Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
File:                     IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft (raw, json)
Hash identifier:          olmSeaX1YRbgKcyci9jInljF75B4I0nTWInybwmL6ao=
Subject key identifier:   95:47:1D:57:EA:B2:66:5B:50:E4:3E:DB:D8:91:FE:AF:A4:1D:71:2A
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       08DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
Manifest number:          07F7
Signing time:             Fri 22 Aug 2025 21:43:36 +0000
Manifest this update:     Fri 22 Aug 2025 21:43:36 +0000
Manifest next update:     Fri 29 Aug 2025 21:43:36 +0000
Files and hashes:         1: IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl (hash: DNagfH7fddhbHgsVvXZYVH5qD9He0MjID/IvzIUgnk4=)
                          2: AF96D07C2A4111EBA1B1BB3DC4F9AE02.roa (hash: OUr5YhEI5I46t9dp5HHmzabUoP4eaFJHW5ko53IBkdo=)
                          3: AC0C25102A4111EBA1B1BB3DC4F9AE02.roa (hash: 5y6r5SgE+1dulXmKZWvDkPSlG//7DJyCV8Qy0mpz3H8=)
                          4: 1A603900799011F0966C4010C4F9AE02.roa (hash: SoUgionH2iw73L4hRJPG5NpdBp0VhApW6SoE5rnsduw=)
                          5: AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa (hash: ru4CDY9kB7xpZ7Gn5BJCqXlyrSix5gXPE9YTTMWfsno=)
                          6: 6A0673EE2A4311EBBD69BE46C4F9AE02.roa (hash: pljZ5ks8zWLJ41xwtC7HEEzJ6OzoY7GJ/ohRRrP+jLs=)
                          7: CC4A3EAC0EDF11F0915E3563C4F9AE02.roa (hash: ZOEl/EUL9Kcp7Oe2ySY5gCeqAoMs/cWZLqeYM9bpOY4=)
                          8: 55493366013C11ED9864F33CC4F9AE02.roa (hash: Zz0XV9+8+vmeI0zGikQ8f9l71NMdTwf/sbSc3+uKywY=)
                          9: AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa (hash: DxsPcmRyMvqxvilkvhZcPekY1GWFfShT1K4h6XO4HIU=)
                          10: 689E513E2A4311EBBD69BE46C4F9AE02.roa (hash: FezbKF9kO0jDnIHasf+ZGAxTpu3bLao4gPSsw3YsObk=)
                          11: B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa (hash: GoONDGq2mntV4VCH8ruKRLPZW7gF389h40xYTQMS4WY=)
                          12: AD3146462A4111EBA1B1BB3DC4F9AE02.roa (hash: 5ouufnP7Ctej4xce5TMz+xAplrLrKCKTZMwQ7r/Y7pY=)
                          13: 5F0436A08AAF11EE93D5E566C4F9AE02.roa (hash: eYqTvYLPgNnCsX8XZsOGNBvCb+uxIeIiPxmKdWTMhWU=)
                          14: B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa (hash: lBS8kvbF9qc+MDE0imJFbA2HjjKTcdMHa+qxsQV+XxU=)
                          15: 682125602A4311EBBD69BE46C4F9AE02.roa (hash: YyMxfaGjaUTR1RTEiaJ/8xWo+/v0LKLkSrPTK2mFwLE=)
                          16: AB656EC82A4111EBA1B1BB3DC4F9AE02.roa (hash: lktIkPl22eqSwsqChqGX/PiBITeHZ0j0XKVggRutMPM=)
                          17: 6B40A6762A4311EBBD69BE46C4F9AE02.roa (hash: cu/hrl9QOHrjIrKvHn9h0AfjeVMiF3XF5XO5n2p3i90=)
                          18: ADB367482A4111EBA1B1BB3DC4F9AE02.roa (hash: /NbIlZMNBHck/exxSqKy2xdIIBSuAAci2V/DM520lf4=)
                          19: B223E3C02A4111EBA1B1BB3DC4F9AE02.roa (hash: X4XJ5Vg4GOFvVKCrXpY0V9iGok/qikvYBC+EwepyjvQ=)
                          20: AAD2DA9A2A4111EBA1B1BB3DC4F9AE02.roa (hash: o3tJcryC81c5rX1xhCkHjKVGZCjhtaRQoK8u6zdAIkI=)
                          21: B374E3E62A4111EBA1B1BB3DC4F9AE02.roa (hash: 2eG1w6WyySFQyTBuUnlx+QPyjc5U3cUmwkkEHL8GJmA=)
                          22: EBDB1D16FD7A11EF9979942FC4F9AE02.roa (hash: NNAqDSA6qZkwyXwW5LJm0ax1QL7uOfCZD/otvzKqxLc=)
                          23: 696CCB682A4311EBBD69BE46C4F9AE02.roa (hash: S9g/XqrkQ3EKwy6SH+loLjPtlBRwhe3c36A/g6yjOOI=)
                          24: 6AB096D02A4311EBBD69BE46C4F9AE02.roa (hash: ANMNSNrxUbzfsYrPHlGwfWZQPT20tqofz6iu/oLsKk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2268 (0x8dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Aug 22 21:43:36 2025 GMT
            Not After : Aug 29 21:43:36 2025 GMT
