Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
File:                     BKVferOuOZ1PJX1P0omxBYCOXDw.mft (raw, json)
Hash identifier:          4gIDIrlo3LsBHvp0oS4j88C0HQ6vXAX9jPem74oUUlQ=
Subject key identifier:   2D:74:7C:EC:BB:DB:E6:44:22:FA:50:8A:21:CD:9A:02:F3:0D:CE:F9
Authority key identifier: 04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C
Certificate issuer:       /CN=A916002E/serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C
Certificate serial:       010A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
Manifest number:          0104
Signing time:             Thu 15 May 2025 04:29:07 +0000
Manifest this update:     Thu 15 May 2025 04:29:07 +0000
Manifest next update:     Thu 22 May 2025 04:29:07 +0000
Files and hashes:         1: BKVferOuOZ1PJX1P0omxBYCOXDw.crl (hash: Dz3/19EBuxuSHrcXVilddX9+zahcccxAjB+502u/imI=)
                          2: F9B8A0AEB04911EE98449A2BC4F9AE02.roa (hash: K1vHSv3K4UpAg/heoh8ddgfPtcSWtBerkM6jq/2Qdbc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl
                          rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 04:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916002E, serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C
        Validity
            Not Before: May 15 04:29:07 2025 GMT
            Not After : May 22 04:29:07 2025 GMT
        Subject: CN=68256d93-846f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:40:04:ac:a1:2d:6d:d1:a7:e9:59:cf:76:7f:
                    b9:7b:f1:a8:79:0e:7d:66:2a:ee:06:e9:95:e9:54:
                    f7:6b:e3:00:14:fd:04:70:f1:4c:94:f1:0f:bc:ad:
                    d0:fa:a6:12:5f:01:04:a1:25:2a:76:bf:f8:00:96:
                    f5:cf:9c:a9:b5:d7:98:5c:03:ba:2f:d0:54:db:1b:
                    ee:fd:d8:2e:5f:61:cd:f7:3b:49:fb:26:3b:5a:57:
                    3f:30:13:27:37:cf:02:77:b3:07:12:a6:7e:f2:eb:
                    a9:4c:40:71:dc:a6:f8:ef:60:79:f9:0e:90:af:5a:
                    89:33:7d:3e:68:8d:60:51:f1:12:ec:1d:c3:09:ed:
                    a3:ce:ed:06:f1:70:4a:50:d7:98:04:be:12:12:60:
                    38:63:30:e9:8e:cb:d7:8a:8f:8a:2a:eb:55:87:e6:
                    00:7a:c1:5e:c9:43:20:6d:76:f3:ee:bd:45:f3:fb:
                    dd:98:ba:3e:de:ec:62:25:9f:26:b9:63:74:23:2b:
                    66:81:8b:64:62:cf:55:0a:e0:a0:8b:ac:13:fe:c0:
                    04:92:7e:d9:57:1e:4d:79:47:82:54:7f:d5:7a:5f:
                    d8:a8:9e:3a:b0:c2:c5:5a:51:5f:44:97:76:cb:ba:
                    41:0b:43:6d:92:c9:d6:27:e8:e4:01:d2:66:bb:94:
                    aa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:74:7C:EC:BB:DB:E6:44:22:FA:50:8A:21:CD:9A:02:F3:0D:CE:F9
            X509v3 Authority Key Identifier:
                keyid:04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:43:73:79:d4:21:90:3a:13:ac:ff:ea:ee:c1:ca:70:2d:ba:
         66:ff:7a:49:2c:65:a6:73:73:3d:14:35:05:e6:88:ea:bd:d4:
         e2:3b:4a:ba:db:f0:c9:97:8b:31:1c:e2:42:cd:ca:e5:c6:5c:
         b4:de:d8:9b:1c:11:91:8a:56:f9:5b:d5:7b:35:cd:89:82:f0:
         9f:81:91:70:c6:cf:c0:6a:e6:ae:40:59:f4:76:9b:d9:d4:6b:
         4a:5d:3f:ef:cf:8e:40:f1:c1:fc:48:57:b6:74:70:c1:b4:ed:
         e7:14:88:13:0c:79:e5:e6:40:e4:1f:54:e2:b8:5b:6a:d5:7b:
         a5:d6:40:15:89:01:38:a8:8d:b6:47:d6:a8:e6:86:f3:df:93:
         10:7a:37:24:86:d4:4c:b9:0e:db:24:fc:49:1b:a5:19:c5:4b:
         a7:66:91:fb:c3:c4:52:08:0a:38:f1:90:5a:39:45:24:a7:65:
         95:ed:66:f5:a9:f0:04:5f:ec:49:da:c7:a3:78:1f:d1:bb:96:
         ad:b8:f1:5e:86:e9:71:4f:28:46:bb:60:e1:c9:dc:bb:05:85:
         65:61:c9:1e:7a:ee:a7:8b:12:d8:2c:a1:0e:43:d4:ce:26:c6:
         96:4c:66:7c:ef:ba:17:0e:f3:ed:11:7f:58:ad:72:e5:d8:55:
         cf:b1:72:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 11:21:35 2025 by rpki-client