Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
File:                     K51tfdq8UiVfPM15zup2289DW50.mft (raw, json)
Hash identifier:          hKQNwMf8laU17KsV/qo87FvzgLcvkbcEHfDajwJgOrM=
Subject key identifier:   06:C5:F6:2C:E0:E4:01:19:DC:59:0D:97:0D:21:A3:0B:A5:A5:E0:DB
Authority key identifier: 2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D
Certificate issuer:       /CN=A915CD63/serialNumber=2B9D6D7DDABC52255F3CCD79CEEA76DBCF435B9D
Certificate serial:       0397
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
Manifest number:          0390
Signing time:             Fri 25 Apr 2025 00:34:00 +0000
Manifest this update:     Fri 25 Apr 2025 00:34:00 +0000
Manifest next update:     Fri 02 May 2025 00:34:00 +0000
Files and hashes:         1: K51tfdq8UiVfPM15zup2289DW50.crl (hash: ZxtfVzZ5Fwk3C9DX7hmtW9QtebL77Vue9X9Tvmm1QaI=)
                          2: FA7C5B6C996611EC8E565E60C4F9AE02.roa (hash: XzEbPA3uShAOXIqZil6uWiVPTCssA6N1a5UaV/DTwa0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl
                          rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CD63, serialNumber=2B9D6D7DDABC52255F3CCD79CEEA76DBCF435B9D
        Validity
            Not Before: Apr 25 00:34:00 2025 GMT
            Not After : May  2 00:34:00 2025 GMT
        Subject: CN=680ad878-5063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:74:99:f5:39:50:c6:08:86:20:71:fc:35:13:
                    0f:e2:46:71:5b:94:7c:99:9a:fc:16:d1:48:b7:5c:
                    32:d4:da:03:13:fc:bb:22:c4:98:f4:d5:40:ec:3a:
                    c2:06:16:86:eb:cb:23:f8:9f:bc:42:9d:aa:b1:9b:
                    0d:36:71:06:4e:cc:01:f7:9c:03:c8:18:fb:11:bb:
                    c2:67:6e:4c:ee:1b:00:8b:d1:b1:88:56:a7:84:cd:
                    06:48:cc:f8:57:7f:04:20:14:97:48:64:78:f8:58:
                    51:41:a4:92:19:ad:b6:a5:6c:aa:07:50:0d:64:6c:
                    93:18:ee:57:4e:f7:f1:5f:a1:34:a2:56:50:78:86:
                    a1:24:e6:01:50:ac:47:ce:85:bc:8e:12:8c:7d:23:
                    f6:32:46:00:26:ad:03:89:a0:b4:a2:0f:fc:e0:34:
                    2c:74:64:fd:8e:04:09:84:9d:36:be:30:da:28:8f:
                    63:f8:f1:22:89:6f:1b:89:4e:22:6a:d5:7d:48:03:
                    ba:3d:c5:58:cc:d4:a0:e5:17:57:35:0d:ca:37:6c:
                    2e:b7:a4:3d:95:73:71:44:40:9c:64:65:28:62:1c:
                    98:7e:cc:c6:ca:00:d5:65:de:31:27:ab:8c:02:73:
                    2c:81:b5:47:5c:9a:5a:9d:cf:6b:bb:a1:99:05:b4:
                    72:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C5:F6:2C:E0:E4:01:19:DC:59:0D:97:0D:21:A3:0B:A5:A5:E0:DB
