7f:0f:ec:
         dc:ec:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 03:42:59 2025 by rpki-client