Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
File:                     bkVzNIaAMm09remFIV0iZii58Ws.mft (raw, json)
Hash identifier:          u9DwY4gJ+jINKTqKi7pXtG6+DLEmhXxzKmjWw1/v88s=
Subject key identifier:   42:FA:0E:5E:A2:BE:89:EE:1D:80:57:EE:95:3E:A9:F1:8D:AD:95:4E
Authority key identifier: 6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B
Certificate issuer:       /CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
Manifest number:          ED
Signing time:             Sat 19 Jul 2025 05:35:30 +0000
Manifest this update:     Sat 19 Jul 2025 05:35:29 +0000
Manifest next update:     Sat 26 Jul 2025 05:35:29 +0000
Files and hashes:         1: bkVzNIaAMm09remFIV0iZii58Ws.crl (hash: HgAdUKnO6Ah1/dOzGJlu7Vq3vC2/nnedRL5yLw8Tvys=)
                          2: 47B1ABEA005711EF9DA70542C4F9AE02.roa (hash: GoylksPgamABprAXemlh5qC8IA2EnKvQRHTbupKYReA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl
                          rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 05:35:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0FB, serialNumber=6E4573348680326D3DADE985215D226628B9F16B
        Validity
            Not Before: Jul 19 05:35:29 2025 GMT
            Not After : Jul 26 05:35:29 2025 GMT
        Subject: CN=687b2ea1-5fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1b:5a:90:ae:c6:f0:fd:6d:77:8a:2f:62:df:
                    5e:ea:ce:15:76:2c:ca:86:53:93:f7:11:55:d4:e3:
                    b1:83:11:95:d9:17:49:f6:ad:c6:fe:e5:84:e2:6d:
                    2e:74:5d:e0:40:db:21:f8:e6:70:87:a4:12:39:6e:
                    d0:66:da:4a:be:08:d5:96:c4:74:e1:b7:ef:2b:bb:
                    f1:ff:6c:f9:62:4c:63:46:46:32:d9:6f:37:dd:b3:
                    19:c4:d3:d4:9c:c7:33:54:f0:e5:6d:3f:49:28:4a:
                    76:a3:cb:14:81:17:c9:2a:e9:18:5d:45:85:33:0d:
                    90:76:8c:1f:4c:11:97:de:79:bb:80:7a:ed:ba:c2:
                    42:ad:81:cd:41:b8:0b:0d:36:76:a5:de:07:35:66:
                    46:75:d0:b1:37:df:7b:80:70:fe:d3:27:44:d4:52:
                    6a:a0:dc:6c:b8:fd:8d:03:6f:ed:ee:76:66:4d:f9:
                    8f:f9:36:5e:35:8f:8b:77:0c:ce:65:f2:3c:3d:c8:
                    4a:0e:53:00:8d:4c:5d:54:44:29:56:f6:af:28:bc:
                    fc:d0:d4:72:d3:f8:f9:45:5b:89:fd:33:ab:9d:d5:
                    de:7d:be:19:a7:15:83:29:01:d2:b4:c3:71:32:bc:
                    f5:cb:0a:3a:66:fe:5f:b7:e4:92:89:73:4c:cd:43:
                    3d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FA:0E:5E:A2:BE:89:EE:1D:80:57:EE:95:3E:A9:F1:8D:AD:95:4E
