Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
File:                     BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json)
Hash identifier:          fthDnTydqY0DiRKtIqfydfHXfNj2NznpWWs/r06noxQ=
Subject key identifier:   01:6F:33:D6:77:B4:52:67:E5:13:D2:FA:EB:68:A3:DC:42:EB:E9:56
Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31
Certificate issuer:       /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
Certificate serial:       07FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
Manifest number:          07EE
Signing time:             Sun 10 Aug 2025 21:02:25 +0000
Manifest this update:     Sun 10 Aug 2025 21:02:24 +0000
Manifest next update:     Sun 17 Aug 2025 21:02:24 +0000
Files and hashes:         1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: 4+uF3YOwTL+DHeRN4UcFzMNpbImcflv67+iNocRoioc=)
                          2: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: 7SByllehiBQ/m40nHfrULflQ9saC9b0OPbuO6uvzNcs=)
                          3: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: UAlWYyICZSxgcc4gu4nDjPvk7Se5PSi+jbJb8ttieow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl
                          rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044 (0x7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
        Validity
            Not Before: Aug 10 21:02:24 2025 GMT
            Not After : Aug 17 21:02:24 2025 GMT
        Subject: CN=689908e1-fe02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:23:46:30:fa:b1:0d:93:a6:23:61:de:a1:66:
                    38:ec:e7:24:56:b4:f9:ed:ab:ea:0d:44:3d:6d:0b:
                    63:c0:8a:7f:a8:11:e8:38:bf:55:64:9c:9e:36:7d:
                    2a:80:f3:55:d0:05:57:05:81:ed:51:9d:c1:00:c7:
                    04:b9:97:ec:d0:38:94:44:04:3a:71:ac:9b:64:aa:
                    76:75:2d:49:32:07:89:59:9e:aa:4f:7c:5a:41:3c:
                    72:e3:a2:72:fc:ab:1c:80:e5:6a:66:39:c5:5a:79:
                    5d:dc:eb:b2:8c:13:6f:e8:59:f5:8b:26:3c:23:f0:
                    3a:b7:65:ee:97:16:6b:db:88:a1:44:83:97:88:bb:
                    1e:97:b3:87:ff:62:bc:98:25:b7:64:32:93:f9:4e:
                    80:11:3f:c4:ce:da:3f:e5:82:2a:74:3f:1b:7a:78:
                    18:bd:73:9a:51:24:88:40:89:64:d3:42:b0:75:0d:
                    62:50:78:d3:59:16:e4:05:fe:9f:1e:a9:f8:c9:55:
                    9a:34:ac:74:5f:ac:42:3a:86:1c:5e:ae:7d:ee:d3:
                    ae:1d:b8:36:19:1e:a4:f9:09:8d:e9:e7:65:20:ee:
                    c8:9a:ac:60:be:3f:a9:c5:45:c3:ac:af:13:87:47:
                    3e:f9:fb:17:0f:38:95:17:15:59:dd:4c:47:20:41:
                    18:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6F:33:D6:77:B4:52:67:E5:13:D2:FA:EB:68:A3:DC:42:EB:E9:56
            X509v3 Authority Key Identifier:
                keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:00:19:48:b7:d0:1b:1f:5a:96:84:bf:9e:29:bc:b2:0f:7e:
         f7:a8:42:c0:07:0f:93:50:60:5b:12:7e:26:59:3e:d7:a3:fd:
         b0:40:44:bd:42:10:e0:62:eb:69:93:22:8b:7e:67:d8:f2:7d:
         68:f0:98:f3:93:01:9a:81:08:d3:5e:c3:e2:74:1d:c0:99:da:
         7e:b3:25:53:1e:47:1b:99:04:99:02:6f:e1:d0:71:73:43:c5:
         cf:62:27:46:42:25:7c:40:96:a9:33:54:8d:18:7f:4d:50:6c:
         fc:e1:ec:71:83:5f:50:45:9e:26:0e:92:87:a4:5a:0b:33:5c:
         32:31:4c:b4:42:8c:b9:8f:1f:f8:5a:f7:20:d6:73:8e:ec:f4:
         19:bd:6f:98:5b:f5:8e:f8:5d:b4:70:b4:4f:58:80:b0:23:0e:
         20:bf:23:cb:14:92:4a:2c:da:46:68:f3:20:ae:78:c8:e2:08:
         c4:15:db:0a:d2:16:b5:d5:16:24:0d:71:68:03:8b:8f:1a:8c:
         f4:82:a7:1c:5b:6a:ee:16:cd:b7:fa:af:65:4f:cb:c2:b9:79:
         86:8d:51:c6:58:e6:cf:7e:92:62:da:c8:97:28:b5:aa:ad:da:
         b0:4e:73:3c:da:57:f2:49:ee:58:1f:6b:51:e1:60:78:28:e8:
         b0:ee:4f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:02:20 2025 by rpki-client