Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
File:                     H50_mRdMazcKDlEAAMo997Z0DHs.mft (raw, json)
Hash identifier:          lCAgbaZJ15xPsCg1IY1pcyVp+eOd6ycqCxqCwM9R56o=
Subject key identifier:   D2:1F:56:C5:48:16:C3:D7:59:0E:9A:1D:7B:5A:3E:74:A7:3A:41:AC
Authority key identifier: 1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B
Certificate issuer:       /CN=A9154388/serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B
Certificate serial:       BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
Manifest number:          BD
Signing time:             Sun 19 Oct 2025 09:03:19 +0000
Manifest this update:     Sun 19 Oct 2025 09:03:18 +0000
Manifest next update:     Sun 26 Oct 2025 09:03:18 +0000
Files and hashes:         1: H50_mRdMazcKDlEAAMo997Z0DHs.crl (hash: QpiVnF7irTaGJ8/Kbt55FX9pbqeDsGHaWPTso00lQNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl
                          rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154388, serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B
        Validity
            Not Before: Oct 19 09:03:18 2025 GMT
            Not After : Oct 26 09:03:18 2025 GMT
        Subject: CN=68f4a957-5cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:a8:cd:f5:b9:7d:e4:38:f1:e1:6c:90:a4:
                    1e:fc:47:06:58:73:0c:a5:b3:d4:26:33:53:08:72:
                    a8:6f:26:5f:1c:07:2b:5b:37:2f:74:5f:48:28:fc:
                    14:9e:c7:d5:d7:47:6f:c6:8d:74:b0:b4:6c:b4:1b:
                    59:5e:d2:9b:6c:2b:a7:27:63:ee:03:b5:5d:60:d6:
                    7e:c4:0c:90:0f:f6:73:0a:30:8b:b8:5c:95:2d:1e:
                    f0:27:fd:7a:c7:9f:2d:01:bf:02:a7:f7:15:25:e0:
                    7d:ce:4f:e3:43:f3:58:80:95:ed:56:cf:3b:b2:13:
                    ef:d3:d5:8a:a9:93:3d:19:41:ca:cb:4b:40:bd:e7:
                    09:18:f6:e3:84:da:42:82:e5:63:bc:60:dc:09:c6:
                    1d:a0:d6:c5:3f:d9:9b:1b:14:f0:63:ab:b8:6e:51:
                    60:0d:ec:49:47:be:bd:c5:0d:87:7d:a0:f0:a9:c2:
                    d8:48:3a:82:cc:69:79:bf:0c:62:dc:b3:73:1a:cb:
                    14:5a:39:ac:b7:50:0c:05:86:de:91:89:0b:11:88:
                    23:16:f7:84:f3:29:cf:75:08:f2:8c:c4:57:4e:cd:
                    f9:1d:cf:4f:41:26:fa:04:2a:46:84:70:3f:9d:7c:
                    67:5b:45:fd:e2:9d:72:cd:3f:bc:00:b8:82:83:b3:
                    3c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1F:56:C5:48:16:C3:D7:59:0E:9A:1D:7B:5A:3E:74:A7:3A:41:AC
            X509v3 Authority Key Identifier:
                keyid:1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d8:c7:78:ee:2c:01:e6:73:70:3d:51:64:ba:7f:a6:73:3b:
         ec:0d:b8:fc:c4:82:24:79:e9:5a:a1:85:90:af:88:3c:b9:4f:
         70:98:fb:ac:a0:87:95:b7:15:53:21:4f:9f:21:53:fb:64:6f:
         06:f9:ef:af:51:a1:df:6a:ad:03:1c:ad:fb:c6:c9:f7:8c:dd:
         dc:92:c2:d7:6f:a9:3c:df:a8:56:e5:10:27:61:a8:81:e4:9c:
         a6:3b:af:38:ab:93:ce:bf:2d:92:7b:b4:db:7c:39:ce:3b:93:
         fd:bb:35:4e:66:21:10:47:f0:b1:41:06:27:45:cf:8c:1d:41:
         7f:58:85:72:2e:7c:7a:64:df:85:51:a6:11:55:65:a8:d9:b4:
         71:9a:5d:df:44:c6:20:f5:d1:95:e6:53:29:56:6e:ca:12:22:
         d8:1b:dc:42:13:dd:18:fa:79:61:c0:14:5b:15:d7:64:3c:fd:
         e4:b5:a7:44:df:36:96:3f:9c:dc:88:a4:e3:24:d4:21:f9:69:
         e5:bf:8f:c5:aa:47:b7:ce:25:87:5e:e1:5e:7b:67:1f:c9:a5:
         fb:42:3f:df:11:d1:6e:1f:36:d0:c4:a8:4e:65:bc:04:92:46:
         9e:66:04:94:19:e3:0f:80:66:2e:6b:d7:88:ea:05:f3:d7:0d:
         15:b7:8a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:35 2025 by rpki-client