Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
File:                     BKVferOuOZ1PJX1P0omxBYCOXDw.mft (raw, json)
Hash identifier:          uabnNVUi2OnG99Y21GsjD02Tn25WXN6A/id3Uy8D17Y=
Subject key identifier:   17:85:D5:C7:07:A2:BB:C6:0D:F2:57:24:81:64:0E:AA:86:0A:22:27
Authority key identifier: 04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C
Certificate issuer:       /CN=A916002E/serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
Manifest number:          CB
Signing time:             Fri 31 Jan 2025 04:53:48 +0000
Manifest this update:     Fri 31 Jan 2025 04:53:47 +0000
Manifest next update:     Fri 07 Feb 2025 04:53:47 +0000
Files and hashes:         1: BKVferOuOZ1PJX1P0omxBYCOXDw.crl (hash: XapKAEqX9PCehaJ01ZeqsiSAfapTnCb+OYxYE0lxweM=)
                          2: F9B8A0AEB04911EE98449A2BC4F9AE02.roa (hash: 6nhFCqUXqKqSoCa+j+Sz88JngdLOIlW2MSoV2XpyvzY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916002E/serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C
        Validity
            Not Before: Jan 31 04:53:47 2025 GMT
            Not After : Feb  7 04:53:47 2025 GMT
        Subject: CN=679c575b-fdb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:52:b2:71:da:05:2a:bc:d4:52:0f:8b:0f:
                    bc:1c:9d:bd:30:fe:60:2d:b0:de:7f:9d:70:a1:88:
                    9a:30:29:99:6e:3e:6f:4c:9e:ac:9e:1b:64:1b:a7:
                    e9:83:f9:7d:5e:4b:f4:39:06:9f:77:5f:3c:21:57:
                    12:d7:e6:73:84:2d:85:61:26:b0:3f:a4:6f:c3:e0:
                    15:27:80:97:44:10:4e:28:49:a9:50:22:cd:93:97:
                    7e:4e:4c:dd:5c:d8:04:6e:c7:d0:f1:39:aa:2c:14:
                    10:1c:51:40:c1:a0:fd:49:10:6a:af:b3:73:b2:18:
                    b4:2e:d6:0d:7c:bb:8f:05:d0:7d:0e:1f:24:88:95:
                    6e:25:88:7c:47:97:3c:fb:86:da:a5:9d:2f:42:8e:
                    94:48:35:55:6d:36:36:8e:b3:ce:3b:cf:a1:6c:9d:
                    b6:b8:28:b6:64:cb:e1:5c:e5:90:f0:29:18:62:3b:
                    62:54:44:fb:12:c1:11:12:02:f4:24:44:30:a6:cb:
                    39:88:dc:a4:be:73:8a:97:4d:a4:ee:83:c6:b6:79:
                    99:d1:15:5f:37:cc:fc:d2:53:fe:9c:8d:02:13:ae:
                    00:2c:6e:b7:49:04:fb:10:cd:31:c3:96:55:0a:50:
                    3e:bd:39:fd:eb:41:23:cb:99:ec:55:7c:26:72:8c:
                    30:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:85:D5:C7:07:A2:BB:C6:0D:F2:57:24:81:64:0E:AA:86:0A:22:27
            X509v3 Authority Key Identifier:
                keyid:04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8e:a9:88:90:e0:7b:08:1c:f9:90:32:c2:91:6c:a5:da:fd:
         b7:75:a3:b2:86:23:6c:fe:2d:4a:c3:bc:91:6b:f7:b2:d5:99:
         db:68:05:23:5f:9e:22:c6:c0:63:7f:b7:8f:2f:83:31:07:37:
         a1:6b:0a:60:8b:64:5f:0e:82:d7:1f:c1:32:41:6f:d5:fa:ac:
         08:e3:e5:3d:d0:ef:c9:7d:e7:04:b9:b9:c7:c4:d2:59:b1:27:
         c4:30:cd:5c:e8:8a:72:9d:2c:dd:da:57:91:37:12:62:9a:02:
         7b:8f:47:4c:ba:89:3f:9b:9c:15:1d:d3:d0:b2:7e:2e:6f:8c:
         f5:ad:00:c7:5c:69:ae:f5:b8:61:16:d5:42:d0:28:af:09:30:
         32:4a:9f:c5:f6:69:5e:51:8d:4b:01:6f:18:aa:84:6b:3e:7c:
         e8:da:50:46:86:ac:24:16:7e:b5:f8:b7:7f:2a:e4:60:4b:7f:
         a8:3e:7a:fa:13:d5:78:08:5b:ce:43:da:f4:8f:a1:63:d9:11:
         19:a8:ae:14:b9:da:f7:6f:32:a4:ed:ef:3c:98:fe:3a:70:c6:
         9b:fe:0b:e4:b2:50:cb:39:08:ee:75:35:0c:26:48:7b:71:67:
         c6:a5:3c:3e:41:74:f4:13:c2:b8:94:ba:5b:23:aa:c9:b1:14:
         e7:a2:64:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:36:56 2025 by rpki-client