Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
File:                     BKVferOuOZ1PJX1P0omxBYCOXDw.mft (raw, json)
Hash identifier:          kIKXU+fjHku44ogQotTE3aH6UnfxuySVL/T8HERSlt8=
Subject key identifier:   F3:7C:75:E6:DD:74:5B:2C:74:E5:11:5F:DC:8B:10:52:8D:2B:11:E7
Authority key identifier: 04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C
Certificate issuer:       /CN=A916002E/serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
Manifest number:          F7
Signing time:             Sun 27 Apr 2025 04:08:21 +0000
Manifest this update:     Sun 27 Apr 2025 04:08:21 +0000
Manifest next update:     Sun 04 May 2025 04:08:21 +0000
Files and hashes:         1: BKVferOuOZ1PJX1P0omxBYCOXDw.crl (hash: okz2WK7+YXHHnq8aA+fEOPEkxhcJdZBmHQp3cHIAX6Y=)
                          2: F9B8A0AEB04911EE98449A2BC4F9AE02.roa (hash: 6nhFCqUXqKqSoCa+j+Sz88JngdLOIlW2MSoV2XpyvzY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl
                          rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916002E, serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C
        Validity
            Not Before: Apr 27 04:08:21 2025 GMT
            Not After : May  4 04:08:21 2025 GMT
        Subject: CN=680dadb5-1106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:21:40:f8:fe:50:18:16:4a:24:47:4a:59:d1:
                    97:d7:2d:21:4f:22:53:f5:d1:a1:e3:2f:a3:c6:1f:
                    cb:65:e7:02:f6:c3:2b:94:89:89:9e:4c:22:03:90:
                    96:35:5f:73:62:dc:8a:8f:4c:b4:9d:fd:b3:d5:2b:
                    3e:cc:41:bf:88:30:df:05:44:00:fa:04:de:48:95:
                    e9:08:7c:50:a7:b9:22:62:c3:66:1e:53:23:ef:ca:
                    94:34:8a:81:ca:65:2f:84:e6:b0:58:48:43:25:e1:
                    aa:47:2e:9e:74:79:52:ca:35:6a:83:1d:2b:e8:72:
                    cb:fd:b4:fe:83:37:ea:75:26:79:0c:9c:3c:50:3a:
                    4d:8c:24:d4:cd:fe:ed:04:7d:b9:bc:8c:fe:f3:ed:
                    6a:e7:02:27:28:49:b8:45:1d:4c:68:11:e0:de:96:
                    3c:7b:e4:db:1d:b0:0e:a7:2d:46:e6:3f:f3:41:8b:
                    fe:26:fd:f5:12:ee:7c:17:da:8c:44:5b:24:4e:b7:
                    0e:02:d3:ff:f4:d0:0b:91:b9:ad:22:77:01:6b:5a:
                    20:44:c8:fd:57:4d:ea:44:f4:85:7b:62:9a:9b:91:
                    96:26:24:81:7c:9d:74:24:d8:7a:e8:ea:e9:bb:b6:
                    9a:a3:f6:ad:2c:c7:30:82:e1:61:2a:66:77:cf:55:
                    db:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7C:75:E6:DD:74:5B:2C:74:E5:11:5F:DC:8B:10:52:8D:2B:11:E7
            X509v3 Authority Key Identifier:
