Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
File:                     IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft (raw, json)
Hash identifier:          Sn5Qe9acDSwSGZE100fmzuNxkEUzCx8uc5VC37WgX6k=
Subject key identifier:   3E:97:AD:11:49:B7:93:19:E6:BB:64:3F:47:1E:69:4A:43:4F:8F:DD
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       08CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
Manifest number:          07EA
Signing time:             Fri 08 Aug 2025 21:59:43 +0000
Manifest this update:     Fri 08 Aug 2025 21:59:42 +0000
Manifest next update:     Fri 15 Aug 2025 21:59:42 +0000
Files and hashes:         1: IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl (hash: JE4msUYE9OqCkaTC6M4RKGkQhm+/CGv9WaLUfGRKCwo=)
                          2: AF96D07C2A4111EBA1B1BB3DC4F9AE02.roa (hash: OUr5YhEI5I46t9dp5HHmzabUoP4eaFJHW5ko53IBkdo=)
                          3: AC0C25102A4111EBA1B1BB3DC4F9AE02.roa (hash: 5y6r5SgE+1dulXmKZWvDkPSlG//7DJyCV8Qy0mpz3H8=)
                          4: AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa (hash: ru4CDY9kB7xpZ7Gn5BJCqXlyrSix5gXPE9YTTMWfsno=)
                          5: 6A0673EE2A4311EBBD69BE46C4F9AE02.roa (hash: pljZ5ks8zWLJ41xwtC7HEEzJ6OzoY7GJ/ohRRrP+jLs=)
                          6: CC4A3EAC0EDF11F0915E3563C4F9AE02.roa (hash: ZOEl/EUL9Kcp7Oe2ySY5gCeqAoMs/cWZLqeYM9bpOY4=)
                          7: 55493366013C11ED9864F33CC4F9AE02.roa (hash: Zz0XV9+8+vmeI0zGikQ8f9l71NMdTwf/sbSc3+uKywY=)
                          8: AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa (hash: DxsPcmRyMvqxvilkvhZcPekY1GWFfShT1K4h6XO4HIU=)
                          9: 689E513E2A4311EBBD69BE46C4F9AE02.roa (hash: FezbKF9kO0jDnIHasf+ZGAxTpu3bLao4gPSsw3YsObk=)
                          10: B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa (hash: GoONDGq2mntV4VCH8ruKRLPZW7gF389h40xYTQMS4WY=)
                          11: AD3146462A4111EBA1B1BB3DC4F9AE02.roa (hash: 5ouufnP7Ctej4xce5TMz+xAplrLrKCKTZMwQ7r/Y7pY=)
                          12: 5F0436A08AAF11EE93D5E566C4F9AE02.roa (hash: eYqTvYLPgNnCsX8XZsOGNBvCb+uxIeIiPxmKdWTMhWU=)
                          13: B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa (hash: lBS8kvbF9qc+MDE0imJFbA2HjjKTcdMHa+qxsQV+XxU=)
                          14: 682125602A4311EBBD69BE46C4F9AE02.roa (hash: YyMxfaGjaUTR1RTEiaJ/8xWo+/v0LKLkSrPTK2mFwLE=)
                          15: AB656EC82A4111EBA1B1BB3DC4F9AE02.roa (hash: lktIkPl22eqSwsqChqGX/PiBITeHZ0j0XKVggRutMPM=)
                          16: 6B40A6762A4311EBBD69BE46C4F9AE02.roa (hash: cu/hrl9QOHrjIrKvHn9h0AfjeVMiF3XF5XO5n2p3i90=)
                          17: ADB367482A4111EBA1B1BB3DC4F9AE02.roa (hash: /NbIlZMNBHck/exxSqKy2xdIIBSuAAci2V/DM520lf4=)
                          18: B223E3C02A4111EBA1B1BB3DC4F9AE02.roa (hash: X4XJ5Vg4GOFvVKCrXpY0V9iGok/qikvYBC+EwepyjvQ=)
                          19: B1B2A55C0EDF11F083641863C4F9AE02.roa (hash: y8gkHkOlVf2+USK5NPeHHB8/YV3rEzvyeTsFd5dgMCo=)
                          20: AAD2DA9A2A4111EBA1B1BB3DC4F9AE02.roa (hash: o3tJcryC81c5rX1xhCkHjKVGZCjhtaRQoK8u6zdAIkI=)
