Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
File:                     IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft (raw, json)
Hash identifier:          keBVDL8b0wtFwrOPNTaR2geuwaprRTCqV9zctzLPUi4=
Subject key identifier:   C2:B8:06:FD:D3:24:67:97:19:25:14:D2:B2:B8:8F:87:78:C4:05:A6
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       0866
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
Manifest number:          07A4
Signing time:             Mon 28 Apr 2025 10:31:48 +0000
Manifest this update:     Mon 28 Apr 2025 10:31:47 +0000
Manifest next update:     Mon 05 May 2025 10:31:47 +0000
Files and hashes:         1: IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl (hash: 0kzPx1uRYEtdlEMcM8GyChfB4pQHz9aq8jOkO+EPfWQ=)
                          2: AF96D07C2A4111EBA1B1BB3DC4F9AE02.roa (hash: pfkn3LqtWnlMP8UpcJdjJfLXYLMtDN/Y2mXi1zUzlb8=)
                          3: AC0C25102A4111EBA1B1BB3DC4F9AE02.roa (hash: 0NcwENIPa3aVs9LiCMI6VRR24OQw/5jsXsJdB5KTDNI=)
                          4: AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa (hash: idP0hZXpOCwYHzliLMTNRucny8Egj/j1Z19W4PS5OLo=)
                          5: 6A0673EE2A4311EBBD69BE46C4F9AE02.roa (hash: O7sjrhuAPeNLhdDmU+FUflcsKiJtI32kZjGU1irXu3k=)
                          6: CC4A3EAC0EDF11F0915E3563C4F9AE02.roa (hash: ub9548fQzh2Etda5xJsegMUard+7nKLjTwN2jAxmeSE=)
                          7: 55493366013C11ED9864F33CC4F9AE02.roa (hash: 0qVhe66/0pu/dhz2TXJhU0ebQFEgZUWbuY+h0HJ2A+s=)
                          8: AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa (hash: WfXXNMh9zukh9cw/K2USlyOa5g/BvSo7Ld0ZRuzBy8Y=)
                          9: 689E513E2A4311EBBD69BE46C4F9AE02.roa (hash: aPw4mGEbOxYWWebEcyujbpJrg+fs+P4Y9IEeShpAP4U=)
                          10: B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa (hash: CYtCw6FS79ggEtILkmIusb4NbSIfDQlOjZ2OPAV35Ns=)
                          11: AD3146462A4111EBA1B1BB3DC4F9AE02.roa (hash: ffQ7EpA6/85wg3fq0OAm4cOsCvC1rwsB4ss5G2Du5RQ=)
                          12: 5F0436A08AAF11EE93D5E566C4F9AE02.roa (hash: 7EvN151Z0cCWehOeO5V1tb71Wpww4FkgmZYoCsNNWOI=)
                          13: B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa (hash: rc1/VbiY0J3hOQkDA9+0MnO9yaPOrPavDdCaglBQlsk=)
                          14: 682125602A4311EBBD69BE46C4F9AE02.roa (hash: vd9TS3c3hqUpKC0UOT4J7rOC7tn77c4ltY/9JjoO2uw=)
                          15: AB656EC82A4111EBA1B1BB3DC4F9AE02.roa (hash: KPBVmLDj2miMk0iCns+BdrVEybJEudko0DHUwlDDU0U=)
                          16: 6B40A6762A4311EBBD69BE46C4F9AE02.roa (hash: fW9hk+7D/BuNY4XpxRynYnBWTpVYrBFFA1dty5jFOzI=)
                          17: ADB367482A4111EBA1B1BB3DC4F9AE02.roa (hash: HW/TwS8KqQJz2heGvjIIgo8ashWGE1qienljQIplUHI=)
                          18: B223E3C02A4111EBA1B1BB3DC4F9AE02.roa (hash: ejrqi4bkKTsVyjwG71W1i8Xl36S/BkVt3MW7xKqS5K0=)
                          19: B1B2A55C0EDF11F083641863C4F9AE02.roa (hash: PdA1Ub32bwyz4Ko+A0Ef76fynvnsBrBAoV7hf8bpya4=)
                          20: AAD2DA9A2A4111EBA1B1BB3DC4F9AE02.roa (hash: yomdqOdjT/I2gnB3kNHRnmOa5KgGzGpapRAlE8R2x9Y=)
