Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
File:                     IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft (raw, json)
Hash identifier:          DsHpwkMCgORtDQDzKFseI0VD5erQ2n0ZAO/m3+0BCaw=
Subject key identifier:   87:83:06:5F:60:59:E4:90:89:3F:E8:26:87:59:6C:FA:1A:D7:5A:A2
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       08BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
Manifest number:          07DE
Signing time:             Sun 20 Jul 2025 21:45:27 +0000
Manifest this update:     Sun 20 Jul 2025 21:45:27 +0000
Manifest next update:     Sun 27 Jul 2025 21:45:27 +0000
Files and hashes:         1: IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl (hash: YbgupFfo2IjejFdX7DFB9MkBR12HJIH7SBA9jNgw0kE=)
                          2: AF96D07C2A4111EBA1B1BB3DC4F9AE02.roa (hash: OUr5YhEI5I46t9dp5HHmzabUoP4eaFJHW5ko53IBkdo=)
                          3: AC0C25102A4111EBA1B1BB3DC4F9AE02.roa (hash: 5y6r5SgE+1dulXmKZWvDkPSlG//7DJyCV8Qy0mpz3H8=)
                          4: AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa (hash: ru4CDY9kB7xpZ7Gn5BJCqXlyrSix5gXPE9YTTMWfsno=)
                          5: 6A0673EE2A4311EBBD69BE46C4F9AE02.roa (hash: pljZ5ks8zWLJ41xwtC7HEEzJ6OzoY7GJ/ohRRrP+jLs=)
                          6: CC4A3EAC0EDF11F0915E3563C4F9AE02.roa (hash: ZOEl/EUL9Kcp7Oe2ySY5gCeqAoMs/cWZLqeYM9bpOY4=)
                          7: 55493366013C11ED9864F33CC4F9AE02.roa (hash: Zz0XV9+8+vmeI0zGikQ8f9l71NMdTwf/sbSc3+uKywY=)
                          8: AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa (hash: DxsPcmRyMvqxvilkvhZcPekY1GWFfShT1K4h6XO4HIU=)
                          9: 689E513E2A4311EBBD69BE46C4F9AE02.roa (hash: FezbKF9kO0jDnIHasf+ZGAxTpu3bLao4gPSsw3YsObk=)
                          10: B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa (hash: GoONDGq2mntV4VCH8ruKRLPZW7gF389h40xYTQMS4WY=)
                          11: AD3146462A4111EBA1B1BB3DC4F9AE02.roa (hash: 5ouufnP7Ctej4xce5TMz+xAplrLrKCKTZMwQ7r/Y7pY=)
                          12: 5F0436A08AAF11EE93D5E566C4F9AE02.roa (hash: eYqTvYLPgNnCsX8XZsOGNBvCb+uxIeIiPxmKdWTMhWU=)
                          13: B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa (hash: lBS8kvbF9qc+MDE0imJFbA2HjjKTcdMHa+qxsQV+XxU=)
                          14: 682125602A4311EBBD69BE46C4F9AE02.roa (hash: YyMxfaGjaUTR1RTEiaJ/8xWo+/v0LKLkSrPTK2mFwLE=)
                          15: AB656EC82A4111EBA1B1BB3DC4F9AE02.roa (hash: lktIkPl22eqSwsqChqGX/PiBITeHZ0j0XKVggRutMPM=)
                          16: 6B40A6762A4311EBBD69BE46C4F9AE02.roa (hash: cu/hrl9QOHrjIrKvHn9h0AfjeVMiF3XF5XO5n2p3i90=)
                          17: ADB367482A4111EBA1B1BB3DC4F9AE02.roa (hash: /NbIlZMNBHck/exxSqKy2xdIIBSuAAci2V/DM520lf4=)
                          18: B223E3C02A4111EBA1B1BB3DC4F9AE02.roa (hash: X4XJ5Vg4GOFvVKCrXpY0V9iGok/qikvYBC+EwepyjvQ=)
                          19: B1B2A55C0EDF11F083641863C4F9AE02.roa (hash: 8hVuLTJi6ZBFEA7PgLYldN5wqIC3eyPB2IN11kuWnOg=)
                          20: AAD2DA9A2A4111EBA1B1BB3DC4F9AE02.roa (hash: o3tJcryC81c5rX1xhCkHjKVGZCjhtaRQoK8u6zdAIkI=)
