Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
File:                     K51tfdq8UiVfPM15zup2289DW50.mft (raw, json)
Hash identifier:          GmCCA5yCDY/pg8C8bW4ivl1LKM+NbVyEgI/lI2d+Ic0=
Subject key identifier:   A7:A0:A7:67:2B:3C:C6:B6:1D:7C:88:CC:6D:81:EF:DD:BA:70:A5:EE
Authority key identifier: 2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D
Certificate issuer:       /CN=A915CD63/serialNumber=2B9D6D7DDABC52255F3CCD79CEEA76DBCF435B9D
Certificate serial:       03D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
Manifest number:          03CB
Signing time:             Thu 21 Aug 2025 00:46:15 +0000
Manifest this update:     Thu 21 Aug 2025 00:46:14 +0000
Manifest next update:     Thu 28 Aug 2025 00:46:14 +0000
Files and hashes:         1: K51tfdq8UiVfPM15zup2289DW50.crl (hash: 29IBIxzqX+F/mgAN6sqVZKRaqfK7/1uJNnQjYHNJVGY=)
                          2: FA7C5B6C996611EC8E565E60C4F9AE02.roa (hash: XzEbPA3uShAOXIqZil6uWiVPTCssA6N1a5UaV/DTwa0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl
                          rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 00:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 978 (0x3d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CD63, serialNumber=2B9D6D7DDABC52255F3CCD79CEEA76DBCF435B9D
        Validity
            Not Before: Aug 21 00:46:14 2025 GMT
            Not After : Aug 28 00:46:14 2025 GMT
        Subject: CN=68a66c56-4bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:03:30:07:06:a0:55:e1:85:c9:f9:76:22:
                    41:c1:af:9e:7f:0b:4e:b9:b5:41:36:32:e5:08:ac:
                    dd:ff:c9:b7:e2:93:13:55:e3:00:d3:d0:3d:74:a0:
                    6d:8b:d1:d3:99:a0:be:91:59:30:0c:13:26:04:b7:
                    64:a8:6e:a4:37:b7:df:de:35:d9:d1:0f:f0:09:f4:
                    e3:04:bb:4a:a3:20:9d:3f:ac:d0:73:01:5b:35:53:
                    83:20:bd:d9:ac:58:45:78:61:af:15:7f:6b:5b:37:
                    dd:6d:2f:22:1a:85:c2:24:9d:36:e7:41:91:c5:c0:
                    ad:03:68:06:22:3e:f3:cc:62:2a:12:95:4f:05:a7:
                    ba:3d:8a:5f:2a:63:47:66:13:ef:6b:16:d9:bf:e7:
                    ce:35:6e:2f:59:45:7b:5c:0b:e0:18:ab:9e:9f:44:
                    39:f5:61:84:9f:bd:cf:a4:8d:55:d0:96:29:0a:a2:
                    af:c9:7b:0d:18:eb:c4:75:47:d4:ca:f2:bb:f1:c7:
                    f4:a7:47:c7:e6:ca:f8:24:a5:1b:df:5b:60:54:7a:
                    1f:c4:4c:98:62:1e:eb:66:76:5a:52:7c:79:25:ce:
                    00:a9:e9:c6:94:b6:b9:47:be:8d:72:d7:5b:e0:d4:
                    23:01:35:95:24:2a:b7:87:95:ff:21:64:60:46:cb:
                    dc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A0:A7:67:2B:3C:C6:B6:1D:7C:88:CC:6D:81:EF:DD:BA:70:A5:EE
            X509v3 Authority Key Identifier:
                keyid:2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:71:4a:bf:15:f2:6b:bb:3b:de:6b:ba:d4:f8:e5:34:66:b7:
         ae:23:36:14:47:78:1c:63:63:8a:f6:00:d2:34:05:08:3a:e6:
         12:75:fb:c3:0d:35:71:91:42:f0:e4:8a:8c:54:7a:66:29:59:
         54:b8:f0:b4:83:8d:0d:e2:55:ae:13:05:8e:6b:af:2b:09:8c:
         a2:d3:77:af:f8:ee:a2:5f:8e:74:58:13:b6:58:38:88:3e:65:
         ec:22:3e:45:63:7b:a6:32:80:c3:84:cf:95:6b:a4:1b:7d:6f:
         16:69:88:d3:c4:6b:7f:3d:7f:37:7b:1d:c1:47:ef:78:74:1a:
         30:c2:0d:7a:9e:5e:43:e2:fd:67:d5:80:3c:33:5e:c9:27:46:
         37:e2:ac:37:44:16:31:63:df:5e:8c:97:af:58:9a:00:34:fb:
         80:80:d9:1e:54:62:ef:c8:90:cf:46:f2:15:4b:19:d6:59:79:
         89:0a:a8:d6:7e:10:af:e0:2a:e6:87:80:7d:fd:1b:ae:ab:d5:
         03:aa:27:a3:a5:e2:51:3e:cb:5d:51:65:6b:4f:39:b8:9e:74:
         4d:01:d7:47:4c:74:1a:7f:7c:e4:f4:c3:a7:fc:38:d3:56:fd:
         72:fe:8c:b5:1b:e6:7e:36:df:c5:1f:48:e8:c2:8f:cc:10:5c:
         84:d0:dc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:48:27 2025 by rpki-client