Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
File:                     BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json)
Hash identifier:          6ngPCChyakIz1wB4S1Ys+7/x26AFiSWuMyGjVrM1xoE=
Subject key identifier:   65:0F:24:D0:97:6B:81:B1:C7:7F:7C:1A:7B:91:C9:0F:C9:39:2F:B2
Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31
Certificate issuer:       /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
Certificate serial:       080F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
Manifest number:          07FF
Signing time:             Mon 08 Sep 2025 20:59:51 +0000
Manifest this update:     Mon 08 Sep 2025 20:59:51 +0000
Manifest next update:     Mon 15 Sep 2025 20:59:51 +0000
Files and hashes:         1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: GtkR7sZZ7T2BDtW0zkso7n9BaStbvfVHu4ACqW6+Ntg=)
                          2: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: M4ZsvutOyCk2s1KYcKAwaMHyjjGJAz91GGFqruJgJoU=)
                          3: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: HmCUmLVw28r2IcR7zzOMBoMlcQpH+3WxtRZQvA+31cE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl
                          rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 20:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2063 (0x80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
        Validity
            Not Before: Sep  8 20:59:51 2025 GMT
            Not After : Sep 15 20:59:51 2025 GMT
        Subject: CN=68bf43c7-b928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:21:87:c0:e1:b0:09:45:f3:50:81:85:6b:
                    e2:72:b8:88:03:ab:4a:09:30:d1:8c:47:7c:54:a8:
                    ce:a0:bf:47:71:cb:03:a9:d5:e2:c3:59:e5:ca:7d:
                    21:f8:7d:f3:d7:79:df:ee:b4:24:00:49:f5:f5:99:
                    9c:56:61:25:0a:e2:9a:30:f5:12:a4:b0:b6:be:18:
                    d1:4b:f8:0f:7e:f6:51:3b:a5:04:b5:b6:58:00:7c:
                    c2:6f:91:58:02:0a:62:8c:96:ec:b3:b1:7b:cf:c2:
                    32:02:08:09:36:83:15:13:d8:45:41:6b:7e:42:7b:
                    30:ce:85:c7:ee:34:ac:82:f3:38:f3:32:3b:16:12:
                    0d:41:f9:b2:19:05:35:f5:9c:6c:54:61:23:43:fe:
                    e1:3b:fa:0f:7f:a5:ba:ae:56:a9:08:92:61:0b:7d:
                    d4:c8:61:50:ce:3c:97:11:06:75:c3:39:4b:4f:3c:
                    e3:19:23:bf:ae:00:55:8c:48:1e:8e:fe:61:a3:60:
                    5b:1e:3b:a3:9c:3c:e4:9a:ab:34:6d:fa:a3:57:80:
                    a1:a9:73:d8:c7:c8:bc:a3:23:76:92:45:75:2e:82:
                    6e:98:fa:dc:86:e0:fb:39:0d:af:8e:59:ca:57:b9:
                    a4:4f:39:17:52:c5:3b:52:ab:07:91:89:8f:80:3e:
                    ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0F:24:D0:97:6B:81:B1:C7:7F:7C:1A:7B:91:C9:0F:C9:39:2F:B2
            X509v3 Authority Key Identifier:
                keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:29:e5:d2:de:1e:41:32:5c:7c:05:5f:e8:2a:b7:01:30:a6:
         25:ce:e7:5b:e5:0a:be:5e:13:74:fd:c7:87:1a:8c:7c:e2:11:
         9c:93:d2:bd:12:5c:95:f6:52:6e:20:74:87:0b:4f:97:3e:44:
         45:60:76:e6:23:6a:30:bd:ca:7b:0c:3c:4d:58:e1:0c:93:67:
         dd:54:92:01:40:9a:5a:ee:9f:f2:68:f4:9a:a3:5d:f2:20:0a:
         c5:d4:f0:44:50:aa:19:a7:8d:d8:da:63:56:52:6c:f1:17:29:
         4f:a2:3d:f4:25:da:e9:1f:6e:78:52:77:21:c5:6a:54:64:e8:
         bd:10:3f:a0:51:0b:5e:98:e9:cb:aa:6c:08:41:e0:3c:6c:f4:
         97:d8:92:86:76:69:bf:26:41:fc:19:a0:91:a7:37:24:6e:1b:
         e9:44:8b:51:76:a7:bf:67:0d:21:81:47:43:f6:03:71:6c:a8:
         fb:20:88:c8:33:cb:1e:1a:b5:09:d0:d5:5d:f2:30:1a:fc:fb:
         58:d1:d7:63:a2:94:50:e3:c8:80:a8:e9:dc:a1:7e:32:0b:b0:
         77:84:59:31:6d:17:fc:9d:04:55:67:08:89:87:0a:27:3e:8f:
         74:f2:8f:23:ea:ce:c0:cb:86:30:ec:61:38:13:86:cb:51:fb:
         8b:03:5e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:22:14 2025 by rpki-client