Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
File:                     K51tfdq8UiVfPM15zup2289DW50.mft (raw, json)
Hash identifier:          r4dRsw7tSBKmgQvLhAgITSNOZabK6dYoU5qjB66xiM8=
Subject key identifier:   F9:F4:CE:C8:61:39:04:2E:44:80:6D:E2:1D:58:93:AE:E1:08:B7:36
Authority key identifier: 2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D
Certificate issuer:       /CN=A915CD63/serialNumber=2B9D6D7DDABC52255F3CCD79CEEA76DBCF435B9D
Certificate serial:       038C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
Manifest number:          0385
Signing time:             Thu 03 Apr 2025 00:50:47 +0000
Manifest this update:     Thu 03 Apr 2025 00:50:47 +0000
Manifest next update:     Thu 10 Apr 2025 00:50:47 +0000
Files and hashes:         1: K51tfdq8UiVfPM15zup2289DW50.crl (hash: 26w3eoicrh29nIzF6+6TK1vnta8Fhl1mKPUh2Mh15GU=)
                          2: FA7C5B6C996611EC8E565E60C4F9AE02.roa (hash: XzEbPA3uShAOXIqZil6uWiVPTCssA6N1a5UaV/DTwa0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl
                          rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 00:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908 (0x38c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CD63
        Validity
            Not Before: Apr  3 00:50:47 2025 GMT
            Not After : Apr 10 00:50:47 2025 GMT
        Subject: CN=67eddb67-f530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2f:d7:05:c8:73:93:a3:4e:f1:ae:fe:9e:48:
                    34:0b:05:53:65:e8:06:52:e8:13:85:e5:9c:b6:54:
                    ee:3c:29:8f:c5:5b:98:97:54:32:e4:1a:48:90:9c:
                    a2:b3:ae:70:17:53:50:d4:81:e7:a5:2e:43:7b:b2:
                    5f:07:87:dc:95:d6:b9:1a:32:a2:23:7a:7e:91:20:
                    8e:58:e2:fd:71:d6:22:4e:a7:cd:b0:8c:41:b2:27:
                    d5:6e:3d:43:24:c2:6c:c6:d8:47:e3:97:ca:0c:b6:
                    85:d7:d5:c2:a3:6a:b6:99:25:11:ec:64:cb:2f:bc:
                    c3:b4:4b:80:19:94:92:97:81:2b:52:7b:5a:90:04:
                    7c:48:7d:29:24:7a:57:a5:92:0c:34:68:4b:5f:0e:
                    4a:b6:ab:ec:3d:5a:02:a0:0b:0f:af:34:04:b0:e4:
                    6e:ae:f4:7e:9f:c7:4f:4d:85:58:23:b1:ec:00:ef:
                    ad:0a:bb:90:b8:93:ec:14:cc:84:e4:bd:0a:09:5d:
                    04:ad:d1:d6:14:08:d2:d9:13:24:c7:f9:63:1a:e3:
                    71:fb:26:66:9c:19:fd:af:c0:ba:70:3e:5d:81:02:
                    85:75:75:ee:6d:a3:46:60:e5:bb:04:22:6d:db:0d:
                    92:f6:17:2e:c5:8c:74:62:3c:2e:99:23:e0:cc:c9:
                    33:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F4:CE:C8:61:39:04:2E:44:80:6D:E2:1D:58:93:AE:E1:08:B7:36
            X509v3 Authority Key Identifier:
                keyid:2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:4e:08:5a:c6:c0:ba:51:cf:fd:97:17:8b:c8:aa:e7:c7:e5:
         8f:99:39:19:b7:cf:dc:b2:07:bf:89:f6:ae:ba:32:b5:79:4b:
         7f:c0:04:97:7b:2e:a0:1f:ac:be:e7:4d:db:0f:b0:26:90:ee:
         e8:b8:c5:17:01:51:6e:9d:60:40:68:c4:a0:ac:ac:63:0b:b3:
         7d:48:5a:c4:ab:76:14:53:2c:be:44:b6:c5:1f:04:5b:12:e6:
         7d:76:6a:76:9a:30:2a:f6:af:09:72:6c:b5:20:8b:60:4a:89:
         eb:1c:bd:31:b4:cc:5a:77:33:a4:da:89:20:1d:b9:60:63:9d:
         41:bd:63:72:02:5b:b5:1f:a1:ac:37:7a:08:58:a5:65:70:d2:
         cf:ad:3b:c6:05:e0:3b:d6:3d:f7:76:7b:6f:c1:7d:ff:aa:91:
         62:b9:8e:b5:77:73:0d:14:e5:72:55:a5:a1:42:36:d5:10:ce:
         55:d8:68:8f:d0:95:a0:b5:9f:76:dc:dd:31:b8:cd:95:dd:59:
         e2:ce:d0:3d:dd:d5:83:86:90:4c:39:a3:95:fe:bb:de:27:2f:
         16:63:c4:cd:80:e0:e1:33:2f:83:ac:fb:99:cc:d0:c2:62:2b:
         6c:8f:bd:8b:ae:45:f3:4e:fb:f5:50:96:51:6b:90:1a:69:45:
         d2:27:6f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:58 2025 by rpki-client