            X509v3 Authority Key Identifier:
                keyid:2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:2b:8e:b6:09:20:eb:7a:fb:52:2c:3e:cf:24:bb:73:a7:dd:
         3d:0a:29:17:6c:12:5c:70:57:2b:98:3a:f3:c4:34:03:00:51:
         18:20:a4:ef:d0:81:6b:38:17:10:03:5c:fd:b8:5e:56:93:46:
         30:c6:78:60:0f:db:57:9e:28:85:96:3c:62:07:26:1e:ac:61:
         3b:0c:3b:b4:08:40:dd:e4:8a:35:1b:9d:d2:60:4a:b3:2b:20:
         fd:82:4d:e0:3e:e1:37:07:b9:a6:97:2b:4a:c2:9a:46:17:c7:
         a2:fd:b6:04:87:23:f4:8d:dc:c7:c6:29:4d:db:2a:5c:c7:64:
         df:26:21:19:bc:72:25:21:78:70:67:b1:1f:68:03:7b:4f:4f:
         d4:04:63:10:82:e4:04:5c:c7:91:4d:b9:40:2c:c9:bc:62:e6:
         9e:0a:0c:73:bf:a5:36:3c:f6:b6:be:52:26:f7:1c:21:d2:bc:
         73:5a:13:6e:a1:d3:fb:69:04:10:6e:14:b5:ab:50:4a:92:0a:
         1f:ff:7a:b1:a0:09:b4:19:97:b1:31:77:6d:a4:91:49:f9:08:
         a9:5f:04:c7:4d:4b:e4:a7:66:42:18:cd:81:f9:87:21:16:4b:
         d1:e6:46:b7:ba:63:2e:ae:33:d8:5b:be:06:72:4a:86:6d:b4:
         ef:df:7e:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUNENjMxMTAvBgNVBAUTKDJCOUQ2RDdEREFCQzUyMjU1RjNDQ0Q3OUNFRUE3NkRC
Q0Y0MzVCOUQwHhcNMjUwNDI1MDAzNDAwWhcNMjUwNTAyMDAzNDAwWjAYMRYwFAYD
VQQDEw02ODBhZDg3OC01MDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwnSZ9TlQxgiGIHH8NRMP4kZxW5R8mZr8FtFIt1wy1NoDE/y7IsSY9NVA7DrC
BhaG68sj+J+8Qp2qsZsNNnEGTswB95wDyBj7EbvCZ25M7hsAi9GxiFanhM0GSMz4
V38EIBSXSGR4+FhRQaSSGa22pWyqB1ANZGyTGO5XTvfxX6E0olZQeIahJOYBUKxH
zoW8jhKMfSP2MkYAJq0DiaC0og/84DQsdGT9jgQJhJ02vjDaKI9j+PEiiW8biU4i
atV9SAO6PcVYzNSg5RdXNQ3KN2wut6Q9lXNxRECcZGUoYhyYfszGygDVZd4xJ6uM
AnMsgbVHXJpanc9ru6GZBbRycwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbF9izg
5AEZ3FkNlw0howulpeDbMB8GA1UdIwQYMBaAFCudbX3avFIlXzzNec7qdtvPQ1ud
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0Q2My84QUYwNjdDNDk5
NjIxMUVDQkI2NjFBNTdDNEY5QUUwMi9LNTF0ZmRxOFVpVmZQTTE1enVwMjI4OURX
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0s1MXRmZHE4VWlWZlBNMTV6dXAyMjg5RFc1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Q0Q2My84QUYwNjdDNDk5NjIxMUVDQkI2NjFBNTdDNEY5QUUwMi9LNTF0ZmRxOFVp
VmZQTTE1enVwMjI4OURXNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCMK462CSDrevtSLD7PJLtzp909CikXbBJccFcrmDrzxDQDAFEYIKTv
0IFrOBcQA1z9uF5Wk0YwxnhgD9tXniiFljxiByYerGE7DDu0CEDd5Io1G53SYEqz
KyD9gk3gPuE3B7mmlytKwppGF8ei/bYEhyP0jdzHxilN2ypcx2TfJiEZvHIlIXhw
Z7EfaAN7T0/UBGMQguQEXMeRTblALMm8YuaeCgxzv6U2PPa2vlIm9xwh0rxzWhNu
odP7aQQQbhS1q1BKkgof/3qxoAm0GZexMXdtpJFJ+QipXwTHTUvkp2ZCGM2B+Ych
FkvR5ka3umMurjPYW74GckqGbbTv335p
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:33:32 2025 by rpki-client