Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          3ZCYE9R6kS8ZKOYUpBodMs524pHSOPX180+YM9Dc5mE=
Subject key identifier:   47:3A:22:99:C1:1E:EA:C3:0D:84:6C:89:53:EF:92:B5:3B:CD:5A:DB
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       2688
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          25F2
Signing time:             Fri 04 Sep 2026 15:39:16 +0000
Manifest this update:     Fri 04 Sep 2026 15:39:16 +0000
Manifest next update:     Fri 11 Sep 2026 15:39:16 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: 6+nyjRi8sPXIxBqvotgvk2QGuoU0mN5VzOyTtTQCN9c=)
                          2: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: lREjqsgi9HggUBrrLM7jfaDH8tUIzUUtxo/1wU+w2Vc=)
                          3: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: RFsr1N2KTi7PJe4UAaGsmWCQvAyZ9nvIedECT3kK9OU=)
                          4: 96D63300A03F11F18845DC903A11F970.roa (hash: Qn3KV4OX+7NpADy6nTakfR6jlcCtsaFA/bop6cOJpvA=)
                          5: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: HWCfalxDqDB7FxnntFP+aYGA4uBqfi/Gb66vT9qdTaE=)
                          6: 407F0056629711EEB706DD75C4F9AE02.roa (hash: CBayDYCrVDB4X8aklXxcS8LTplrMkFlmSyrnxd12Xrg=)
                          7: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: lzjUVAh7lLRszwhnYV5mhy3P56XkYFR9linf2gv6LBg=)
                          8: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: ZNEHf/54GGcbLnMMEuep3T/eJ2R/C8nvU+7T8vwce5s=)
                          9: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: mHV4drWiwbWZHrDJ+IT3MGEnYUp3eZU0FTppnMtcX/A=)
                          10: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: YKw1rlL31hVg1Btav4cBL6K8S7mM5RTM05NklurcJqw=)
                          11: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: EG8PFOOesqWPvVdNHM52edAdaM9JSZK6Y4SC+lEpZu8=)
                          12: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: dGa4nkxpCNF+Op42iiE/OG275dMnkxiMapj9XKVgREA=)
                          13: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: vGfMa0ZPpOoBHQ0F1o+Tf48+nQkSOujIt4/8SaTnKPs=)
                          14: 260428EC312211EEAF54935BC4F9AE02.roa (hash: wTixEWRzehZDXAFVgWBvegL9oGmk6b/f9bu0J1LmayE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9864 (0x2688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Sep  4 15:39:16 2026 GMT
            Not After : Sep 11 15:39:16 2026 GMT
        Subject: CN=6a9ae624-6584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:d2:fa:33:57:88:6e:bf:3d:6c:90:ec:d7:
                    a1:7f:c0:90:09:92:4a:8d:0b:d8:95:bc:11:fc:fd:
                    03:80:51:67:5b:7a:88:aa:04:9d:cb:fe:77:16:35:
                    18:c8:7c:67:d3:f1:2d:b6:48:f4:3b:9a:f7:36:42:
                    2a:0b:0c:18:a8:64:29:d9:73:97:7f:23:3a:08:32:
                    6d:5c:ee:07:88:1b:31:c6:ee:58:76:ce:f6:fd:30:
                    43:12:60:9e:16:ec:1e:a3:7d:14:ca:a9:64:e1:c6:
                    0d:b7:ef:a6:f7:90:7b:cb:ac:53:54:42:b0:84:b6:
                    22:4e:87:d7:37:01:21:5c:35:e2:9d:f8:2e:22:22:
                    d6:ba:6d:f7:db:b5:bb:04:d0:d4:2d:19:6d:43:9d:
                    c9:ad:e6:b5:bd:5c:f3:f6:4e:c9:c4:a9:b8:7f:8a:
                    5a:e4:49:cd:aa:7c:a5:c5:24:ac:ef:34:e0:90:03:
                    10:88:e1:3c:79:f6:b8:90:c9:33:93:65:02:66:02:
                    42:ca:d4:72:25:96:4e:a8:d9:67:d4:8e:fe:ce:b0:
                    c9:c6:20:99:bc:78:f7:19:7a:40:f3:1b:a7:5f:1a:
                    1c:6e:6b:e8:b6:39:91:c5:46:0b:1c:d8:86:9d:79:
                    f1:a1:04:de:f3:71:38:29:bd:71:e5:b5:88:e6:ba:
                    c5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3A:22:99:C1:1E:EA:C3:0D:84:6C:89:53:EF:92:B5:3B:CD:5A:DB
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:41:8b:d3:eb:22:7b:4d:1d:5f:a3:38:81:67:ba:c5:8d:59:
         7f:20:c1:81:24:d4:0f:65:05:f7:38:60:85:fc:59:7a:18:06:
         b5:f1:09:48:e2:f3:9f:db:b6:24:fb:69:b1:88:37:12:c0:51:
         fa:f4:1f:5f:01:03:60:b2:3d:4e:8c:06:af:d9:93:a2:25:50:
         45:c3:cd:12:82:3a:36:5c:dd:e1:ce:07:7c:61:e5:82:fb:ca:
         f8:b1:e2:e9:bd:f6:8a:40:6d:b1:25:02:e8:80:3a:6a:99:d9:
         27:e4:e3:41:1b:85:f5:5f:50:cb:e2:b8:8b:8e:1e:ac:0b:e4:
         1c:9d:93:aa:f5:f9:fe:0d:19:13:84:80:6a:c3:9f:25:87:a8:
         f3:40:01:c5:45:ac:50:54:f1:b4:bd:c3:46:f4:4b:88:3a:18:
         46:c5:cd:df:53:b3:83:e4:52:6b:e4:22:b8:6b:ac:e6:3c:ce:
         18:33:aa:41:0d:d3:21:e0:44:d2:c2:85:2a:35:bb:6b:ad:9e:
         1f:61:2a:4e:88:57:06:cd:b6:58:c7:dc:31:a6:38:ab:f4:19:
         44:9a:6d:48:f7:b7:c0:99:cc:fe:b4:1b:74:26:1a:a5:a8:64:
         a1:bc:e6:60:c6:15:43:6a:e6:d2:1b:e6:15:c4:cf:45:01:46:
         95:e4:6b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:59:32 2026 by rpki-client