Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
File:                     BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft (raw, json)
Hash identifier:          9pdNDfmMR3Qf5+bVQ0LUmeugVlq8m60X+q/VHsyGVmU=
Subject key identifier:   EE:80:13:FE:0A:23:2F:CA:A5:53:09:67:8E:22:11:BD:49:5A:2F:7E
Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
Certificate issuer:       /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
Manifest number:          81
Signing time:             Fri 04 Jul 2025 12:06:37 +0000
Manifest this update:     Fri 04 Jul 2025 12:06:36 +0000
Manifest next update:     Fri 11 Jul 2025 12:06:36 +0000
Files and hashes:         1: BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl (hash: q2rVrilUWjp2GaqCvDkHGulLQFluQXV2lSMg2dxiNEg=)
                          2: 536B22D258CF11F0A4B0BC1DC4F9AE02.roa (hash: mvmD2bVYuP9FLTuo/zDCa9iFem+gd8N8t195wsX0F4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl
                          rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
        Validity
            Not Before: Jul  4 12:06:36 2025 GMT
            Not After : Jul 11 12:06:36 2025 GMT
        Subject: CN=6867c3cc-e6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:c7:b2:3c:90:51:fd:ff:cb:70:49:03:14:
                    f2:59:80:c1:3e:f9:fa:4a:c7:c5:d6:db:c0:75:5b:
                    54:db:22:ff:3a:cc:cb:70:77:9c:4b:6a:11:0a:45:
                    fc:f6:22:1b:a5:d4:fa:c6:69:29:d6:33:4f:b2:b7:
                    1e:7c:00:f9:9b:5d:59:d4:e4:84:48:3b:39:3d:60:
                    0c:53:38:7d:3b:da:b6:96:ba:cb:d5:e7:da:1d:19:
                    4a:6e:96:2b:b5:94:65:56:68:03:47:0c:09:00:1b:
                    81:d3:5e:15:47:e2:c7:bd:ac:f6:01:9c:4c:ad:64:
                    7f:aa:6e:98:9e:a5:cc:bf:26:06:78:05:a7:8d:37:
                    26:d0:7f:84:ad:44:42:d1:30:ba:a0:05:db:0b:64:
                    4a:0f:f5:1e:05:b9:70:dd:0d:a0:7e:5b:51:a0:78:
                    9d:ae:89:73:89:cc:b9:6c:e5:7d:31:02:8c:f4:18:
                    14:a1:8b:b5:ad:f6:e1:4c:f4:81:99:7e:d6:c7:a8:
                    3d:dc:21:d2:51:8c:58:d9:67:a0:2a:35:b2:d7:86:
                    c2:f6:f2:3f:83:f9:1a:b4:b6:60:2f:b7:12:f2:9f:
                    dd:8f:45:39:a6:29:ec:22:d1:5e:97:4f:ba:8f:9e:
                    ce:7e:b9:19:e7:d6:93:11:8b:f9:3a:86:d9:b6:66:
                    df:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:80:13:FE:0A:23:2F:CA:A5:53:09:67:8E:22:11:BD:49:5A:2F:7E
            X509v3 Authority Key Identifier:
                keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d1:88:b8:3e:34:19:85:06:96:8d:b4:5f:01:91:2c:2d:fa:
         62:8f:c3:41:46:3d:9b:6a:3a:30:7d:0d:5a:ae:f0:e8:51:b6:
         f4:5b:ea:0f:a0:b1:89:61:bb:f0:3c:3a:b7:cf:21:c1:0a:40:
         30:0e:63:a5:ab:40:bc:25:c5:7f:69:53:a1:60:6f:9b:f4:40:
         06:64:fa:20:bf:fb:dc:f5:75:58:57:b0:e8:54:fb:37:ee:34:
         55:00:fb:04:24:b7:1a:33:51:e7:0d:b8:93:7c:25:48:34:c1:
         6a:67:4a:bf:fa:9e:5d:18:06:18:3f:b0:ef:eb:e8:8c:44:94:
         a4:90:d7:6c:b8:14:59:35:7d:10:fb:51:4c:c6:55:97:66:6a:
         72:8c:db:47:e5:50:34:ed:2b:ca:30:17:d1:41:12:f7:2d:94:
         d9:0f:23:61:21:49:d8:27:e5:cb:b2:b7:ab:d0:ad:c9:6f:f3:
         56:63:13:26:85:17:f2:6a:db:10:ee:af:e9:8d:9f:28:01:ed:
         bb:b8:6c:f8:f7:97:32:a1:fc:b3:71:02:fa:f6:7b:53:50:3e:
         a5:3c:ea:f8:ec:56:fa:97:7f:cb:b8:c9:90:ee:c0:79:e1:15:
         51:0a:4f:01:b9:02:48:e8:68:37:d4:5c:49:13:7a:db:c6:ec:
         1a:4b:6c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:34:52 2025 by rpki-client