        Subject: CN=68a8e488-b236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4c:3f:09:da:07:1a:3a:c7:bf:4b:ce:47:8a:
                    8c:42:61:51:bf:d4:95:4f:ef:60:b7:26:d3:8f:29:
                    16:df:bb:e9:ea:98:a8:c0:50:8c:df:90:d1:05:87:
                    2c:d6:e1:a4:ab:f2:b2:6e:46:51:ad:8d:86:53:ce:
                    91:3d:0d:a5:b0:2d:b3:9a:22:27:8c:99:c8:eb:82:
                    68:a8:1a:de:0f:5c:ad:ba:1b:79:a8:71:df:61:b7:
                    4a:2c:2c:67:c5:21:c5:17:e0:e5:ac:05:a5:1d:45:
                    9b:f2:e4:31:9c:eb:41:c1:98:a6:dd:4f:cf:fc:ab:
                    9b:24:f2:37:e9:40:56:73:6d:d4:14:44:c6:32:42:
                    62:5b:ef:e3:4a:95:0c:21:ca:43:61:09:6b:bc:03:
                    f0:f0:28:74:7d:b6:5b:d1:90:4d:0c:7a:f8:cc:de:
                    32:64:11:9b:04:ae:a5:e3:ef:f0:6b:cc:8a:b6:09:
                    e9:ce:38:b4:86:9e:ca:0d:13:9e:77:e5:b2:de:a8:
                    e2:48:ff:ca:ca:57:ae:ac:2d:e0:13:29:6e:da:5b:
                    0a:a8:7f:d5:01:13:41:e1:b2:1f:7d:85:cf:c7:df:
                    ee:06:b3:3b:77:f8:48:32:ee:49:48:a1:be:77:47:
                    03:ff:7c:bc:7e:f0:bf:3b:fa:e3:4c:26:73:b0:95:
                    63:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:47:1D:57:EA:B2:66:5B:50:E4:3E:DB:D8:91:FE:AF:A4:1D:71:2A
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:bf:87:74:79:76:a8:67:ed:6e:49:fe:ca:01:b8:ac:9b:67:
         c5:f0:a5:7d:4a:19:e1:61:0f:aa:65:2a:d7:fe:ad:c1:ec:c6:
         ab:b7:96:5e:07:35:f4:2a:09:bc:da:9d:e5:f0:a0:ad:be:63:
         d5:7e:99:30:12:60:35:af:93:4d:99:0d:96:c2:96:22:c4:32:
         dd:b3:12:4e:51:ee:c5:2e:b8:da:88:7a:30:7b:a9:a1:26:ed:
         cf:9e:3e:d3:88:bc:42:89:c9:da:fc:fa:c1:d3:f6:93:1b:0b:
         b7:ab:5f:7d:bb:eb:0b:f7:8b:ec:d6:aa:86:db:a7:10:50:de:
         a7:8e:71:3d:3f:ac:bc:50:b2:22:ca:3b:b1:a3:15:63:c7:71:
         60:51:22:4f:a7:b1:04:89:34:b4:c4:24:6e:9d:44:79:04:4f:
         b2:a2:1f:b9:fc:6b:db:16:00:2e:5e:a7:5d:b2:d0:9e:17:f0:
         82:8e:87:36:aa:a1:cb:8d:b6:6a:b6:dd:53:5c:f7:cd:b1:ce:
         bc:72:ca:26:02:0e:04:ab:5e:5c:a6:51:59:a1:1b:cb:ca:30:
         ee:6f:a2:45:40:f4:17:a2:6e:f0:62:85:63:77:8b:78:f0:02:
         a5:5e:ed:a8:6a:ca:9f:78:ba:08:c1:dd:35:1e:95:c8:e7:85:
         c0:cf:64:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERDNUQxMTAvBgNVBAUTKDIwRjI1MzFBN0JBODIxMkQyQkIwOTAwRDU3NjM3MkQz
M0Y4NDY5MjgwHhcNMjUwODIyMjE0MzM2WhcNMjUwODI5MjE0MzM2WjAYMRYwFAYD
VQQDEw02OGE4ZTQ4OC1iMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz0w/CdoHGjrHv0vOR4qMQmFRv9SVT+9gtybTjykW37vp6piowFCM35DRBYcs
1uGkq/KybkZRrY2GU86RPQ2lsC2zmiInjJnI64JoqBreD1ytuht5qHHfYbdKLCxn
xSHFF+DlrAWlHUWb8uQxnOtBwZim3U/P/KubJPI36UBWc23UFETGMkJiW+/jSpUM
IcpDYQlrvAPw8Ch0fbZb0ZBNDHr4zN4yZBGbBK6l4+/wa8yKtgnpzji0hp7KDROe
d+Wy3qjiSP/KyleurC3gEylu2lsKqH/VARNB4bIffYXPx9/uBrM7d/hIMu5JSKG+
d0cD/3y8fvC/O/rjTCZzsJVjMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVHHVfq
smZbUOQ+29iR/q+kHXEqMB8GA1UdIwQYMBaAFCDyUxp7qCEtK7CQDVdjctM/hGko
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1RC8zOUU3MTQ2QzJB
MzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lTMHJzSkFOVjJOeTB6LUVh
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lQSlRHbnVvSVMwcnNKQU5WMk55MHotRWFTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
REM1RC8zOUU3MTQ2QzJBMzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lT
MHJzSkFOVjJOeTB6LUVhU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAuv4d0eXaoZ+1uSf7KAbism2fF8KV9ShnhYQ+qZSrX/q3B7Mart5Ze
BzX0Kgm82p3l8KCtvmPVfpkwEmA1r5NNmQ2WwpYixDLdsxJOUe7FLrjaiHowe6mh
Ju3Pnj7TiLxCicna/PrB0/aTGwu3q199u+sL94vs1qqG26cQUN6njnE9P6y8ULIi
yjuxoxVjx3FgUSJPp7EEiTS0xCRunUR5BE+yoh+5/GvbFgAuXqddstCeF/CCjoc2
qqHLjbZqtt1TXPfNsc68csomAg4Eq15cplFZoRvLyjDub6JFQPQXom7wYoVjd4t4
8AKlXu2oasqfeLoIwd01HpXI54XAz2Sk
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:34 2025 by rpki-client