                keyid:04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:44:a9:08:18:4c:05:ba:82:ed:b6:30:a1:db:bd:dd:c4:2a:
         02:bc:a8:b4:ee:34:51:8c:8e:47:1b:29:6b:6b:7f:c2:b5:75:
         2e:76:f5:80:34:0c:55:9a:f9:5b:a4:9f:76:8e:dc:97:2b:12:
         be:20:6f:dc:2e:fc:d1:1f:c1:05:2b:c3:c8:e0:e3:20:9c:f2:
         96:d4:bc:d9:68:ba:78:37:bd:bf:83:67:d9:f7:ce:1d:0c:51:
         e6:b9:ee:a8:0d:e1:90:6a:97:f4:d4:c3:95:d7:0b:10:5f:be:
         f2:77:59:2b:1d:74:90:42:a3:44:59:f1:5f:6a:f5:33:ba:f5:
         6a:ee:84:ed:bc:19:5d:e4:46:49:94:a0:f0:c4:89:87:7b:40:
         17:f3:3c:57:0c:9e:08:e2:a8:01:a4:9d:03:a7:e0:32:50:c9:
         ec:64:9d:e7:15:5b:d0:32:dc:7b:26:e3:a1:19:74:c5:30:30:
         66:5c:38:67:b4:db:40:07:b4:0b:8f:5e:cb:81:f5:e8:66:2b:
         1f:1b:6e:ed:f3:dd:4d:0d:a1:79:1e:d4:a8:9d:71:c2:52:8a:
         f8:83:6b:7e:c9:78:cd:6d:51:d8:84:49:36:3e:ab:01:f4:00:
         29:9b:19:d6:b3:e8:02:70:8e:fd:7c:8f:cf:a7:d7:a9:3e:69:
         94:c2:f6:a5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjAwMkUxMTAvBgNVBAUTKDA0QTU1RjdBQjNBRTM5OUQ0RjI1N0Q0RkQyODlCMTA1
ODA4RTVDM0MwHhcNMjUwNDI3MDQwODIxWhcNMjUwNTA0MDQwODIxWjAYMRYwFAYD
VQQDEw02ODBkYWRiNS0xMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5iFA+P5QGBZKJEdKWdGX1y0hTyJT9dGh4y+jxh/LZecC9sMrlImJnkwiA5CW
NV9zYtyKj0y0nf2z1Ss+zEG/iDDfBUQA+gTeSJXpCHxQp7kiYsNmHlMj78qUNIqB
ymUvhOawWEhDJeGqRy6edHlSyjVqgx0r6HLL/bT+gzfqdSZ5DJw8UDpNjCTUzf7t
BH25vIz+8+1q5wInKEm4RR1MaBHg3pY8e+TbHbAOpy1G5j/zQYv+Jv31Eu58F9qM
RFskTrcOAtP/9NALkbmtIncBa1ogRMj9V03qRPSFe2Kam5GWJiSBfJ10JNh66Orp
u7aao/atLMcwguFhKmZ3z1XbPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPN8debd
dFssdOURX9yLEFKNKxHnMB8GA1UdIwQYMBaAFASlX3qzrjmdTyV9T9KJsQWAjlw8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDAyRS9GMjg3RDMwQUIw
MTExMUVFQkM1ODY5NjRDNEY5QUUwMi9CS1ZmZXJPdU9aMVBKWDFQMG9teEJZQ09Y
RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JLVmZlck91T1oxUEpYMVAwb214QllDT1hEdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDAyRS9GMjg3RDMwQUIwMTExMUVFQkM1ODY5NjRDNEY5QUUwMi9CS1ZmZXJPdU9a
MVBKWDFQMG9teEJZQ09YRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAiRKkIGEwFuoLttjCh273dxCoCvKi07jRRjI5HGylra3/CtXUudvWA
NAxVmvlbpJ92jtyXKxK+IG/cLvzRH8EFK8PI4OMgnPKW1LzZaLp4N72/g2fZ984d
DFHmue6oDeGQapf01MOV1wsQX77yd1krHXSQQqNEWfFfavUzuvVq7oTtvBld5EZJ
lKDwxImHe0AX8zxXDJ4I4qgBpJ0Dp+AyUMnsZJ3nFVvQMtx7JuOhGXTFMDBmXDhn
tNtAB7QLj17LgfXoZisfG27t891NDaF5HtSonXHCUor4g2t+yXjNbVHYhEk2PqsB
9AApmxnWs+gCcI79fI/Pp9epPmmUwval
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net