                          21: B374E3E62A4111EBA1B1BB3DC4F9AE02.roa (hash: 2eG1w6WyySFQyTBuUnlx+QPyjc5U3cUmwkkEHL8GJmA=)
                          22: EBDB1D16FD7A11EF9979942FC4F9AE02.roa (hash: NNAqDSA6qZkwyXwW5LJm0ax1QL7uOfCZD/otvzKqxLc=)
                          23: 696CCB682A4311EBBD69BE46C4F9AE02.roa (hash: S9g/XqrkQ3EKwy6SH+loLjPtlBRwhe3c36A/g6yjOOI=)
                          24: 6AB096D02A4311EBBD69BE46C4F9AE02.roa (hash: ANMNSNrxUbzfsYrPHlGwfWZQPT20tqofz6iu/oLsKk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2251 (0x8cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Aug  8 21:59:42 2025 GMT
            Not After : Aug 15 21:59:42 2025 GMT
        Subject: CN=6896734e-e8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:23:ea:ad:76:53:6e:54:ab:36:64:b6:09:
                    c8:85:5f:96:b6:21:d8:80:9c:fa:f7:ce:90:52:40:
                    fe:f3:fa:a5:3f:56:56:59:00:67:15:f1:25:bc:ad:
                    97:3e:0b:62:c0:f6:9e:e1:f6:e3:a0:e7:3f:cc:fe:
                    0a:f0:b3:82:29:de:cf:3e:85:b1:eb:69:d1:0d:54:
                    28:c4:4f:5b:57:07:c6:9f:b9:fa:01:7d:d9:62:5a:
                    58:71:86:25:35:b6:6d:63:cf:e0:e0:81:e1:c8:49:
                    5c:e0:f7:4f:49:20:ff:77:25:04:02:97:8e:3e:65:
                    1c:b6:58:a8:c1:ad:d9:ef:50:17:f3:25:95:91:58:
                    b0:02:c8:17:9b:39:35:5d:fa:73:8d:ca:3f:e7:2d:
                    ad:b6:f5:ac:a1:7b:79:c3:b7:7d:51:47:a7:7f:52:
                    c0:2d:70:a1:be:15:99:1e:c5:fb:81:8b:b0:0d:7a:
                    54:a4:46:b9:1d:c2:ec:34:e2:2a:2e:72:a3:dd:08:
                    3d:a1:93:ac:04:41:79:2b:c3:de:e0:1f:c4:c8:18:
                    3d:96:84:99:59:5c:40:30:05:de:4a:ac:2e:3a:f8:
                    6a:d0:58:bd:5c:95:85:4e:48:57:3e:47:cf:fd:e2:
                    8a:de:59:ec:20:7d:45:57:8d:fa:bd:04:10:46:13:
                    c5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:97:AD:11:49:B7:93:19:E6:BB:64:3F:47:1E:69:4A:43:4F:8F:DD
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:05:e7:17:1d:97:ab:f0:fb:02:a3:e8:d4:d9:97:25:82:29:
         32:ba:e8:57:a1:6f:10:bb:4b:08:99:8d:27:dd:01:24:1b:a0:
         96:49:58:07:a7:f1:5a:e9:92:38:b2:38:30:d4:a1:f8:72:0b:
         5d:9d:4e:41:bc:d9:5d:5f:40:ab:5c:52:5a:6c:ce:1c:d5:76:
         f2:6f:a3:bd:09:df:6c:8d:8e:33:5f:05:74:c8:c8:08:ed:a6:
         2a:49:44:ae:fb:4d:48:b1:11:34:74:4b:43:89:34:50:ce:9b:
         6b:44:34:07:5e:95:ee:74:bb:ab:d6:0d:c1:af:9a:dd:ce:84:
         c1:5b:80:b7:24:5d:e6:f4:5e:29:9e:b2:4c:bb:5f:41:83:dd:
         66:aa:dd:1c:9b:fb:6a:53:48:82:9f:46:63:85:76:9c:3f:72:
         fb:65:68:8d:05:0f:7e:f2:89:7f:07:83:f2:f2:4e:6b:aa:70:
         ca:e9:8d:01:5b:6a:49:51:7c:af:49:1b:b3:a2:10:98:53:a9:
         f2:ba:c2:17:f5:a3:9d:6d:ab:42:b9:fe:16:eb:7e:42:76:45:
         cc:a0:63:92:c3:b1:af:08:39:bd:d3:39:11:e0:f6:55:63:01:
         e0:49:80:fb:c4:6a:36:00:0a:94:62:cd:6b:90:7c:da:20:22:
         f2:0a:3e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:12:54 2025 by rpki-client