Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
File:                     bkVzNIaAMm09remFIV0iZii58Ws.mft (raw, json)
Hash identifier:          qs3qtw9lQKtiLfCad5b4Z5rJ1fHFkSageY85EkiT7WA=
Subject key identifier:   BD:87:A6:21:62:2B:9D:AB:ED:30:E4:CA:0A:E7:48:17:63:30:71:71
Authority key identifier: 6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B
Certificate issuer:       /CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
Manifest number:          DC
Signing time:             Sun 15 Jun 2025 04:43:12 +0000
Manifest this update:     Sun 15 Jun 2025 04:43:11 +0000
Manifest next update:     Sun 22 Jun 2025 04:43:11 +0000
Files and hashes:         1: bkVzNIaAMm09remFIV0iZii58Ws.crl (hash: h1vNh7IcYJM3Ej8eqSDJMkyoBQaDL3WBcLIPSI0SbLA=)
                          2: 47B1ABEA005711EF9DA70542C4F9AE02.roa (hash: GoylksPgamABprAXemlh5qC8IA2EnKvQRHTbupKYReA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl
                          rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0FB, serialNumber=6E4573348680326D3DADE985215D226628B9F16B
        Validity
            Not Before: Jun 15 04:43:11 2025 GMT
            Not After : Jun 22 04:43:11 2025 GMT
        Subject: CN=684e4f5f-f301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:88:83:57:dc:0d:c5:74:20:2c:e5:24:e8:
                    1e:30:da:92:53:29:c0:76:1d:ea:21:78:0e:be:d0:
                    61:6c:d3:f9:8e:02:30:ca:f5:8b:90:2a:68:bc:f4:
                    08:77:99:43:e8:ce:cb:84:cc:c4:07:5e:0e:97:7e:
                    86:49:89:1f:42:99:ea:d1:06:66:3c:a8:d3:0f:8f:
                    1f:1c:1f:de:36:f4:c9:0e:30:68:79:95:4f:da:31:
                    0c:f2:ae:e9:02:3b:e4:a6:26:4f:6c:1d:8f:fb:16:
                    f0:e9:42:f5:0b:6d:e3:af:3e:1a:11:ad:11:b4:02:
                    c6:32:7e:a6:e4:22:bf:fc:4f:53:85:16:e6:08:de:
                    ea:21:a4:5a:96:99:24:50:21:72:9a:d6:20:32:99:
                    22:6f:18:2a:84:b7:6d:1c:cb:91:47:4a:9b:1f:73:
                    9d:cd:c8:18:16:7e:03:4a:1b:81:09:13:e5:e6:41:
                    99:d4:c4:e3:7a:23:88:f2:44:76:e2:1c:4e:44:8d:
                    b3:fa:56:95:17:a9:e8:a9:72:43:b7:c3:72:96:48:
                    8f:ab:2f:f7:a1:71:a4:b7:e6:18:21:ec:30:fd:ba:
                    a7:6d:70:1b:bc:18:ec:90:01:ed:69:0a:4b:a5:c9:
                    ce:ef:09:38:1c:26:78:b7:e8:fa:c2:61:cd:f4:cd:
                    ab:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:87:A6:21:62:2B:9D:AB:ED:30:E4:CA:0A:E7:48:17:63:30:71:71
            X509v3 Authority Key Identifier:
