Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
File:                     H50_mRdMazcKDlEAAMo997Z0DHs.mft (raw, json)
Hash identifier:          m8l06uUWv9+i1UG4Xf4b+BY25Dz02ishDgF1y3Iw2JI=
Subject key identifier:   43:5C:94:22:9F:3F:5D:76:3A:3B:2E:1E:29:AC:E5:21:AC:88:5C:80
Authority key identifier: 1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B
Certificate issuer:       /CN=A9154388/serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
Manifest number:          65
Signing time:             Sun 27 Apr 2025 05:49:54 +0000
Manifest this update:     Sun 27 Apr 2025 05:49:54 +0000
Manifest next update:     Sun 04 May 2025 05:49:54 +0000
Files and hashes:         1: H50_mRdMazcKDlEAAMo997Z0DHs.crl (hash: oddrSOoP3oSy09ITELHXOlfRl/cGjZR1i6zAbLQegV8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl
                          rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154388, serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B
        Validity
            Not Before: Apr 27 05:49:54 2025 GMT
            Not After : May  4 05:49:54 2025 GMT
        Subject: CN=680dc582-4f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a2:23:1c:89:87:56:41:fd:c9:44:14:0a:c4:
                    6d:2d:8b:ba:93:67:76:f2:ba:98:32:60:2a:98:a3:
                    77:0d:ad:58:45:8e:63:66:6d:2d:36:4f:76:17:93:
                    ee:a0:3e:f3:64:5d:af:d0:64:f1:e4:f3:cc:de:d8:
                    14:fc:8e:c9:fb:75:2a:b1:04:2e:57:c4:c2:dd:4d:
                    78:8e:60:35:64:4e:40:89:d7:a6:06:75:72:55:b9:
                    5e:eb:ff:17:f6:c4:46:30:e4:dc:f5:fd:93:32:d9:
                    38:87:61:3e:64:95:57:ba:bd:42:9f:ca:58:15:ae:
                    f6:b1:b7:79:1e:e8:ef:05:fe:c9:46:75:a1:ce:2b:
                    24:b8:03:ae:78:84:91:81:63:f5:03:fb:28:1d:2e:
                    60:61:27:20:0b:74:cc:b2:2a:9e:a0:13:46:0a:04:
                    b9:ab:90:15:d1:21:c5:92:80:d5:75:e6:39:a7:84:
                    dc:bd:da:5b:23:ef:ca:7a:27:f9:a1:cc:59:75:40:
                    4d:be:af:24:3a:c8:b8:a7:a0:ee:0f:92:d5:eb:de:
                    f0:33:62:e6:13:f3:b2:8b:12:db:86:62:41:c1:89:
                    4a:30:2d:f2:16:c0:7f:59:c8:0b:ce:35:6d:2e:d5:
                    21:42:11:05:60:c5:9b:68:77:6f:e5:b7:dd:f9:50:
                    04:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5C:94:22:9F:3F:5D:76:3A:3B:2E:1E:29:AC:E5:21:AC:88:5C:80
            X509v3 Authority Key Identifier:
                keyid:1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ea:19:f7:60:70:e8:4a:71:fb:6a:e8:d7:b0:f1:da:91:3a:
         34:62:9b:18:3c:da:f0:fd:3a:d6:f4:63:d9:d2:e5:d0:bc:b7:
         31:4e:85:cc:e0:29:88:62:81:e0:3f:85:79:f2:82:9e:8d:80:
         3e:92:ca:09:cc:49:19:1f:a8:53:76:2f:e7:15:9d:29:b2:e6:
         93:4c:8f:2b:8e:de:8c:f9:d1:ef:a0:48:48:6f:1b:57:c2:15:
         3b:e5:88:53:06:61:89:93:1c:fa:c5:54:a2:4f:06:21:66:60:
         b3:62:15:e5:8f:75:2f:7e:f9:4b:c3:29:d1:58:45:48:98:77:
         18:93:34:93:ea:5a:e8:b6:09:7b:72:b2:e6:c2:b4:42:8a:ac:
         ad:f4:d2:c4:72:11:d3:c2:03:4f:13:b1:6b:bc:4d:b5:a1:ef:
         88:83:b0:e3:dd:2a:7b:81:f3:72:77:ea:ab:1a:af:87:50:c4:
         f9:80:18:9c:5b:0e:6e:29:24:ad:fd:88:21:11:ff:63:4a:28:
         dc:2d:e6:c1:45:a7:18:82:29:90:03:d4:c1:91:d0:5e:45:74:
         7f:31:47:5d:86:40:5e:a6:e1:e6:66:b2:ca:ae:38:3a:e2:4a:
         ca:69:9f:e4:79:77:ad:94:1c:00:43:83:4c:a2:cb:86:7b:5d:
         16:2f:05:f0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NDM4ODExMC8GA1UEBRMoMUY5RDNGOTkxNzRDNkIzNzBBMEU1MTAwMDBDQTNERjdC
Njc0MEM3QjAeFw0yNTA0MjcwNTQ5NTRaFw0yNTA1MDQwNTQ5NTRaMBgxFjAUBgNV
BAMTDTY4MGRjNTgyLTRmMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDnoiMciYdWQf3JRBQKxG0ti7qTZ3byupgyYCqYo3cNrVhFjmNmbS02T3YXk+6g
PvNkXa/QZPHk88ze2BT8jsn7dSqxBC5XxMLdTXiOYDVkTkCJ16YGdXJVuV7r/xf2
xEYw5Nz1/ZMy2TiHYT5klVe6vUKfylgVrvaxt3ke6O8F/slGdaHOKyS4A654hJGB
Y/UD+ygdLmBhJyALdMyyKp6gE0YKBLmrkBXRIcWSgNV15jmnhNy92lsj78p6J/mh
zFl1QE2+ryQ6yLinoO4PktXr3vAzYuYT87KLEtuGYkHBiUowLfIWwH9ZyAvONW0u
1SFCEQVgxZtod2/lt935UASVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ1yUIp8/
XXY6Oy4eKazlIayIXIAwHwYDVR0jBBgwFoAUH50/mRdMazcKDlEAAMo997Z0DHsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0Mzg4LzQxMzlGODk2OEMz
NzExRUY4MDkwMUMyRUM0RjlBRTAyL0g1MF9tUmRNYXpjS0RsRUFBTW85OTdaMERI
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSDUwX21SZE1hemNLRGxFQUFNbzk5N1owREhzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0
Mzg4LzQxMzlGODk2OEMzNzExRUY4MDkwMUMyRUM0RjlBRTAyL0g1MF9tUmRNYXpj
S0RsRUFBTW85OTdaMERIcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACXqGfdgcOhKcftq6New8dqROjRimxg82vD9Otb0Y9nS5dC8tzFOhczg
KYhigeA/hXnygp6NgD6SygnMSRkfqFN2L+cVnSmy5pNMjyuO3oz50e+gSEhvG1fC
FTvliFMGYYmTHPrFVKJPBiFmYLNiFeWPdS9++UvDKdFYRUiYdxiTNJPqWui2CXty
subCtEKKrK300sRyEdPCA08TsWu8TbWh74iDsOPdKnuB83J36qsar4dQxPmAGJxb
Dm4pJK39iCER/2NKKNwt5sFFpxiCKZAD1MGR0F5FdH8xR12GQF6m4eZmssquODri
Ssppn+R5d62UHABDg0yiy4Z7XRYvBfA=
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net