Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
File:                     BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json)
Hash identifier:          GFmbZXfb8TzMd1CE3PF/PLHXA6thSfekI3yqaeiLMEs=
Subject key identifier:   28:00:58:A1:CF:C5:DD:D0:3D:07:B4:D8:29:26:6D:82:5B:EB:3B:3C
Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31
Certificate issuer:       /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
Certificate serial:       0802
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
Manifest number:          07F4
Signing time:             Fri 22 Aug 2025 21:07:55 +0000
Manifest this update:     Fri 22 Aug 2025 21:07:54 +0000
Manifest next update:     Fri 29 Aug 2025 21:07:54 +0000
Files and hashes:         1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: a2mRWvTGe8txAV9ngU7C1H6Mxiar5CJuooEm7Sw9Fv4=)
                          2: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: 7SByllehiBQ/m40nHfrULflQ9saC9b0OPbuO6uvzNcs=)
                          3: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: UAlWYyICZSxgcc4gu4nDjPvk7Se5PSi+jbJb8ttieow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl
                          rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2050 (0x802)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
        Validity
            Not Before: Aug 22 21:07:54 2025 GMT
            Not After : Aug 29 21:07:54 2025 GMT
        Subject: CN=68a8dc2a-17f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:a0:8e:41:70:28:c8:44:3a:f9:12:1b:ac:
                    08:5f:35:67:04:22:1c:fc:47:8c:98:6c:cc:9d:d7:
                    f9:83:26:56:f2:b1:5c:83:90:6e:8c:76:e9:81:c6:
                    90:f1:7b:7a:32:62:8c:d2:11:a9:93:67:6d:bd:c7:
                    48:50:5a:a2:96:87:36:f5:e3:df:10:c6:d2:ec:42:
                    30:69:75:32:22:71:48:af:a3:2b:18:0b:08:85:84:
                    49:89:76:9d:ed:28:d4:8f:43:c4:52:04:5f:b3:b8:
                    d9:f2:88:ec:8e:35:3c:94:3b:56:ba:20:7c:73:e3:
                    aa:eb:fc:30:a7:b3:74:8c:7a:24:17:f9:b8:e0:fd:
                    02:a2:e2:ad:df:a8:9f:3e:50:60:d7:bb:53:16:c7:
                    51:66:96:a2:8b:85:3a:ef:57:83:01:78:80:04:21:
                    94:81:0b:c0:e7:60:6a:e2:3d:24:52:2e:a6:26:ba:
                    cc:e6:b7:9c:73:ad:f6:07:7e:18:9f:22:fc:6d:f1:
                    04:c3:47:3c:b6:ae:fb:f2:80:7b:20:ae:de:34:3e:
                    e6:b6:d0:c8:6f:19:fb:08:d2:32:eb:b2:b2:a9:4a:
                    fd:60:4a:b8:c6:c5:49:43:b2:96:5d:18:6b:cf:92:
                    e1:b5:ac:64:c7:d2:ab:99:dc:06:d8:e0:1c:6d:04:
                    5b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:00:58:A1:CF:C5:DD:D0:3D:07:B4:D8:29:26:6D:82:5B:EB:3B:3C
            X509v3 Authority Key Identifier:
                keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:dc:ce:95:cb:c4:8a:61:4b:0e:f7:6a:f9:87:ed:04:51:b1:
         2c:6f:b3:79:f9:86:12:38:58:5a:85:96:3b:ee:7d:19:e6:5c:
         d7:ef:ac:58:d6:e0:a1:ee:03:fa:6a:42:a1:22:66:c3:35:b3:
         6c:5a:b3:e0:6a:99:11:1c:80:dd:ae:da:8b:e9:90:a7:17:e7:
         f1:c8:39:97:b8:c7:db:3d:a3:0a:03:cb:f2:b5:03:f9:fd:2e:
         08:b2:da:0a:f4:3d:44:86:25:d1:3d:71:a4:75:30:b0:9e:9c:
         14:ca:9a:ee:41:b4:5c:64:2d:03:f5:d6:2c:8b:f1:20:45:97:
         a5:52:59:ed:d4:d3:bc:8f:f9:52:9b:6e:8f:21:7c:e9:da:a1:
         e6:b3:4a:55:f8:50:45:67:83:97:8d:63:3d:19:34:50:91:3e:
         00:96:85:d4:12:e9:6e:55:f5:e7:28:0e:43:83:be:50:4e:19:
         fe:b9:76:18:da:d7:eb:12:0d:59:c2:21:c3:d0:5b:8c:9e:9b:
         dc:58:53:8a:58:68:cb:d9:72:c7:e3:43:68:97:a5:24:8e:60:
         28:38:f4:99:b4:89:86:e7:67:cd:ed:ca:b9:b0:a2:92:3c:e2:
         72:f7:b4:88:ac:00:64:da:f5:45:2c:1c:71:ab:27:27:5b:25:
         21:b7:6c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:26:45 2025 by rpki-client