Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
File:                     IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft (raw, json)
Hash identifier:          /VFxvoKHPO2YxbYkU27AHR/6Vlt+wxpR8sLeSI7pviE=
Subject key identifier:   6F:B7:40:51:D7:32:48:2F:91:0D:F2:D4:C7:2C:DA:22:85:5C:F3:44
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       091F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
Manifest number:          082C
Signing time:             Wed 22 Oct 2025 22:22:01 +0000
Manifest this update:     Wed 22 Oct 2025 22:22:01 +0000
Manifest next update:     Wed 29 Oct 2025 22:22:01 +0000
Files and hashes:         1: IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl (hash: 0S2Wa0BaYeUB02YXh752E9uVVd2/2BaRaGI7ItM3+Bc=)
                          2: 6D98103E938011F09B37C61AC4F9AE02.roa (hash: COWNDohm68EYFIP8vSAKNgTmr2JiFtIJOrpolE8SREk=)
                          3: AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa (hash: ru4CDY9kB7xpZ7Gn5BJCqXlyrSix5gXPE9YTTMWfsno=)
                          4: 6A0673EE2A4311EBBD69BE46C4F9AE02.roa (hash: pljZ5ks8zWLJ41xwtC7HEEzJ6OzoY7GJ/ohRRrP+jLs=)
                          5: CC4A3EAC0EDF11F0915E3563C4F9AE02.roa (hash: ZOEl/EUL9Kcp7Oe2ySY5gCeqAoMs/cWZLqeYM9bpOY4=)
                          6: 55493366013C11ED9864F33CC4F9AE02.roa (hash: H6bRaIcldAr/YEpe8EVNY6L5xO479Q/3kWTocHCRGwM=)
                          7: AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa (hash: DxsPcmRyMvqxvilkvhZcPekY1GWFfShT1K4h6XO4HIU=)
                          8: 689E513E2A4311EBBD69BE46C4F9AE02.roa (hash: FezbKF9kO0jDnIHasf+ZGAxTpu3bLao4gPSsw3YsObk=)
                          9: 77439A048A3911F0AA9D4C75C4F9AE02.roa (hash: 4gOxRljY2ajSaw9L+py/l3Z65NBPVaVQD1LWDmNg++Y=)
                          10: B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa (hash: GoONDGq2mntV4VCH8ruKRLPZW7gF389h40xYTQMS4WY=)
                          11: AD3146462A4111EBA1B1BB3DC4F9AE02.roa (hash: 5ouufnP7Ctej4xce5TMz+xAplrLrKCKTZMwQ7r/Y7pY=)
                          12: 5F0436A08AAF11EE93D5E566C4F9AE02.roa (hash: eYqTvYLPgNnCsX8XZsOGNBvCb+uxIeIiPxmKdWTMhWU=)
                          13: B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa (hash: lBS8kvbF9qc+MDE0imJFbA2HjjKTcdMHa+qxsQV+XxU=)
                          14: 682125602A4311EBBD69BE46C4F9AE02.roa (hash: YyMxfaGjaUTR1RTEiaJ/8xWo+/v0LKLkSrPTK2mFwLE=)
                          15: AB656EC82A4111EBA1B1BB3DC4F9AE02.roa (hash: lktIkPl22eqSwsqChqGX/PiBITeHZ0j0XKVggRutMPM=)
                          16: 6B40A6762A4311EBBD69BE46C4F9AE02.roa (hash: cu/hrl9QOHrjIrKvHn9h0AfjeVMiF3XF5XO5n2p3i90=)
                          17: ADB367482A4111EBA1B1BB3DC4F9AE02.roa (hash: /NbIlZMNBHck/exxSqKy2xdIIBSuAAci2V/DM520lf4=)
                          18: B223E3C02A4111EBA1B1BB3DC4F9AE02.roa (hash: X4XJ5Vg4GOFvVKCrXpY0V9iGok/qikvYBC+EwepyjvQ=)
                          19: AAD2DA9A2A4111EBA1B1BB3DC4F9AE02.roa (hash: o3tJcryC81c5rX1xhCkHjKVGZCjhtaRQoK8u6zdAIkI=)
