Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
File:                     BKVferOuOZ1PJX1P0omxBYCOXDw.mft (raw, json)
Hash identifier:          q+X3iMJVpG/5hFyQYgcH45GYCPrx6CIKxYPnd2JSr8s=
Subject key identifier:   6F:60:05:B6:10:EB:79:89:93:C0:AE:3A:F7:EB:C3:CB:2C:8D:C4:E9
Authority key identifier: 04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C
Certificate issuer:       /CN=A916002E/serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
Manifest number:          011C
Signing time:             Thu 03 Jul 2025 05:01:44 +0000
Manifest this update:     Thu 03 Jul 2025 05:01:43 +0000
Manifest next update:     Thu 10 Jul 2025 05:01:43 +0000
Files and hashes:         1: BKVferOuOZ1PJX1P0omxBYCOXDw.crl (hash: Wuzbn4657Lfjnk5Cg8pJWUtlaGfeSVmTJRNgMQoYrp4=)
                          2: F9B8A0AEB04911EE98449A2BC4F9AE02.roa (hash: K1vHSv3K4UpAg/heoh8ddgfPtcSWtBerkM6jq/2Qdbc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl
                          rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916002E, serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C
        Validity
            Not Before: Jul  3 05:01:43 2025 GMT
            Not After : Jul 10 05:01:43 2025 GMT
        Subject: CN=68660eb7-405f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:a6:b8:f6:42:63:51:83:90:4f:f9:f0:5e:
                    03:f5:2c:bc:a8:a2:ae:65:4e:f9:a5:1d:fa:2a:f7:
                    d2:b1:bf:cf:e9:19:5d:f2:21:5b:b7:ae:9d:ae:5f:
                    3a:ee:00:c1:86:b1:08:c2:4f:ed:6b:05:81:65:45:
                    f1:dc:eb:a7:ca:e7:7d:1e:a0:b3:6f:d9:d2:54:06:
                    e3:98:21:ff:0c:78:93:da:3c:3d:05:d5:74:43:93:
                    8e:a5:81:00:82:8b:f0:56:b8:41:4e:d6:22:4e:0e:
                    7d:fb:12:8f:82:b2:29:bb:6a:24:67:62:bb:ec:3b:
                    f9:75:60:bd:ee:c0:f3:b9:2a:6f:71:b6:0b:1c:6b:
                    36:a4:2d:b2:d8:68:ad:39:4b:d1:a7:57:aa:9a:b9:
                    1f:ae:f5:83:d6:03:39:50:34:8b:4f:8f:e2:fa:75:
                    c6:c1:03:18:14:e6:84:46:ee:ec:2c:e3:b2:09:bf:
                    c6:da:94:35:47:53:0e:50:bf:c1:df:32:d7:e0:be:
                    86:ed:21:2a:e0:6b:c6:4f:e6:6a:b8:a7:0e:4c:22:
                    f8:03:3a:67:5c:f9:32:1a:03:47:68:73:28:fa:da:
                    f4:b6:50:86:c0:aa:6d:34:a6:3b:60:64:d1:93:eb:
                    53:1d:1c:42:d5:91:c1:34:f9:39:4f:6b:2a:4f:a6:
                    e2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:60:05:B6:10:EB:79:89:93:C0:AE:3A:F7:EB:C3:CB:2C:8D:C4:E9
            X509v3 Authority Key Identifier:
                keyid:04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:77:ff:9b:9c:3e:dc:ed:8c:88:07:f9:2f:25:29:0a:da:62:
         3b:d0:0b:0d:6c:45:30:14:d7:14:bf:2c:71:94:10:1c:a3:b1:
         c1:a4:4f:c7:5e:5f:a7:a3:71:50:67:01:ec:61:5f:a4:10:c6:
         c1:2c:d6:7f:79:51:20:f6:c0:f9:42:0f:81:da:bd:54:6a:f4:
         07:af:1d:41:74:15:fb:ff:57:44:88:bf:52:d5:e3:8d:21:36:
         c3:e8:71:e3:b2:a8:f4:cd:d1:86:06:e3:c9:04:da:18:99:53:
         10:54:d4:a6:60:94:6c:51:de:81:5f:a3:f1:04:ac:c8:a9:46:
         ea:6e:42:35:88:fb:49:ec:39:1d:d3:02:f5:2e:b0:2e:06:3d:
         4e:ce:8e:1d:fa:94:61:15:35:90:7c:f3:d1:91:f7:b4:79:24:
         d7:73:8b:da:28:c6:65:b1:b7:ae:2e:e2:5f:b5:5b:34:17:f4:
         94:8c:ee:1e:ee:7b:e9:24:48:4c:2f:b1:45:1d:59:b9:8c:95:
         b8:a0:eb:dd:1c:df:0e:ba:7a:e8:46:38:74:a2:28:40:42:73:
         45:05:70:b0:da:2c:5e:a3:fb:4c:ec:a1:62:9c:f6:e4:49:17:
         ac:99:39:7d:ef:22:00:72:dd:b1:55:41:22:97:8a:65:89:34:
         6d:37:13:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:38:07 2025 by rpki-client