            X509v3 Authority Key Identifier:
                keyid:6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:b8:f3:18:fb:ac:2b:d7:72:54:fd:0f:91:c8:b6:3d:d1:18:
         e4:5c:b9:42:f2:bd:6f:5c:7e:62:f8:e3:4a:94:24:19:ab:f7:
         4b:31:a8:21:9a:ed:42:d4:d2:72:29:4f:e8:af:fd:7d:04:60:
         c5:b2:40:0d:d2:39:f2:66:ce:48:43:7f:bd:e3:92:dd:8b:83:
         6d:6a:09:ed:bf:87:37:6d:a0:2c:81:0f:4b:ae:7d:55:50:32:
         87:95:0b:7b:da:50:09:26:ad:25:fb:c4:47:87:76:ac:e9:70:
         f2:a7:aa:7b:8e:21:91:70:00:14:f9:23:15:77:7d:e2:cf:eb:
         9e:68:47:58:bf:b4:26:4a:09:d9:36:7f:67:05:df:89:1b:06:
         a1:cc:7a:75:d4:b7:a3:64:04:99:43:ab:e3:32:13:8a:cc:52:
         8b:3a:6a:5b:52:1c:39:d6:4f:b2:69:f1:27:da:cc:91:82:02:
         8c:b7:ef:17:0f:3a:34:65:8f:29:07:b6:a2:96:cd:3c:ef:15:
         c5:35:5d:42:27:ff:2b:4f:23:79:e1:e5:38:a7:8a:a5:cd:49:
         7c:77:c6:14:71:f4:6d:9d:58:e1:82:2c:c3:00:b4:a1:c3:5d:
         c7:b0:8e:7a:42:22:21:b1:48:4a:34:f1:a4:d6:59:ba:0b:8f:
         18:fa:22:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwRkIxMTAvBgNVBAUTKDZFNDU3MzM0ODY4MDMyNkQzREFERTk4NTIxNUQyMjY2
MjhCOUYxNkIwHhcNMjUwNzE5MDUzNTI5WhcNMjUwNzI2MDUzNTI5WjAYMRYwFAYD
VQQDEw02ODdiMmVhMS01ZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0BtakK7G8P1td4ovYt9e6s4VdizKhlOT9xFV1OOxgxGV2RdJ9q3G/uWE4m0u
dF3gQNsh+OZwh6QSOW7QZtpKvgjVlsR04bfvK7vx/2z5YkxjRkYy2W833bMZxNPU
nMczVPDlbT9JKEp2o8sUgRfJKukYXUWFMw2QdowfTBGX3nm7gHrtusJCrYHNQbgL
DTZ2pd4HNWZGddCxN997gHD+0ydE1FJqoNxsuP2NA2/t7nZmTfmP+TZeNY+LdwzO
ZfI8PchKDlMAjUxdVEQpVvavKLz80NRy0/j5RVuJ/TOrndXefb4ZpxWDKQHStMNx
Mrz1ywo6Zv5ft+SSiXNMzUM9zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEL6Dl6i
vonuHYBX7pU+qfGNrZVOMB8GA1UdIwQYMBaAFG5FczSGgDJtPa3phSFdImYoufFr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGQi81MDU2QzhCMjAw
NTYxMUVGQTU0RDYxNDBDNEY5QUUwMi9ia1Z6TklhQU1tMDlyZW1GSVYwaVppaTU4
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JrVnpOSWFBTW0wOXJlbUZJVjBpWmlpNThXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTBGQi81MDU2QzhCMjAwNTYxMUVGQTU0RDYxNDBDNEY5QUUwMi9ia1Z6TklhQU1t
MDlyZW1GSVYwaVppaTU4V3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZuPMY+6wr13JU/Q+RyLY90RjkXLlC8r1vXH5i+ONKlCQZq/dLMagh
mu1C1NJyKU/or/19BGDFskAN0jnyZs5IQ3+945Ldi4Ntagntv4c3baAsgQ9Lrn1V
UDKHlQt72lAJJq0l+8RHh3as6XDyp6p7jiGRcAAU+SMVd33iz+ueaEdYv7QmSgnZ
Nn9nBd+JGwahzHp11LejZASZQ6vjMhOKzFKLOmpbUhw51k+yafEn2syRggKMt+8X
Dzo0ZY8pB7ails087xXFNV1CJ/8rTyN54eU4p4qlzUl8d8YUcfRtnVjhgizDALSh
w13HsI56QiIhsUhKNPGk1lm6C48Y+iIL
-----END CERTIFICATE-----
Generated at Sun Jul 20 04:46:04 2025 by rpki-client