                          21: B374E3E62A4111EBA1B1BB3DC4F9AE02.roa (hash: BFnKLQoP86m4lMutC2SByr4F9XQp+mjyL0+W9gC8mZc=)
                          22: EBDB1D16FD7A11EF9979942FC4F9AE02.roa (hash: zYHbIc0JHiGk/BRVPubrtM0zcfJRbdPCLyAGz46CHJU=)
                          23: 696CCB682A4311EBBD69BE46C4F9AE02.roa (hash: 8OYf8mEpPucFEvMRW/W78dtixXmjCZ1X5ocLo47rpIk=)
                          24: 6AB096D02A4311EBBD69BE46C4F9AE02.roa (hash: Rebiezn8kMwwNohSbkA4jvGVYfAHkCng1T1V3Qr81Hk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 10:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2150 (0x866)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Apr 28 10:31:47 2025 GMT
            Not After : May  5 10:31:47 2025 GMT
        Subject: CN=680f5913-4ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:30:d4:18:0e:f5:07:4a:d8:64:97:63:fb:cd:
                    78:5f:9c:e0:9a:16:7f:67:13:d6:3b:12:4c:67:a9:
                    de:4f:d3:91:a3:da:f9:2a:e8:9a:f7:9f:03:0c:61:
                    52:24:d2:9f:54:6e:27:c7:b2:ae:30:d9:48:5b:77:
                    8b:5d:c8:4a:f8:83:e2:3b:d7:66:63:29:ff:05:4b:
                    d8:a9:02:29:b7:9f:35:6d:3d:d3:dd:6c:fc:16:ad:
                    65:55:e4:6f:98:fd:c9:e9:40:d7:6d:e2:14:55:45:
                    85:24:40:1f:6a:06:d2:d0:06:fe:e9:ae:60:ee:9c:
                    bb:e8:81:cb:39:71:ba:b8:0b:52:69:2f:6d:62:66:
                    82:32:18:5e:a2:ff:ce:f8:41:14:f1:df:11:42:ef:
                    5c:a8:53:e5:25:1a:0c:6e:e4:af:dd:07:49:cd:64:
                    c4:94:ef:43:7d:07:9e:e3:bb:bd:c4:81:27:7a:16:
                    98:19:79:8e:ee:1f:cc:9f:fe:ec:c0:de:b1:0c:30:
                    b0:5f:00:f6:f7:53:d6:27:58:69:d1:c6:83:74:46:
                    4b:c1:3e:b1:de:ff:69:84:fd:71:2c:6d:9f:6f:80:
                    52:a5:b4:85:8a:b5:06:69:29:48:6b:3a:1a:20:4f:
                    8b:80:77:3f:ce:9e:f7:af:3e:7f:c4:3d:cd:75:65:
                    19:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B8:06:FD:D3:24:67:97:19:25:14:D2:B2:B8:8F:87:78:C4:05:A6
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:25:f0:61:b9:a6:76:64:b2:b8:e7:7f:23:f6:92:42:79:71:
         5d:80:62:f2:54:62:51:74:a0:02:eb:13:ff:89:75:1d:cf:6c:
         05:b4:c0:12:c7:c9:74:1c:a3:f7:5a:35:02:8b:c7:85:5d:04:
         1c:b8:31:8f:5e:06:a1:bf:66:76:8c:df:0e:8c:b7:c5:38:8f:
         4b:30:8c:7b:ad:2d:76:c2:20:47:d1:78:5f:cc:73:85:79:eb:
         74:3e:a7:69:09:1b:5d:f4:c5:a0:0c:9a:a4:45:24:60:d9:d2:
         65:9e:8a:84:aa:fc:37:fe:0d:a2:f0:73:4a:88:52:94:75:6f:
         1d:f3:bc:89:36:37:43:d7:16:9d:c4:ec:47:ce:04:59:2d:a6:
         b8:2a:11:6a:9f:b0:87:70:64:f0:a7:ef:a4:11:26:b3:8b:83:
         ad:d8:6d:b8:38:29:8d:3a:6c:1e:fd:99:84:63:f0:e2:81:fa:
         cd:83:1e:5c:c6:b2:e2:ce:06:f8:e9:e4:27:33:48:82:00:49:
         4b:93:28:4c:69:86:51:95:a2:dc:66:e1:b1:66:ed:5a:2c:31:
         6d:5f:06:29:8d:61:43:d0:f4:4d:b5:f4:dd:fd:0b:3c:14:85:
         3e:0a:68:8f:b4:a6:22:67:92:38:6a:55:0d:4b:9f:83:2f:54:
         15:2c:4e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:10:50 2025 by rpki-client on console.sobornost.net