Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
File:                     IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft (raw, json)
Hash identifier:          A2oeuYJvkNseyj/0peY6n4LZDAmg+Jjfqa+QorDcX2U=
Subject key identifier:   6D:95:A5:D4:97:21:38:4F:FC:E2:C3:DB:47:BE:57:8A:09:10:CE:54
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       086D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
Manifest number:          07AB
Signing time:             Sat 10 May 2025 21:22:48 +0000
Manifest this update:     Sat 10 May 2025 21:22:47 +0000
Manifest next update:     Sat 17 May 2025 21:22:47 +0000
Files and hashes:         1: IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl (hash: z+n4k6+EIMGxJ8O/b45FoZdo8Dfuz30+xAncxK0JgrQ=)
                          2: AF96D07C2A4111EBA1B1BB3DC4F9AE02.roa (hash: pfkn3LqtWnlMP8UpcJdjJfLXYLMtDN/Y2mXi1zUzlb8=)
                          3: AC0C25102A4111EBA1B1BB3DC4F9AE02.roa (hash: 0NcwENIPa3aVs9LiCMI6VRR24OQw/5jsXsJdB5KTDNI=)
                          4: AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa (hash: idP0hZXpOCwYHzliLMTNRucny8Egj/j1Z19W4PS5OLo=)
                          5: 6A0673EE2A4311EBBD69BE46C4F9AE02.roa (hash: O7sjrhuAPeNLhdDmU+FUflcsKiJtI32kZjGU1irXu3k=)
                          6: CC4A3EAC0EDF11F0915E3563C4F9AE02.roa (hash: ub9548fQzh2Etda5xJsegMUard+7nKLjTwN2jAxmeSE=)
                          7: 55493366013C11ED9864F33CC4F9AE02.roa (hash: 0qVhe66/0pu/dhz2TXJhU0ebQFEgZUWbuY+h0HJ2A+s=)
                          8: AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa (hash: WfXXNMh9zukh9cw/K2USlyOa5g/BvSo7Ld0ZRuzBy8Y=)
                          9: 689E513E2A4311EBBD69BE46C4F9AE02.roa (hash: aPw4mGEbOxYWWebEcyujbpJrg+fs+P4Y9IEeShpAP4U=)
                          10: B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa (hash: CYtCw6FS79ggEtILkmIusb4NbSIfDQlOjZ2OPAV35Ns=)
                          11: AD3146462A4111EBA1B1BB3DC4F9AE02.roa (hash: ffQ7EpA6/85wg3fq0OAm4cOsCvC1rwsB4ss5G2Du5RQ=)
                          12: 5F0436A08AAF11EE93D5E566C4F9AE02.roa (hash: 7EvN151Z0cCWehOeO5V1tb71Wpww4FkgmZYoCsNNWOI=)
                          13: B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa (hash: rc1/VbiY0J3hOQkDA9+0MnO9yaPOrPavDdCaglBQlsk=)
                          14: 682125602A4311EBBD69BE46C4F9AE02.roa (hash: vd9TS3c3hqUpKC0UOT4J7rOC7tn77c4ltY/9JjoO2uw=)
                          15: AB656EC82A4111EBA1B1BB3DC4F9AE02.roa (hash: KPBVmLDj2miMk0iCns+BdrVEybJEudko0DHUwlDDU0U=)
                          16: 6B40A6762A4311EBBD69BE46C4F9AE02.roa (hash: fW9hk+7D/BuNY4XpxRynYnBWTpVYrBFFA1dty5jFOzI=)
                          17: ADB367482A4111EBA1B1BB3DC4F9AE02.roa (hash: HW/TwS8KqQJz2heGvjIIgo8ashWGE1qienljQIplUHI=)
                          18: B223E3C02A4111EBA1B1BB3DC4F9AE02.roa (hash: ejrqi4bkKTsVyjwG71W1i8Xl36S/BkVt3MW7xKqS5K0=)
                          19: B1B2A55C0EDF11F083641863C4F9AE02.roa (hash: PdA1Ub32bwyz4Ko+A0Ef76fynvnsBrBAoV7hf8bpya4=)
                          20: AAD2DA9A2A4111EBA1B1BB3DC4F9AE02.roa (hash: yomdqOdjT/I2gnB3kNHRnmOa5KgGzGpapRAlE8R2x9Y=)
