Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          SUKunYiOjptCGOsnZ7oqbZ1lkkEvTsQl/gCZzyrkIMw=
Subject key identifier:   F3:9A:06:29:A5:07:7F:C3:80:6E:25:ED:2C:71:AD:32:3C:2F:F3:21
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       2574
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          250C
Signing time:             Sun 20 Jul 2025 15:44:09 +0000
Manifest this update:     Sun 20 Jul 2025 15:44:09 +0000
Manifest next update:     Sun 27 Jul 2025 15:44:09 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: SdfLPuPEgoFfuJyaOWqa2H0rMue9a8V31iH2KxAmMV8=)
                          2: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: 2DQNtDG5SlXbYPNKHWvlCf1LoqXbXRDiCCKULGtJnHM=)
                          3: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: BPqGgTO/FXgmhll9acyqoVIwbgNH2EbF72C/59rTKAs=)
                          4: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: W5BOpPvdDaVJRiPCvQRJeUEXAu9OuHFa28A+g1a29VM=)
                          5: 407F0056629711EEB706DD75C4F9AE02.roa (hash: PPHYcuwo/hi+gWIj/jwhtP8TpkDUisIVIpssgpxO+Uk=)
                          6: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: ssVkoQGU9abtVaOJ8QQiFzJ2u/KxDVyiUSGDeDLOq7k=)
                          7: 260428EC312211EEAF54935BC4F9AE02.roa (hash: rs1BLbvYE3DjY31zt5pMsjMWm6NZ1lEGyNnSPudZWnw=)
                          8: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: UsIOkhaB3Ku4WNkmAUrHYHwGz8u8rCny1doDJQc+IzY=)
                          9: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: ZjX79axkNC/VnRSkKPjshmIjcGsGG06UJjQxdQstgRg=)
                          10: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: uTcSN/s3jafNB4/D11q5q+/m0pypV3YLg7hL+NBlIuc=)
                          11: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: bI6DNZ+SMQoiH31SjdXczk0YB7z1qgZ9bG+qqRhYG1Q=)
                          12: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: tGAr+6Zn60awTp8cl05laafAibPgTaCeJzxGTywN05I=)
                          13: 18D20D12852511EFBE3D6E47C4F9AE02.roa (hash: Xf4WUlVOVXX5jFG9PvkmpeYeh0+vfoKZddXectuS1PA=)
                          14: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: DZxtCrPx9nVC06xsT0giYHAu0uYg4D08gJHGXJpz69w=)
                          15: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: wWAuh5kIJNSIRZFUI/17Ka/eUztNPx+QrG0g1L0q+HM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9588 (0x2574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jul 20 15:44:09 2025 GMT
            Not After : Jul 27 15:44:09 2025 GMT
        Subject: CN=687d0ec9-b00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:49:6a:1d:81:d6:56:31:86:a2:06:99:2d:
                    78:6c:c6:d2:77:b5:2a:67:a7:72:a4:de:a0:81:28:
                    05:86:ef:b2:62:33:de:ef:6f:19:c9:7f:93:d3:9f:
                    d2:c0:82:64:be:7b:ba:bd:3d:64:3a:a6:51:2d:8e:
                    18:50:0d:67:eb:1f:98:c4:ed:44:9d:e6:ff:43:bb:
                    a5:fb:15:bd:58:d9:1d:9a:36:2d:58:de:bb:90:3c:
                    43:97:7a:c7:8c:98:00:a1:93:8c:d0:db:a1:69:46:
                    92:cc:e1:e3:01:2c:4a:34:cd:b1:2e:dd:82:58:dd:
                    43:ee:32:1b:ed:a7:17:64:2c:c0:11:ef:67:a8:1e:
                    8d:2d:ad:54:57:ed:c8:d8:cb:3c:20:8f:ee:94:02:
                    c1:28:8a:4d:be:d4:16:13:bd:4b:e9:6d:b0:63:d5:
                    9e:47:db:09:ef:c1:e8:1d:22:e5:09:b4:35:cd:df:
                    b1:52:31:64:8d:e8:51:ed:e2:0d:86:b0:70:e6:8d:
                    89:5a:ff:5e:7f:bb:a6:1c:69:22:05:cc:c8:e4:b6:
                    b5:9c:b6:aa:be:6d:e1:f2:09:71:f2:ef:d7:4d:cf:
                    8c:83:f0:34:be:1e:b5:d8:15:9b:51:e1:ee:83:f5:
                    13:3b:52:65:53:31:28:02:21:16:14:3a:66:cc:37:
                    62:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9A:06:29:A5:07:7F:C3:80:6E:25:ED:2C:71:AD:32:3C:2F:F3:21
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c3:af:11:ff:51:9f:b6:c1:28:39:71:e1:dc:49:3a:3b:f9:
         cf:aa:84:a7:02:0d:e6:e3:7f:1f:01:46:b2:6c:8d:40:fa:6c:
         d9:a9:23:23:29:f8:93:68:90:f4:fc:d6:57:4a:71:ce:72:8b:
         0a:03:5a:f8:94:ec:0b:29:3b:fc:2c:33:ce:aa:90:93:01:3d:
         03:fb:84:95:ce:99:f0:45:06:fb:a3:ed:b5:96:08:40:70:39:
         00:7e:2d:73:06:c4:d9:f1:41:f9:ff:34:9f:4a:47:2e:c3:88:
         f4:fc:b7:91:96:2d:7f:ea:05:1d:b2:80:18:b5:c9:28:e8:4b:
         0f:31:88:45:8a:2b:8d:7d:12:30:d4:d1:df:82:5b:2a:78:83:
         5b:b4:12:28:de:79:4b:ff:2b:8c:67:1b:8f:50:93:ce:66:ed:
         cf:8d:cc:2d:38:ef:d7:f2:01:7b:4f:0e:7e:51:8d:45:df:6b:
         2c:ab:7f:cd:04:7b:a1:e1:4c:cc:07:89:e3:ff:e5:c5:5c:3b:
         d7:b5:c1:7c:d3:0b:c6:a4:e5:5a:59:0a:db:a6:84:54:a1:9b:
         33:03:ae:34:0a:c1:0f:48:5c:6f:93:11:2f:54:39:55:05:9e:
         e3:7b:58:e7:3f:86:77:ce:28:76:ca:c2:dc:a7:c0:c9:7f:d3:
         89:9b:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:59:53 2025 by rpki-client