Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
File:                     51IOJIn_YDiw2HmwRxcPnFGs984.mft (raw, json)
Hash identifier:          XKrRWAhPER5ISFrw1iKaEUghPpWHzpBVpuicGchYZg4=
Subject key identifier:   A7:3E:E3:DC:52:8E:01:32:D7:9C:C1:76:45:3D:FE:B7:77:8F:2F:77
Authority key identifier: E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE
Certificate issuer:       /CN=A912127A/serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
Manifest number:          01C8
Signing time:             Sat 05 Apr 2025 02:28:47 +0000
Manifest this update:     Sat 05 Apr 2025 02:28:47 +0000
Manifest next update:     Sat 12 Apr 2025 02:28:47 +0000
Files and hashes:         1: 51IOJIn_YDiw2HmwRxcPnFGs984.crl (hash: 5wHGFXS3Kn8gozZrnEa147dc+h6nRJ7lec3gycYhaKM=)
                          2: 27C38AF4C0C111EE84A55128C4F9AE02.roa (hash: wIZlMBid+1P+5GWXEfhaHDavI2pP5RgKD6YPhcbCvPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl
                          rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:28:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912127A
        Validity
            Not Before: Apr  5 02:28:47 2025 GMT
            Not After : Apr 12 02:28:47 2025 GMT
        Subject: CN=67f0955f-12b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c9:a6:d1:38:46:72:99:b4:d8:2a:e2:29:c9:
                    a5:e2:87:89:8d:0d:a1:0e:6e:4f:d3:d6:54:e5:b8:
                    27:e3:c9:5a:78:0c:66:1b:80:d2:8f:61:72:51:12:
                    0d:9d:d8:f3:79:8e:88:d8:9a:bf:cc:09:65:f4:95:
                    67:1a:6b:a6:88:6f:eb:7f:15:1f:37:2a:64:dd:31:
                    5e:31:dd:2e:d6:45:db:da:3d:1e:ee:3c:b7:00:6d:
                    76:d3:2d:40:ed:b8:8b:e0:92:10:3d:90:16:07:ef:
                    fb:fe:22:bc:8b:9b:cb:0d:e5:b1:ad:a9:0b:46:5a:
                    60:31:2a:4a:b0:57:42:b8:2c:6a:04:67:cf:c7:d5:
                    b1:3e:bc:15:2b:93:6f:a3:f7:13:ea:d8:b4:03:00:
                    5f:93:95:e4:69:ff:9a:0d:17:fa:10:b8:f8:44:86:
                    d5:c8:c5:63:2c:25:73:88:eb:7a:14:67:49:61:9d:
                    c4:0d:f5:3c:ad:cb:d0:d5:0f:11:dd:bd:73:ea:c4:
                    18:56:79:7a:e1:62:76:9b:87:58:17:f1:07:74:b5:
                    27:a4:2b:dc:c0:17:01:73:09:8f:63:aa:5e:26:57:
                    12:12:99:ef:1d:ff:c6:3c:dd:ff:ce:50:48:86:f9:
                    61:ac:ee:be:48:e8:77:26:98:b1:ef:1c:1d:3f:8d:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3E:E3:DC:52:8E:01:32:D7:9C:C1:76:45:3D:FE:B7:77:8F:2F:77
            X509v3 Authority Key Identifier:
                keyid:E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9b:2e:ab:97:f1:43:bd:5d:e5:b2:27:e9:d2:5c:93:aa:eb:
         5a:b2:7a:c2:b6:58:d7:0f:33:08:23:c9:46:b5:c2:0d:50:2f:
         e1:ba:11:6b:ba:96:fa:9b:d1:b6:ab:80:31:65:6f:54:66:9b:
         e2:a2:87:60:2e:cd:30:a0:33:38:d1:fe:27:e6:8b:53:05:ff:
         70:0b:f5:2e:8a:f3:e4:76:8e:19:e5:fd:8b:73:b0:76:12:7c:
         17:cc:0f:b2:00:5a:98:4d:55:6f:eb:ab:fe:c0:af:b4:54:d8:
         3f:24:c2:18:bb:14:be:99:72:f6:17:d0:87:0f:da:e4:10:bc:
         b9:4a:2a:76:9a:cb:af:e1:81:5b:bd:ee:db:8b:c6:5a:4f:39:
         5e:4e:a6:5b:74:3a:04:0d:99:51:f0:10:de:d9:27:d8:8f:76:
         c1:34:90:11:ff:68:9c:69:94:f5:1c:77:20:12:d5:9e:9b:5d:
         40:af:9c:03:3f:ba:36:c0:61:ef:07:41:2c:31:d0:95:c2:e4:
         b4:a6:c6:84:ff:df:a3:4b:01:76:73:d5:87:a9:a4:e1:c8:21:
         dc:a0:be:7d:59:b6:0d:a5:43:05:ca:33:65:62:6f:a8:06:ce:
         e8:a6:f7:fb:4a:92:c9:e0:72:10:56:95:39:4d:5c:44:03:65:
         6a:b7:d1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:33:14 2025 by rpki-client