Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
File:                     K51tfdq8UiVfPM15zup2289DW50.mft (raw, json)
Hash identifier:          tstxcDVSuRO8V/y57NHRozrMD2uMsjfL2m8Zvwt088M=
Subject key identifier:   8B:86:9C:79:D6:C8:77:BC:4A:16:26:1A:3B:96:E4:96:2E:E1:AB:E6
Authority key identifier: 2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D
Certificate issuer:       /CN=A915CD63/serialNumber=2B9D6D7DDABC52255F3CCD79CEEA76DBCF435B9D
Certificate serial:       03D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
Manifest number:          03CC
Signing time:             Sat 23 Aug 2025 00:51:16 +0000
Manifest this update:     Sat 23 Aug 2025 00:51:15 +0000
Manifest next update:     Sat 30 Aug 2025 00:51:15 +0000
Files and hashes:         1: K51tfdq8UiVfPM15zup2289DW50.crl (hash: wBwIPYg6MEuTWcS8KJl0zbzWUiC6p70dtBb6D5XLpIQ=)
                          2: FA7C5B6C996611EC8E565E60C4F9AE02.roa (hash: XzEbPA3uShAOXIqZil6uWiVPTCssA6N1a5UaV/DTwa0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl
                          rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 979 (0x3d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CD63, serialNumber=2B9D6D7DDABC52255F3CCD79CEEA76DBCF435B9D
        Validity
            Not Before: Aug 23 00:51:15 2025 GMT
            Not After : Aug 30 00:51:15 2025 GMT
        Subject: CN=68a91083-5db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:aa:b2:ab:c8:47:9c:7e:2d:ae:10:e1:04:
                    98:d4:5f:1f:38:18:4c:05:48:fb:c4:1b:47:6a:33:
                    d3:39:ac:37:73:6d:23:70:2f:4c:4d:4b:44:77:f3:
                    7c:37:1e:e6:86:5a:0a:44:7b:b5:dd:aa:a2:3b:e2:
                    fe:d6:e1:7a:da:20:8f:db:d0:82:75:44:6f:df:13:
                    d4:0b:ef:c0:ae:88:68:5a:57:ff:10:f7:a5:09:75:
                    36:b1:3d:c7:54:b6:55:7f:1e:1e:6e:95:d7:f2:9e:
                    8d:c0:49:e7:ec:0f:d6:36:6b:e7:e4:c1:d3:72:3f:
                    2d:6a:a8:84:35:69:d1:e9:14:70:76:9d:9f:a8:58:
                    80:60:39:62:ff:ac:3a:40:87:6f:56:2e:11:f7:36:
                    ef:31:64:ed:51:bd:26:b5:ee:8c:b6:73:3b:c6:c6:
                    a2:0d:01:35:34:cc:d6:6e:34:e5:cf:df:38:8f:37:
                    b9:07:f5:15:1a:b9:46:8b:24:11:a2:5c:50:97:27:
                    7d:b3:dc:69:f4:d2:7f:b8:97:78:ad:c1:9d:98:ca:
                    5c:91:37:c1:f5:90:d2:12:4d:5d:79:92:13:e5:8c:
                    1d:d2:0a:51:e5:f7:9f:f8:14:fc:55:ce:cf:e9:74:
                    88:1f:62:d2:0d:b0:00:a5:9d:1d:75:1b:cb:f0:87:
                    35:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:86:9C:79:D6:C8:77:BC:4A:16:26:1A:3B:96:E4:96:2E:E1:AB:E6
            X509v3 Authority Key Identifier:
                keyid:2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:11:1e:b8:d9:f3:94:2c:7c:cd:78:b5:6c:ef:e7:9c:e6:57:
         b7:5f:f2:6d:27:8e:33:e6:d9:1f:aa:1d:a1:c9:a2:94:99:d6:
         0e:c9:8e:25:df:90:d2:da:8e:c4:19:2c:05:27:75:a3:63:4b:
         f1:7f:55:68:20:59:28:72:e4:d5:77:6c:10:7c:5b:8e:69:ae:
         e5:c0:84:28:56:46:10:38:f6:0d:34:72:c6:6c:88:ee:02:32:
         89:89:f9:56:71:1f:41:ff:01:bd:f7:3b:65:d9:e4:20:8f:ad:
         46:6d:51:70:67:6a:3b:fc:26:06:21:31:73:c3:17:51:97:60:
         a3:24:ab:8b:3b:d0:ea:82:0a:56:e3:85:58:9f:0d:c8:6c:91:
         95:d6:14:58:47:20:69:30:99:a1:33:e7:43:a6:2d:bc:f2:1e:
         b0:14:74:b6:c8:a9:fe:93:3c:a6:f0:e5:98:e2:cc:56:39:89:
         22:54:93:83:cd:8a:42:d2:6d:82:41:14:e8:b5:4d:15:3a:46:
         6b:56:6c:3f:56:b1:65:0b:3b:4b:7f:47:1c:a1:94:76:85:69:
         37:c2:82:10:aa:e2:09:b7:35:02:7b:80:b1:6b:80:0e:ea:85:
         8c:49:33:01:56:4b:30:0c:cb:c4:b0:1e:23:55:19:38:a5:25:
         3c:2e:21:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:31 2025 by rpki-client