Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          /ypy9hQO+PBTHMzgftUjCCGCOR/ljlb/wpnDuT6i2/s=
Subject key identifier:   65:A8:20:2B:4B:FB:1A:C3:14:93:71:A8:6E:7E:03:24:C0:DB:9C:1E
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       2663
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          25D3
Signing time:             Mon 20 Jul 2026 15:46:03 +0000
Manifest this update:     Mon 20 Jul 2026 15:46:03 +0000
Manifest next update:     Mon 27 Jul 2026 15:46:03 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: MP2qJ4cuVAJb6YAiZmOGINXHAHDf1WWd1ArToI/IDkA=)
                          2: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: EG8PFOOesqWPvVdNHM52edAdaM9JSZK6Y4SC+lEpZu8=)
                          3: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: ZNEHf/54GGcbLnMMEuep3T/eJ2R/C8nvU+7T8vwce5s=)
                          4: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: RFsr1N2KTi7PJe4UAaGsmWCQvAyZ9nvIedECT3kK9OU=)
                          5: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: vGfMa0ZPpOoBHQ0F1o+Tf48+nQkSOujIt4/8SaTnKPs=)
                          6: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: lzjUVAh7lLRszwhnYV5mhy3P56XkYFR9linf2gv6LBg=)
                          7: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: lREjqsgi9HggUBrrLM7jfaDH8tUIzUUtxo/1wU+w2Vc=)
                          8: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: HWCfalxDqDB7FxnntFP+aYGA4uBqfi/Gb66vT9qdTaE=)
                          9: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: mHV4drWiwbWZHrDJ+IT3MGEnYUp3eZU0FTppnMtcX/A=)
                          10: 407F0056629711EEB706DD75C4F9AE02.roa (hash: CBayDYCrVDB4X8aklXxcS8LTplrMkFlmSyrnxd12Xrg=)
                          11: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: rfzmnvtTCVcsWe0VxWp8g6Tq6UZUduUAmCFtAuAiJ3A=)
                          12: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: YKw1rlL31hVg1Btav4cBL6K8S7mM5RTM05NklurcJqw=)
                          13: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: dGa4nkxpCNF+Op42iiE/OG275dMnkxiMapj9XKVgREA=)
                          14: 260428EC312211EEAF54935BC4F9AE02.roa (hash: wTixEWRzehZDXAFVgWBvegL9oGmk6b/f9bu0J1LmayE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9827 (0x2663)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jul 20 15:46:03 2026 GMT
            Not After : Jul 27 15:46:03 2026 GMT
        Subject: CN=6a5e42bb-9761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:92:ab:57:e2:67:d4:7e:57:cf:5d:38:5e:df:
                    4f:23:c2:c9:0a:8f:23:fc:7d:06:88:41:de:0c:7e:
                    e7:f5:3d:e8:63:f7:65:27:7c:7c:98:b0:1a:a5:98:
                    22:44:93:ff:a5:4b:3d:d5:bf:eb:08:fd:89:64:c1:
                    64:31:73:30:e6:dc:22:47:0d:2c:82:98:4a:43:1c:
                    ff:b3:c5:d0:3e:c3:ac:11:0b:7e:4d:85:87:c1:3d:
                    fe:7d:70:66:28:dd:cd:8a:85:3c:a6:46:bb:fa:93:
                    69:c7:82:cd:c2:0e:d8:92:05:5e:46:94:e9:27:e7:
                    81:77:88:e5:3e:78:ed:3f:14:7d:23:38:82:c9:eb:
                    2c:3e:7b:aa:62:b1:38:1c:03:07:f2:91:c9:05:7b:
                    02:26:f7:81:5f:81:2c:52:7f:b2:32:e3:23:00:f3:
                    15:f2:d9:64:7c:44:b8:0f:e3:6c:72:5e:82:01:4d:
                    83:6d:c0:8c:ca:f0:0f:17:42:02:b8:23:59:90:d8:
                    c7:1c:07:f6:dc:16:6b:d0:78:be:a0:71:69:c9:33:
                    1b:8a:f3:64:6f:f4:29:60:19:3b:c5:3a:21:28:4a:
                    f3:10:a9:a6:d6:e4:05:93:08:55:15:dc:f4:63:42:
                    4c:88:37:9c:d4:97:c5:a3:f7:d3:e4:b9:3d:5a:0f:
                    69:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A8:20:2B:4B:FB:1A:C3:14:93:71:A8:6E:7E:03:24:C0:DB:9C:1E
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:cb:d0:d7:35:25:09:6d:94:4b:a2:a7:49:79:b2:f8:84:75:
         b6:1e:58:28:2b:2f:08:57:1d:14:43:62:f1:78:a9:27:56:90:
         16:cd:65:01:04:6c:c9:cc:11:28:49:78:43:e2:b4:ec:4c:44:
         fb:3b:cb:b6:26:d8:eb:ce:77:66:e0:ce:83:9a:84:25:03:c9:
         82:1d:db:79:af:2f:94:fa:41:24:b3:ab:fe:80:da:77:c0:40:
         50:b7:2a:1a:77:89:70:1f:fe:e9:8e:2d:f9:9b:1f:f6:52:af:
         79:93:e0:3b:c7:06:8b:a6:05:80:a9:09:05:09:e9:1c:29:d4:
         33:ae:ef:5d:fe:b5:ee:85:ec:59:96:11:0a:a3:7a:01:7b:60:
         47:8f:d6:ea:b8:a9:6f:47:d5:f9:76:fb:45:e4:7d:27:c8:09:
         ad:f6:4a:31:cd:6f:10:f1:92:98:c1:28:7e:2e:18:46:0c:ad:
         d2:01:c8:7b:ea:8a:43:2b:9f:99:49:f4:4b:d3:ab:c6:7c:c9:
         b0:7c:4b:ca:6e:4f:89:e5:8f:b5:18:c9:67:5b:19:6a:e5:f4:
         88:3f:d3:5a:3a:40:3a:d3:f3:b8:97:17:0b:53:01:04:b8:e9:
         34:c1:8c:7c:21:bc:9d:1d:c9:8d:69:fb:6b:ae:76:7f:6d:68:
         74:ed:71:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:43:17 2026 by rpki-client