Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
File:                     H50_mRdMazcKDlEAAMo997Z0DHs.mft (raw, json)
Hash identifier:          omItZ08OO7aDssj1qqo93qieI5mDgsJKjiKtUaKQA3M=
Subject key identifier:   CE:52:14:92:D8:EF:A8:C4:58:C0:33:08:25:B8:4B:58:D3:7F:74:FA
Authority key identifier: 1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B
Certificate issuer:       /CN=A9154388/serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
Manifest number:          8E
Signing time:             Sat 19 Jul 2025 06:42:58 +0000
Manifest this update:     Sat 19 Jul 2025 06:42:57 +0000
Manifest next update:     Sat 26 Jul 2025 06:42:57 +0000
Files and hashes:         1: H50_mRdMazcKDlEAAMo997Z0DHs.crl (hash: dbrCjA1Xr7GDYjJQhxTp3yvBgYcuN3bMXEPMFh+hP08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl
                          rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 06:42:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154388, serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B
        Validity
            Not Before: Jul 19 06:42:57 2025 GMT
            Not After : Jul 26 06:42:57 2025 GMT
        Subject: CN=687b3e72-29fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1e:a4:d2:0e:f8:44:f2:0c:d6:d6:11:e4:02:
                    de:a3:dd:f8:7e:cf:7d:69:85:34:c0:08:41:a7:09:
                    8f:1d:bb:33:ce:78:63:30:34:fa:af:b8:22:db:75:
                    4c:3f:a1:9b:25:37:f9:61:f0:ae:4c:e6:2f:b9:d7:
                    1b:53:3e:c6:90:be:43:d3:28:3d:10:49:90:04:fb:
                    7d:fc:db:ed:47:c7:4e:37:30:16:34:94:06:25:a8:
                    25:16:af:29:40:fd:ac:d8:cc:ca:1d:54:e5:d3:40:
                    89:f7:df:c4:57:b0:f8:30:c6:0c:70:95:30:da:e7:
                    8e:30:ea:e8:80:88:39:5d:31:61:3c:0d:48:19:4a:
                    ae:e9:b3:a9:bc:af:35:c5:b4:07:75:82:e7:b0:28:
                    db:d5:26:14:3b:36:b6:9d:da:1a:69:72:cd:c5:60:
                    a6:66:ad:11:f8:19:1e:ed:57:c8:55:c1:bf:2f:b3:
                    9a:3c:eb:6e:6a:5c:37:e5:b3:8d:0d:1c:4f:6d:11:
                    fa:98:8c:70:76:b1:e0:71:7d:f9:0f:66:6a:99:98:
                    ad:41:f9:b5:87:62:3f:40:d8:dd:ca:e3:1e:5b:66:
                    c1:99:72:f3:66:4f:3b:6e:cf:f6:7a:50:3a:b9:47:
                    c4:9e:fa:1f:f2:7f:9a:5b:f7:20:5f:d5:be:84:25:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:52:14:92:D8:EF:A8:C4:58:C0:33:08:25:B8:4B:58:D3:7F:74:FA
            X509v3 Authority Key Identifier:
                keyid:1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:92:33:fe:b6:af:cc:d6:6f:7a:bd:67:cc:28:2d:7c:fd:bd:
         3e:7f:f8:83:0f:03:3a:d1:da:e2:08:e0:bd:ef:65:01:12:52:
         8d:4f:95:fb:6f:b5:87:76:0a:8c:09:0b:e1:b6:1b:1b:d2:2b:
         19:60:82:ed:69:c6:09:d8:3e:d9:34:c6:cd:c3:99:57:d3:ac:
         3e:45:8d:26:b0:d7:73:d1:9b:51:e2:00:c4:f6:25:31:39:b5:
         74:8b:5b:2b:b3:3f:b9:92:4c:c1:e4:3f:91:2c:30:a4:ec:d6:
         ce:b7:4c:1f:c2:4c:b8:a7:78:9f:61:56:76:e4:05:83:05:d5:
         7d:f1:f7:4e:17:4d:42:42:45:2d:77:22:80:08:c2:3c:95:27:
         88:74:d5:36:3c:79:b2:3e:61:c5:57:92:41:81:e0:a4:26:97:
         83:ba:2f:4a:c2:d4:48:5d:80:91:40:eb:d6:5d:c0:14:e6:80:
         df:d5:23:44:1a:3e:55:30:1e:a7:50:06:08:31:59:dd:16:5e:
         b8:2d:39:4d:fd:c9:cf:07:eb:d1:f4:f3:b7:91:90:b4:34:21:
         3e:0e:dd:6e:51:69:a3:ba:11:65:4a:b6:5d:4d:b9:93:01:ea:
         36:e8:83:af:94:78:92:ea:41:e8:2d:90:df:4c:8b:1c:06:65:
         9e:60:36:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:50:44 2025 by rpki-client