                keyid:6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:80:0a:c4:7a:88:87:70:44:84:bd:08:96:6a:fc:2b:21:4d:
         d1:0c:e6:c6:6c:be:58:86:e2:8e:25:be:c9:fc:a8:23:50:ec:
         5c:f5:ab:8d:13:4d:76:ed:13:54:82:bb:61:32:07:c2:a1:79:
         33:07:90:69:ae:6a:e1:2c:5e:e8:18:93:c8:96:b4:09:45:b8:
         3c:b9:da:40:ed:8f:ab:c9:0a:ef:11:04:53:cd:b6:0a:ff:f3:
         57:04:ec:c9:cc:86:bf:76:5a:4d:f2:cd:51:8a:57:ee:8b:da:
         ec:08:8d:8c:2b:f6:1a:e4:74:fc:47:0a:3d:d2:6d:d4:4d:3f:
         41:58:e2:aa:e9:53:19:aa:57:d3:50:eb:ff:68:5a:88:51:ae:
         41:d4:d8:95:4a:d8:07:d9:4f:e4:f4:e4:da:47:7e:be:d0:c9:
         28:81:f0:8b:ae:81:dd:18:d8:ce:29:15:6a:da:61:6f:8d:e0:
         91:b0:0c:8c:0e:d4:fa:de:c9:8b:6a:46:68:f5:d8:0e:06:ff:
         9e:13:35:5e:97:90:61:5e:b1:56:f7:78:85:cb:e8:6a:03:42:
         60:cf:0d:e1:3f:07:a6:d6:7c:72:4b:b6:98:13:c3:33:cf:9b:
         0c:c6:b4:7d:93:f5:99:25:ec:15:6a:39:48:eb:ea:84:f6:28:
         60:c0:cb:96
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwRkIxMTAvBgNVBAUTKDZFNDU3MzM0ODY4MDMyNkQzREFERTk4NTIxNUQyMjY2
MjhCOUYxNkIwHhcNMjUwNjE1MDQ0MzExWhcNMjUwNjIyMDQ0MzExWjAYMRYwFAYD
VQQDEw02ODRlNGY1Zi1mMzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoIKIg1fcDcV0ICzlJOgeMNqSUynAdh3qIXgOvtBhbNP5jgIwyvWLkCpovPQI
d5lD6M7LhMzEB14Ol36GSYkfQpnq0QZmPKjTD48fHB/eNvTJDjBoeZVP2jEM8q7p
AjvkpiZPbB2P+xbw6UL1C23jrz4aEa0RtALGMn6m5CK//E9ThRbmCN7qIaRalpkk
UCFymtYgMpkibxgqhLdtHMuRR0qbH3OdzcgYFn4DShuBCRPl5kGZ1MTjeiOI8kR2
4hxORI2z+laVF6noqXJDt8NylkiPqy/3oXGkt+YYIeww/bqnbXAbvBjskAHtaQpL
pcnO7wk4HCZ4t+j6wmHN9M2rMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2HpiFi
K52r7TDkygrnSBdjMHFxMB8GA1UdIwQYMBaAFG5FczSGgDJtPa3phSFdImYoufFr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGQi81MDU2QzhCMjAw
NTYxMUVGQTU0RDYxNDBDNEY5QUUwMi9ia1Z6TklhQU1tMDlyZW1GSVYwaVppaTU4
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JrVnpOSWFBTW0wOXJlbUZJVjBpWmlpNThXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTBGQi81MDU2QzhCMjAwNTYxMUVGQTU0RDYxNDBDNEY5QUUwMi9ia1Z6TklhQU1t
MDlyZW1GSVYwaVppaTU4V3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtgArEeoiHcESEvQiWavwrIU3RDObGbL5YhuKOJb7J/KgjUOxc9auN
E0127RNUgrthMgfCoXkzB5BprmrhLF7oGJPIlrQJRbg8udpA7Y+ryQrvEQRTzbYK
//NXBOzJzIa/dlpN8s1Rilfui9rsCI2MK/Ya5HT8Rwo90m3UTT9BWOKq6VMZqlfT
UOv/aFqIUa5B1NiVStgH2U/k9OTaR36+0MkogfCLroHdGNjOKRVq2mFvjeCRsAyM
DtT63smLakZo9dgOBv+eEzVel5BhXrFW93iFy+hqA0Jgzw3hPwem1nxyS7aYE8Mz
z5sMxrR9k/WZJewVajlI6+qE9ihgwMuW
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:07:57 2025 by rpki-client