Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          sSFNwWBlQVl3PmRsE16FkuE2Abq2oz3687+Jh138JEY=
Subject key identifier:   A8:36:61:99:B1:DC:37:31:0D:38:29:87:2C:42:DD:9B:0E:FA:82:C9
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       264B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          25BB
Signing time:             Thu 04 Jun 2026 15:41:41 +0000
Manifest this update:     Thu 04 Jun 2026 15:41:41 +0000
Manifest next update:     Thu 11 Jun 2026 15:41:41 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: jk+nmLYbBzW/Yhs1z7OYy80/VX3w9936UDuTfjokdM0=)
                          2: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: mHV4drWiwbWZHrDJ+IT3MGEnYUp3eZU0FTppnMtcX/A=)
                          3: 407F0056629711EEB706DD75C4F9AE02.roa (hash: CBayDYCrVDB4X8aklXxcS8LTplrMkFlmSyrnxd12Xrg=)
                          4: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: dGa4nkxpCNF+Op42iiE/OG275dMnkxiMapj9XKVgREA=)
                          5: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: lREjqsgi9HggUBrrLM7jfaDH8tUIzUUtxo/1wU+w2Vc=)
                          6: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: EG8PFOOesqWPvVdNHM52edAdaM9JSZK6Y4SC+lEpZu8=)
                          7: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: ZNEHf/54GGcbLnMMEuep3T/eJ2R/C8nvU+7T8vwce5s=)
                          8: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: HWCfalxDqDB7FxnntFP+aYGA4uBqfi/Gb66vT9qdTaE=)
                          9: 260428EC312211EEAF54935BC4F9AE02.roa (hash: wTixEWRzehZDXAFVgWBvegL9oGmk6b/f9bu0J1LmayE=)
                          10: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: vGfMa0ZPpOoBHQ0F1o+Tf48+nQkSOujIt4/8SaTnKPs=)
                          11: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: lzjUVAh7lLRszwhnYV5mhy3P56XkYFR9linf2gv6LBg=)
                          12: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: RFsr1N2KTi7PJe4UAaGsmWCQvAyZ9nvIedECT3kK9OU=)
                          13: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: rfzmnvtTCVcsWe0VxWp8g6Tq6UZUduUAmCFtAuAiJ3A=)
                          14: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: YKw1rlL31hVg1Btav4cBL6K8S7mM5RTM05NklurcJqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9803 (0x264b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jun  4 15:41:41 2026 GMT
            Not After : Jun 11 15:41:41 2026 GMT
        Subject: CN=6a219cb5-8bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:9e:a4:53:1c:2a:69:f9:a1:c1:d9:1e:9e:
                    2b:93:2d:4c:ea:fa:1f:c7:78:f8:d9:2f:62:e1:d2:
                    23:a6:b8:fd:2c:4a:73:17:39:22:04:21:63:ed:7a:
                    d5:42:5c:be:f0:69:c2:0f:d7:aa:1a:d9:71:d4:d1:
                    e6:c2:8d:4b:17:14:89:f6:01:1f:d3:de:15:3c:96:
                    65:1e:76:88:59:fc:28:f6:43:f9:3d:53:19:8c:4e:
                    98:48:16:31:28:63:06:e5:a7:86:89:28:f9:57:00:
                    9d:e8:19:cf:ce:24:4a:21:50:9e:e4:9e:97:ab:72:
                    10:83:98:ec:7b:1a:4b:16:ac:6a:98:e8:52:14:2b:
                    c0:4a:26:e6:70:5c:2e:18:ae:c5:cb:96:18:79:32:
