Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
File:                     BKVferOuOZ1PJX1P0omxBYCOXDw.mft (raw, json)
Hash identifier:          BqoC8RVAYT9HwT3h9/NpfUjEI5yZIzfUi5YodNWfTKE=
Subject key identifier:   7C:58:DC:4E:70:93:59:E6:40:F8:06:9D:96:98:6B:5F:02:3D:F6:0E
Authority key identifier: 04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C
Certificate issuer:       /CN=A916002E/serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
Manifest number:          014F
Signing time:             Tue 07 Oct 2025 04:34:11 +0000
Manifest this update:     Tue 07 Oct 2025 04:34:11 +0000
Manifest next update:     Tue 14 Oct 2025 04:34:11 +0000
Files and hashes:         1: BKVferOuOZ1PJX1P0omxBYCOXDw.crl (hash: OpF5lGZmjHsN8UQYkWQ/LT7bunuj4duzO7kGdz7Tlx0=)
                          2: F9B8A0AEB04911EE98449A2BC4F9AE02.roa (hash: SZ9uoMEMlq4iFEPfCrqpoW/pO5RpEBqkp89YOfJH9e0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl
                          rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Oct 2025 04:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916002E, serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C
        Validity
            Not Before: Oct  7 04:34:11 2025 GMT
            Not After : Oct 14 04:34:11 2025 GMT
        Subject: CN=68e49843-0d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:cd:7a:c0:26:5e:f0:48:68:d5:64:66:3c:
                    e7:98:2a:c7:81:22:0d:01:62:de:64:fc:91:ad:e9:
                    46:3f:cc:3f:91:4e:33:27:0e:8a:38:3f:67:12:6c:
                    de:79:15:7a:13:89:aa:8e:0f:d3:be:95:b0:40:dd:
                    8a:ec:50:56:ee:3a:68:8e:d3:29:ac:7c:26:e4:3a:
                    af:d6:f7:95:6f:ef:a4:7f:cb:ea:10:8b:fd:1a:07:
                    af:d9:8f:cd:58:61:51:b1:bf:62:b6:13:2d:fe:af:
                    e4:b2:26:ee:c6:36:f9:ea:34:58:58:e2:76:e9:50:
                    bc:72:b4:e8:16:d5:7b:eb:d1:9f:69:4d:fd:ed:8b:
                    89:a5:4f:2d:2f:76:a1:82:b1:92:06:8d:2d:62:61:
                    8d:84:64:d0:68:48:0b:89:86:e7:63:1f:44:f5:d0:
                    ad:6b:bb:54:97:c0:02:e6:ef:45:1c:99:12:0d:9a:
                    17:f0:70:11:a6:37:4c:07:c3:4c:a5:f4:be:06:67:
                    db:9c:88:53:25:59:84:c0:9d:39:1f:ae:85:e8:8d:
                    c5:f6:06:fc:ec:ae:fd:a3:28:ef:38:b2:2d:9d:40:
                    e9:25:79:05:25:9a:25:d7:96:fa:1f:6c:b8:5a:aa:
                    42:9a:13:3c:20:89:bd:03:97:cc:ee:30:5e:16:0e:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:58:DC:4E:70:93:59:E6:40:F8:06:9D:96:98:6B:5F:02:3D:F6:0E
            X509v3 Authority Key Identifier:
                keyid:04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:89:95:1f:d2:d1:a7:02:34:aa:00:70:82:55:3f:85:92:c7:
         31:c9:70:e9:d2:ee:fb:1a:32:7f:54:af:2f:a3:78:33:9d:8c:
         93:7c:73:8a:7d:61:6c:11:cf:30:e5:01:ea:b9:1b:8d:e5:f5:
         58:5c:be:ea:6f:f2:71:60:85:02:66:2f:8b:17:79:91:69:72:
         94:e8:dc:dd:e7:37:c8:55:64:e3:8d:d3:4b:6d:03:e6:0c:6b:
         14:5f:81:e7:74:d4:df:34:35:a2:ba:17:16:06:05:75:c5:d7:
         61:1e:4d:44:55:4a:20:cb:ea:1a:63:56:c7:29:59:c1:1f:b2:
         0e:3c:f5:c8:b4:63:c5:07:fd:d2:3c:17:c0:7a:7e:64:f7:f6:
         de:66:a7:27:f7:c1:ef:0a:04:18:89:9f:f7:6d:51:ab:3a:36:
         87:b0:c8:09:31:68:45:da:c7:89:a0:4a:13:18:b7:19:6c:dd:
         cd:e1:3e:d9:ac:8b:f4:58:76:50:62:b9:b4:04:66:d0:b0:df:
         e2:78:f2:0e:e4:03:25:23:8c:f6:7d:ef:f9:65:51:40:d9:2c:
         32:5e:ea:ff:18:bb:67:fb:43:a7:a7:66:a3:b4:83:8f:43:0c:
         08:25:65:1a:10:93:c6:a4:e9:66:34:fe:d4:76:de:45:06:08:
         fd:b3:aa:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 02:03:11 2025 by rpki-client