                          21: B374E3E62A4111EBA1B1BB3DC4F9AE02.roa (hash: 2eG1w6WyySFQyTBuUnlx+QPyjc5U3cUmwkkEHL8GJmA=)
                          22: EBDB1D16FD7A11EF9979942FC4F9AE02.roa (hash: NNAqDSA6qZkwyXwW5LJm0ax1QL7uOfCZD/otvzKqxLc=)
                          23: 696CCB682A4311EBBD69BE46C4F9AE02.roa (hash: S9g/XqrkQ3EKwy6SH+loLjPtlBRwhe3c36A/g6yjOOI=)
                          24: 6AB096D02A4311EBBD69BE46C4F9AE02.roa (hash: ANMNSNrxUbzfsYrPHlGwfWZQPT20tqofz6iu/oLsKk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 21:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2238 (0x8be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Jul 20 21:45:27 2025 GMT
            Not After : Jul 27 21:45:27 2025 GMT
        Subject: CN=687d6377-9eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ff:42:c4:65:13:1a:37:3a:9e:7e:1e:1d:63:
                    cf:6a:37:a9:1d:ee:5e:f1:e9:94:59:66:75:d5:6b:
                    93:c1:13:ba:a7:30:cc:79:4a:4a:80:ca:5f:42:f2:
                    d0:58:14:66:4b:6f:86:41:6f:63:98:0c:88:de:1a:
                    52:d0:bd:17:86:8d:95:18:4c:58:7a:b4:6b:0f:84:
                    a3:6e:5b:1e:f4:f0:5f:ec:02:39:ce:dc:69:ae:c9:
                    34:20:f1:db:9f:eb:6e:06:75:93:d4:24:55:58:6a:
                    08:aa:13:ee:a2:05:02:7c:d1:ba:f4:ad:c7:90:03:
                    93:3a:0f:9b:91:89:f6:23:53:f5:6f:91:10:66:f6:
                    c3:c8:e0:f9:65:2e:67:7b:2d:59:36:22:1c:8e:65:
                    0a:b4:c8:33:44:0c:f4:4f:55:e7:b9:9e:7b:1f:61:
                    25:26:59:41:45:17:d0:a2:58:e6:7f:54:20:d2:6e:
                    79:01:ac:15:c2:a2:84:a3:d1:4b:06:25:d6:a5:ea:
                    b5:e1:13:3a:08:00:c1:43:29:db:31:2e:f9:28:23:
                    ba:bd:6f:84:46:0a:2b:e5:c5:a5:c4:c6:74:5f:85:
                    5c:9e:78:e7:a3:53:f6:cd:04:b6:ab:0b:e4:d1:45:
                    5a:22:dd:16:b7:f1:21:e9:73:00:6c:3e:8f:16:25:
                    dc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:83:06:5F:60:59:E4:90:89:3F:E8:26:87:59:6C:FA:1A:D7:5A:A2
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:c9:8e:91:72:eb:2c:7d:73:12:31:ab:2e:cf:7d:c2:02:5b:
         bb:d9:26:17:9e:49:1d:7b:46:fa:1a:83:36:f1:1f:32:7e:46:
         b4:56:b3:b8:88:ea:c8:52:16:cf:7d:f4:37:7c:fa:e2:9a:ff:
         b2:99:8b:63:6e:2a:0c:78:cf:52:e5:b2:bc:17:92:fc:3a:19:
         78:c1:ed:b5:8b:8b:f3:51:2b:ff:2c:46:b8:8f:3f:e1:a0:18:
         f0:6a:a9:33:bc:4e:b9:da:70:ee:da:7c:80:1d:1a:c7:18:01:
         f2:65:3a:a7:03:ab:81:fc:00:c7:18:1f:ec:6f:2b:53:88:05:
         2d:c0:34:76:34:f1:eb:94:5d:fb:64:b8:07:a4:1d:c4:89:32:
         77:b0:ab:81:e7:4a:88:cd:0f:fd:43:06:9f:7d:dc:bd:16:a4:
         41:8e:62:81:bc:d6:53:c0:8e:55:c4:5e:d3:4c:de:4d:4e:a3:
         f3:12:d2:2d:0c:9a:e9:97:67:80:88:be:e0:d4:78:6c:b8:2b:
         3e:79:59:54:6f:d5:3b:b5:31:07:a5:c4:d4:c6:e7:88:50:26:
         85:bd:03:23:01:45:ea:b0:74:a8:9e:2d:48:48:92:17:44:60:
         56:47:0d:8d:cb:51:90:2f:0e:c0:b8:9a:d3:df:a3:9e:a0:c9:
         3c:11:62:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:43:36 2025 by rpki-client