Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
File:                     IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft (raw, json)
Hash identifier:          k8yufoorSu8OukzGFDjx33sFOGuddSa1e2Efb5kNT2c=
Subject key identifier:   BD:BE:D3:06:99:28:12:BE:FE:66:39:02:58:5D:7D:D4:7E:6E:DF:D6
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       0861
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
Manifest number:          07A0
Signing time:             Thu 24 Apr 2025 21:34:17 +0000
Manifest this update:     Thu 24 Apr 2025 21:34:17 +0000
Manifest next update:     Thu 01 May 2025 21:34:17 +0000
Files and hashes:         1: IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl (hash: rXeL8tqvET/i3H4w8324cr4+GPfS08pkTTTn7UIFOAs=)
                          2: AF96D07C2A4111EBA1B1BB3DC4F9AE02.roa (hash: pfkn3LqtWnlMP8UpcJdjJfLXYLMtDN/Y2mXi1zUzlb8=)
                          3: AC0C25102A4111EBA1B1BB3DC4F9AE02.roa (hash: 0NcwENIPa3aVs9LiCMI6VRR24OQw/5jsXsJdB5KTDNI=)
                          4: AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa (hash: idP0hZXpOCwYHzliLMTNRucny8Egj/j1Z19W4PS5OLo=)
                          5: 6A0673EE2A4311EBBD69BE46C4F9AE02.roa (hash: O7sjrhuAPeNLhdDmU+FUflcsKiJtI32kZjGU1irXu3k=)
                          6: CC4A3EAC0EDF11F0915E3563C4F9AE02.roa (hash: ub9548fQzh2Etda5xJsegMUard+7nKLjTwN2jAxmeSE=)
                          7: 55493366013C11ED9864F33CC4F9AE02.roa (hash: 0qVhe66/0pu/dhz2TXJhU0ebQFEgZUWbuY+h0HJ2A+s=)
                          8: AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa (hash: WfXXNMh9zukh9cw/K2USlyOa5g/BvSo7Ld0ZRuzBy8Y=)
                          9: 689E513E2A4311EBBD69BE46C4F9AE02.roa (hash: aPw4mGEbOxYWWebEcyujbpJrg+fs+P4Y9IEeShpAP4U=)
                          10: 675BCACC2A4311EBBD69BE46C4F9AE02.roa (hash: JeIGfmzM9/H3N+XM4MDMKgzhCuBbnQiu19aZl6n9MCE=)
                          11: B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa (hash: CYtCw6FS79ggEtILkmIusb4NbSIfDQlOjZ2OPAV35Ns=)
                          12: AD3146462A4111EBA1B1BB3DC4F9AE02.roa (hash: ffQ7EpA6/85wg3fq0OAm4cOsCvC1rwsB4ss5G2Du5RQ=)
                          13: 5F0436A08AAF11EE93D5E566C4F9AE02.roa (hash: 7EvN151Z0cCWehOeO5V1tb71Wpww4FkgmZYoCsNNWOI=)
                          14: B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa (hash: rc1/VbiY0J3hOQkDA9+0MnO9yaPOrPavDdCaglBQlsk=)
                          15: 682125602A4311EBBD69BE46C4F9AE02.roa (hash: vd9TS3c3hqUpKC0UOT4J7rOC7tn77c4ltY/9JjoO2uw=)
                          16: AB656EC82A4111EBA1B1BB3DC4F9AE02.roa (hash: KPBVmLDj2miMk0iCns+BdrVEybJEudko0DHUwlDDU0U=)
                          17: 6B40A6762A4311EBBD69BE46C4F9AE02.roa (hash: fW9hk+7D/BuNY4XpxRynYnBWTpVYrBFFA1dty5jFOzI=)
                          18: ADB367482A4111EBA1B1BB3DC4F9AE02.roa (hash: HW/TwS8KqQJz2heGvjIIgo8ashWGE1qienljQIplUHI=)
                          19: B223E3C02A4111EBA1B1BB3DC4F9AE02.roa (hash: ejrqi4bkKTsVyjwG71W1i8Xl36S/BkVt3MW7xKqS5K0=)
                          20: B1B2A55C0EDF11F083641863C4F9AE02.roa (hash: V4SeINflsvFl6fPvXE+nVom7L8k4bHK0j3rsx8lLR7U=)