                          20: EBDB1D16FD7A11EF9979942FC4F9AE02.roa (hash: NNAqDSA6qZkwyXwW5LJm0ax1QL7uOfCZD/otvzKqxLc=)
                          21: 696CCB682A4311EBBD69BE46C4F9AE02.roa (hash: S9g/XqrkQ3EKwy6SH+loLjPtlBRwhe3c36A/g6yjOOI=)
                          22: 6AB096D02A4311EBBD69BE46C4F9AE02.roa (hash: ANMNSNrxUbzfsYrPHlGwfWZQPT20tqofz6iu/oLsKk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 22:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2335 (0x91f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Oct 22 22:22:01 2025 GMT
            Not After : Oct 29 22:22:01 2025 GMT
        Subject: CN=68f95909-7c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:87:f2:19:a5:4a:80:94:f7:37:27:ad:df:f2:
                    94:31:eb:03:3f:71:b3:e5:7c:c8:c2:e0:0e:80:63:
                    f9:cd:12:3e:f5:93:1a:3a:35:7c:f5:69:9c:8d:f6:
                    fb:59:32:a5:99:1f:52:c7:b2:11:94:c0:5c:6d:9b:
                    d8:50:5f:94:f8:88:3e:b6:e9:74:4a:b1:ff:18:41:
                    83:0f:63:6c:b8:cc:f3:68:6b:f5:21:19:5d:fe:fc:
                    e6:e3:34:3e:3d:9d:2f:fa:4b:90:55:c7:01:2b:83:
                    6b:ed:5d:58:0e:c6:e7:60:23:b4:18:1d:4d:d0:ce:
                    a8:68:84:79:98:17:94:7c:b4:67:b6:e3:eb:b1:a9:
                    6b:86:27:b0:16:b4:10:64:50:b4:d5:c2:1f:84:77:
                    4d:08:7f:3a:86:db:23:89:b5:ef:7c:12:99:62:57:
                    9c:52:67:25:18:73:48:46:69:ed:2c:76:20:10:ee:
                    1c:02:64:0c:47:4a:2b:ea:9b:2d:43:76:61:88:9a:
                    f9:d8:10:c5:00:75:ee:a8:f3:4a:73:09:78:60:3b:
                    4c:c5:6b:48:6e:bc:91:90:c2:64:4b:47:0d:e8:75:
                    a9:af:ad:ca:f9:d4:65:75:75:82:07:66:fb:e2:75:
                    e8:9b:1e:87:fd:ce:8c:eb:f6:40:59:49:f6:08:92:
                    35:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B7:40:51:D7:32:48:2F:91:0D:F2:D4:C7:2C:DA:22:85:5C:F3:44
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:12:3d:cc:f6:83:a8:18:5e:a1:ec:80:30:b3:a6:b4:81:ed:
         3c:f3:66:aa:29:50:0c:78:f4:41:3f:c2:c1:a5:76:a8:97:b2:
         f9:32:04:7c:55:ff:79:95:2d:3a:2c:36:bf:bb:12:b9:07:6c:
         f0:64:1c:96:e1:11:78:ce:fe:56:c9:9a:11:22:1f:2d:77:8f:
         96:d1:92:84:36:13:e0:a5:f6:df:45:0c:ee:4b:2d:f9:23:d3:
         6e:51:4a:fb:65:56:d7:91:98:b3:26:2a:21:3d:57:b0:dc:08:
         f2:01:7c:b9:a4:68:ef:9e:76:28:52:5c:6a:65:a7:ee:26:e1:
         bd:ea:fc:af:85:f2:77:2e:3e:a8:0a:2c:c7:5c:38:7f:91:de:
         b2:23:96:ae:8c:1c:dd:6c:36:04:13:64:7c:d6:4c:9a:88:e0:
         16:59:8c:f2:a1:29:0a:e3:5d:92:52:fa:b7:c3:26:9f:a3:01:
         88:54:ed:74:5c:6c:24:cb:34:0f:45:12:84:b2:28:f3:e4:e6:
         fe:1e:e2:d3:1a:ea:a7:1c:16:db:4c:90:d1:db:29:f3:59:4e:
         f0:23:23:35:47:82:ad:0b:c2:27:aa:eb:b4:a5:85:b2:6a:e4:
         34:66:1a:72:57:39:6c:aa:35:c3:c4:06:07:e5:ed:31:3f:26:
         be:dd:10:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 06:39:15 2025 by rpki-client