                          21: B374E3E62A4111EBA1B1BB3DC4F9AE02.roa (hash: BFnKLQoP86m4lMutC2SByr4F9XQp+mjyL0+W9gC8mZc=)
                          22: EBDB1D16FD7A11EF9979942FC4F9AE02.roa (hash: zYHbIc0JHiGk/BRVPubrtM0zcfJRbdPCLyAGz46CHJU=)
                          23: 696CCB682A4311EBBD69BE46C4F9AE02.roa (hash: 8OYf8mEpPucFEvMRW/W78dtixXmjCZ1X5ocLo47rpIk=)
                          24: 6AB096D02A4311EBBD69BE46C4F9AE02.roa (hash: Rebiezn8kMwwNohSbkA4jvGVYfAHkCng1T1V3Qr81Hk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 21:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157 (0x86d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: May 10 21:22:47 2025 GMT
            Not After : May 17 21:22:47 2025 GMT
        Subject: CN=681fc3a7-9968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b3:51:58:9f:42:5a:98:93:52:76:e5:58:1c:
                    1a:58:d3:44:e8:34:00:ad:9a:80:4f:89:9d:9b:9c:
                    42:94:26:7e:6d:99:11:ca:d8:89:96:0e:7d:7a:c8:
                    dd:f0:4d:3c:7c:af:d5:c8:51:65:a4:1d:32:6c:be:
                    7c:07:cd:2b:81:f4:0c:c1:f6:70:87:4f:d3:80:2e:
                    66:8a:27:1f:f6:5e:0b:be:ae:c4:3f:b0:bb:08:e6:
                    a3:c9:ef:28:64:56:3a:a3:6a:17:7b:e9:1a:5b:63:
                    22:57:0c:73:a3:e4:22:62:23:09:bf:3c:c5:32:9b:
                    54:b8:45:bb:36:13:c8:66:48:1d:38:4f:ec:d0:5a:
                    81:75:4f:95:4c:ee:c1:f0:9a:bc:35:92:40:26:ab:
                    ac:03:f6:b3:d1:ea:cd:70:63:58:30:99:58:00:18:
                    cd:a5:c6:ab:d4:8f:36:ef:d7:eb:c3:64:d4:2d:2e:
                    03:7e:e0:5a:34:96:24:ee:70:ed:64:e7:e2:9c:46:
                    11:67:91:ac:c2:bf:05:49:16:6a:dc:e0:e9:05:09:
                    90:f5:ba:1b:25:1d:8e:4b:63:09:da:70:98:4a:45:
                    9f:c7:60:cd:09:55:a6:fd:53:be:c8:4d:6a:43:bd:
                    2f:d5:b4:63:04:85:1a:f3:ed:26:f4:f9:01:48:99:
                    30:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:95:A5:D4:97:21:38:4F:FC:E2:C3:DB:47:BE:57:8A:09:10:CE:54
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:67:0a:fa:ee:ed:e2:a4:3d:ad:c0:6e:94:c8:2b:3e:53:f1:
         d9:a9:3f:bb:4c:4f:ea:8b:4a:f5:f6:fc:fa:35:71:41:84:07:
         f1:89:c1:f7:e4:1c:cb:5e:9a:5e:0a:9e:c5:d6:5c:ac:1f:f4:
         e3:6e:d4:0b:79:65:12:a6:0b:41:1d:ac:66:bb:9b:8d:4c:92:
         bf:82:ec:12:6a:94:a3:48:12:e8:f7:09:8d:79:41:47:63:cc:
         cb:6f:5f:5e:8d:e7:56:d7:41:f2:69:e9:61:be:05:b9:ea:93:
         dd:2d:80:e8:e4:c6:96:7f:23:39:c8:77:79:e1:cd:24:40:fd:
         cf:61:51:06:d9:07:67:f1:eb:fb:55:5e:50:77:b6:3c:84:c6:
         0f:66:8f:99:fe:18:03:df:ed:b5:d0:91:81:ce:39:00:15:f6:
         0b:59:99:bf:53:b0:79:08:f0:74:57:29:6e:c6:e7:26:5b:d6:
         bf:8b:0a:0b:3d:8b:c1:54:6d:57:33:1f:f1:79:a7:ca:05:28:
         23:45:72:77:fb:5a:95:94:39:31:96:ba:51:d0:ca:dd:a5:f6:
         53:2c:50:a7:b1:ac:cd:c2:fe:14:70:04:5e:7d:4d:f9:51:b6:
         8d:1c:6a:55:b2:fb:46:b3:13:08:79:33:fb:50:4c:42:85:fa:
         d4:a5:8e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:01:36 2025 by rpki-client