                    ed:b6:a8:f9:75:33:20:65:fd:49:df:cf:d1:3d:e8:
                    dc:09:65:fd:c2:e3:db:84:7c:52:41:ed:ae:8f:06:
                    4f:da:bf:41:64:97:19:1d:57:dd:69:8e:2a:f8:6d:
                    5e:62:22:4a:f1:20:2b:25:ce:6c:d1:67:81:c8:8a:
                    37:2d:d6:45:ae:02:d3:27:95:33:ab:45:eb:f9:a8:
                    5e:c9:ac:6e:d4:dd:4f:bd:30:13:29:c3:1a:a8:62:
                    dc:aa:cf:10:76:6f:50:ce:e0:6a:06:2a:c1:23:91:
                    82:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:36:61:99:B1:DC:37:31:0D:38:29:87:2C:42:DD:9B:0E:FA:82:C9
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:1d:e7:95:95:94:38:d3:8f:e8:d6:8b:86:19:50:62:b4:dc:
         47:e5:49:fc:d2:17:c6:8b:80:be:db:75:df:57:18:a1:5e:33:
         3f:7c:76:1a:f5:1b:29:fc:60:41:03:19:93:0d:03:be:e0:91:
         32:bb:1f:b5:28:8a:55:db:f0:7c:11:b5:84:fa:84:d6:f9:6e:
         16:cd:6c:e4:b1:17:07:bf:bd:ce:48:e2:08:af:db:a7:76:ec:
         24:31:7f:1f:7b:16:76:cc:b8:d8:11:44:fd:42:e5:d3:e8:5c:
         35:77:e0:64:57:74:b9:f8:be:5f:d1:f1:92:d2:63:34:2a:3e:
         4a:b2:54:74:53:0c:37:8e:a5:9a:3a:69:00:83:05:28:e2:ec:
         3c:3e:12:dc:eb:d3:29:dd:4d:4c:b7:eb:a4:1d:73:dd:fe:42:
         cb:e5:78:45:10:bb:66:40:56:85:7d:50:12:7a:da:e7:8a:f0:
         b2:68:1e:5c:a2:6b:1f:65:23:19:a4:51:04:5f:a0:94:1e:4d:
         4a:54:43:0b:07:d4:f3:af:9b:4a:88:e7:16:43:06:9a:0d:f1:
         22:bd:0a:0c:11:70:37:48:f7:c5:54:47:10:95:ba:75:86:19:
         54:ce:d7:5c:09:06:ad:8f:70:59:be:7e:a5:90:c3:cd:e1:7e:
         59:8f:1d:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKDJGNTlDRURBNjE0ODE1RjQ2MzJGMzlENUEzMUMyQTUx
NDhDNkI0RkEwHhcNMjYwNjA0MTU0MTQxWhcNMjYwNjExMTU0MTQxWjAYMRYwFAYD
VQQDEw02YTIxOWNiNS04YmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqYGepFMcKmn5ocHZHp4rky1M6vofx3j42S9i4dIjprj9LEpzFzkiBCFj7XrV
Qly+8GnCD9eqGtlx1NHmwo1LFxSJ9gEf094VPJZlHnaIWfwo9kP5PVMZjE6YSBYx
KGMG5aeGiSj5VwCd6BnPziRKIVCe5J6Xq3IQg5jsexpLFqxqmOhSFCvASibmcFwu
GK7Fy5YYeTLttqj5dTMgZf1J38/RPejcCWX9wuPbhHxSQe2ujwZP2r9BZJcZHVfd
aY4q+G1eYiJK8SArJc5s0WeByIo3LdZFrgLTJ5Uzq0Xr+aheyaxu1N1PvTATKcMa
qGLcqs8Qdm9QzuBqBirBI5GCbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKg2YZmx
3DcxDTgphyxC3ZsO+oLJMB8GA1UdIwQYMBaAFC9ZztphSBX0Yy851aMcKlFIxrT6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC9EOTAxMTI4NDNG
NEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZmUmpMem5Wb3h3cVVVakd0
UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0wxbk8ybUZJRmZSakx6blZveHdxVVVqR3RQby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkQ1NC9EOTAxMTI4NDNGNEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZm
UmpMem5Wb3h3cVVVakd0UG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYR3nlZWUONOP6NaLhhlQYrTcR+VJ/NIXxouAvtt131cYoV4zP3x2GvUbKfxg
QQMZkw0DvuCRMrsftSiKVdvwfBG1hPqE1vluFs1s5LEXB7+9zkjiCK/bp3bsJDF/
H3sWdsy42BFE/ULl0+hcNXfgZFd0ufi+X9HxktJjNCo+SrJUdFMMN46lmjppAIMF
KOLsPD4S3OvTKd1NTLfrpB1z3f5Cy+V4RRC7ZkBWhX1QEnra54rwsmgeXKJrH2Uj
GaRRBF+glB5NSlRDCwfU86+bSojnFkMGmg3xIr0KDBFwN0j3xVRHEJW6dYYZVM7X
XAkGrY9wWb5+pZDDzeF+WY8d3Q==
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:06:58 2026 by rpki-client