                          21: AAD2DA9A2A4111EBA1B1BB3DC4F9AE02.roa (hash: yomdqOdjT/I2gnB3kNHRnmOa5KgGzGpapRAlE8R2x9Y=)
                          22: B374E3E62A4111EBA1B1BB3DC4F9AE02.roa (hash: BFnKLQoP86m4lMutC2SByr4F9XQp+mjyL0+W9gC8mZc=)
                          23: EBDB1D16FD7A11EF9979942FC4F9AE02.roa (hash: zYHbIc0JHiGk/BRVPubrtM0zcfJRbdPCLyAGz46CHJU=)
                          24: 696CCB682A4311EBBD69BE46C4F9AE02.roa (hash: 8OYf8mEpPucFEvMRW/W78dtixXmjCZ1X5ocLo47rpIk=)
                          25: 6AB096D02A4311EBBD69BE46C4F9AE02.roa (hash: Rebiezn8kMwwNohSbkA4jvGVYfAHkCng1T1V3Qr81Hk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:34:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145 (0x861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Apr 24 21:34:17 2025 GMT
            Not After : May  1 21:34:17 2025 GMT
        Subject: CN=680aae59-6e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dd:be:bf:0f:a3:4c:8d:05:55:11:e1:b9:cd:
                    0c:80:ab:9c:22:af:3d:4b:cc:35:f1:6e:7c:eb:c3:
                    69:5c:64:dc:a0:1f:fd:db:2d:b6:59:c5:34:2f:2c:
                    01:80:98:2e:7c:de:86:ce:1d:73:82:02:bc:de:9f:
                    da:9b:e3:3e:57:99:99:03:b4:7a:6a:6a:2a:fd:5e:
                    77:54:3a:79:c2:56:52:e8:43:70:64:30:ac:ba:84:
                    4f:03:11:a2:91:ee:c7:b1:a9:28:37:90:76:f0:cf:
                    57:c1:8f:c3:44:29:59:c4:24:e4:ad:f0:9a:7d:3e:
                    bb:43:d0:48:50:58:01:95:cf:b5:b3:cc:e5:fd:a2:
                    a2:43:f7:a6:51:37:1b:8b:44:44:fc:25:31:4b:9a:
                    8f:10:aa:a2:dc:33:cc:31:f7:59:2a:a1:88:ab:e6:
                    92:17:bd:7f:49:d3:ca:3a:79:46:2a:6c:8c:16:54:
                    d7:93:46:a9:65:74:ef:8e:d4:08:42:cb:d0:c1:f3:
                    57:df:c2:34:e4:d5:67:43:02:b9:82:fd:d0:e4:ac:
                    cb:bc:04:2a:9c:0c:32:de:1c:56:6e:7b:3a:49:d7:
                    cc:cc:e0:19:12:da:b1:c9:39:7b:68:ec:0c:83:16:
                    d5:40:f5:4d:e0:83:a1:4a:c4:4d:83:5e:b5:4c:93:
                    38:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BE:D3:06:99:28:12:BE:FE:66:39:02:58:5D:7D:D4:7E:6E:DF:D6
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:47:68:fd:b8:c5:b3:bb:3f:76:3b:5e:1a:bb:27:e7:46:5d:
         01:54:7c:f8:3e:60:8a:26:5f:91:d7:00:28:db:c8:05:43:e4:
         9d:ed:d2:a3:3a:77:3b:e6:08:71:30:06:5c:3a:40:67:e4:a3:
         73:58:6e:f6:09:85:13:d2:9e:0a:b8:ea:31:a9:5c:b8:91:de:
         2a:e5:f2:76:08:f9:fa:e9:64:29:40:37:9f:c5:70:a7:f5:66:
         5e:3d:4d:da:c8:88:19:54:64:31:a8:3a:d1:fa:3d:73:73:af:
         40:94:84:77:a3:43:79:e1:6e:a3:77:a7:bd:2e:97:a4:a0:d0:
         cc:b6:c0:33:aa:3a:c1:73:47:62:26:13:87:db:2a:c2:a4:3e:
         4f:56:74:17:0a:00:8f:55:f7:59:e0:af:be:2a:16:0c:9a:ef:
         c8:13:c5:94:e7:a8:aa:8c:3d:78:1a:ef:59:9b:af:1f:ac:53:
         75:c3:f0:4a:13:41:75:00:d5:97:48:3c:80:3c:a1:a5:03:3e:
         83:39:68:29:e8:13:ab:53:45:a5:61:63:3b:74:e8:1c:92:3e:
         97:6a:3b:f5:5f:89:67:65:aa:ff:cc:ad:6c:0d:14:f2:b5:4e:
         07:12:3f:99:38:dd:4e:7b:6b:bd:bb:0b:36:52:e5:4b:75:74:
         ee:62:47:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:23:46 2025 by rpki-client