Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
File:                     IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft (raw, json)
Hash identifier:          CydguY7vGf6ZElZN7jI3J38cuM1mHUxtU1RpWQpLJeA=
Subject key identifier:   33:EA:20:EE:CB:27:39:58:55:B5:78:E8:E4:8B:84:36:6E:08:76:4A
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       091E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
Manifest number:          082B
Signing time:             Sat 18 Oct 2025 22:50:19 +0000
Manifest this update:     Sat 18 Oct 2025 22:50:18 +0000
Manifest next update:     Sat 25 Oct 2025 22:50:18 +0000
Files and hashes:         1: IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl (hash: OIuTm69nVUVgLyZ9vfGN/D6ewOpmpxh7iNhBEbNuZJ4=)
                          2: 6D98103E938011F09B37C61AC4F9AE02.roa (hash: COWNDohm68EYFIP8vSAKNgTmr2JiFtIJOrpolE8SREk=)
                          3: AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa (hash: ru4CDY9kB7xpZ7Gn5BJCqXlyrSix5gXPE9YTTMWfsno=)
                          4: 6A0673EE2A4311EBBD69BE46C4F9AE02.roa (hash: pljZ5ks8zWLJ41xwtC7HEEzJ6OzoY7GJ/ohRRrP+jLs=)
                          5: CC4A3EAC0EDF11F0915E3563C4F9AE02.roa (hash: ZOEl/EUL9Kcp7Oe2ySY5gCeqAoMs/cWZLqeYM9bpOY4=)
                          6: 55493366013C11ED9864F33CC4F9AE02.roa (hash: H6bRaIcldAr/YEpe8EVNY6L5xO479Q/3kWTocHCRGwM=)
                          7: AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa (hash: DxsPcmRyMvqxvilkvhZcPekY1GWFfShT1K4h6XO4HIU=)
                          8: 689E513E2A4311EBBD69BE46C4F9AE02.roa (hash: FezbKF9kO0jDnIHasf+ZGAxTpu3bLao4gPSsw3YsObk=)
                          9: 77439A048A3911F0AA9D4C75C4F9AE02.roa (hash: 4gOxRljY2ajSaw9L+py/l3Z65NBPVaVQD1LWDmNg++Y=)
                          10: B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa (hash: GoONDGq2mntV4VCH8ruKRLPZW7gF389h40xYTQMS4WY=)
                          11: AD3146462A4111EBA1B1BB3DC4F9AE02.roa (hash: 5ouufnP7Ctej4xce5TMz+xAplrLrKCKTZMwQ7r/Y7pY=)
                          12: 5F0436A08AAF11EE93D5E566C4F9AE02.roa (hash: eYqTvYLPgNnCsX8XZsOGNBvCb+uxIeIiPxmKdWTMhWU=)
                          13: B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa (hash: lBS8kvbF9qc+MDE0imJFbA2HjjKTcdMHa+qxsQV+XxU=)
                          14: 682125602A4311EBBD69BE46C4F9AE02.roa (hash: YyMxfaGjaUTR1RTEiaJ/8xWo+/v0LKLkSrPTK2mFwLE=)
                          15: AB656EC82A4111EBA1B1BB3DC4F9AE02.roa (hash: lktIkPl22eqSwsqChqGX/PiBITeHZ0j0XKVggRutMPM=)
                          16: 6B40A6762A4311EBBD69BE46C4F9AE02.roa (hash: cu/hrl9QOHrjIrKvHn9h0AfjeVMiF3XF5XO5n2p3i90=)
                          17: ADB367482A4111EBA1B1BB3DC4F9AE02.roa (hash: /NbIlZMNBHck/exxSqKy2xdIIBSuAAci2V/DM520lf4=)
                          18: B223E3C02A4111EBA1B1BB3DC4F9AE02.roa (hash: X4XJ5Vg4GOFvVKCrXpY0V9iGok/qikvYBC+EwepyjvQ=)
                          19: AAD2DA9A2A4111EBA1B1BB3DC4F9AE02.roa (hash: o3tJcryC81c5rX1xhCkHjKVGZCjhtaRQoK8u6zdAIkI=)
                          20: EBDB1D16FD7A11EF9979942FC4F9AE02.roa (hash: NNAqDSA6qZkwyXwW5LJm0ax1QL7uOfCZD/otvzKqxLc=)
                          21: 696CCB682A4311EBBD69BE46C4F9AE02.roa (hash: S9g/XqrkQ3EKwy6SH+loLjPtlBRwhe3c36A/g6yjOOI=)
                          22: 6AB096D02A4311EBBD69BE46C4F9AE02.roa (hash: ANMNSNrxUbzfsYrPHlGwfWZQPT20tqofz6iu/oLsKk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2334 (0x91e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Oct 18 22:50:18 2025 GMT
            Not After : Oct 25 22:50:18 2025 GMT
        Subject: CN=68f419aa-3397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:f9:6f:3a:e9:41:00:e4:bc:33:57:5e:82:
                    b7:c8:0c:38:1f:fc:91:a9:e8:e2:81:65:1d:f2:2f:
                    fd:84:00:b9:00:85:cb:ff:e7:97:f0:78:93:67:75:
                    b8:43:64:fe:90:b1:15:0b:46:89:87:9f:8c:68:2f:
                    fa:98:e1:9f:59:e8:f0:9b:5f:f4:26:f2:18:2f:78:
                    12:0a:05:5f:06:ed:c0:40:93:22:eb:62:bd:3e:75:
                    0b:e5:97:b6:aa:bd:cd:c2:1f:e6:28:55:22:08:07:
                    52:33:d3:72:f2:66:7d:31:ec:98:91:bf:56:2f:56:
                    2d:02:69:34:39:9e:49:84:41:3d:9c:f2:8a:45:37:
                    0a:73:11:5f:3b:44:25:1a:b5:94:63:bb:fb:7b:5c:
                    a9:c1:86:2f:7d:b2:1e:85:77:2a:6b:72:de:b0:eb:
                    68:26:16:da:d4:fb:eb:0f:a1:c6:e0:1b:69:d6:01:
                    91:1c:b1:cf:9b:3e:13:a6:bb:5e:43:6c:78:10:ad:
                    2c:ba:62:db:4d:48:a5:36:67:75:98:b3:c6:74:e8:
                    ec:34:53:a6:97:84:fd:59:49:93:c3:2b:53:0d:df:
                    1d:be:91:51:4c:49:52:10:47:27:1c:3c:18:15:61:
                    a2:cb:89:50:fe:60:aa:48:6f:a5:c7:8c:dd:9f:d7:
                    43:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EA:20:EE:CB:27:39:58:55:B5:78:E8:E4:8B:84:36:6E:08:76:4A
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:ef:c6:08:38:0c:c7:10:1d:17:1d:44:98:e1:b8:f8:4b:78:
         4f:6d:44:07:67:0c:71:97:bc:33:41:09:77:24:66:57:f1:4a:
         66:f2:3e:0e:2e:32:f3:e0:be:54:2e:3b:04:d6:f6:7b:e0:42:
         89:da:09:a1:bf:01:82:92:6f:70:76:01:67:7e:fc:fb:d4:fd:
         a7:b4:ce:38:45:27:14:78:65:08:10:3d:67:6e:be:44:f8:70:
         9b:0b:1f:6e:a3:2f:0b:8e:c5:72:c2:a1:49:84:16:41:e2:46:
         ff:e8:1e:61:cf:b3:bc:11:86:b3:5b:da:2a:38:45:a7:43:15:
         0d:35:98:1d:88:47:e0:d5:84:6f:31:ef:88:29:9b:69:45:60:
         c5:7e:6a:97:94:e8:27:29:19:ca:38:73:0a:e1:fc:95:5b:f1:
         42:6a:5f:43:82:94:ce:0b:c8:4a:2d:0d:9e:00:12:7f:03:38:
         27:e4:ca:9f:b0:3a:74:c0:b8:c9:62:43:99:69:d2:8f:34:f0:
         65:ec:41:f9:97:e5:3a:f8:7c:22:98:0d:78:34:1c:11:47:d6:
         24:95:be:8e:9f:23:92:84:7f:79:99:94:cc:67:d9:23:b1:fd:
         d9:89:d9:e0:ed:2e:6f:a4:01:31:6a:6e:0f:2d:a4:4c:d7:32:
         7f:f5:ac:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:47:13 2025 by rpki-client