Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          6fvoqB6eYk5qwdi4Kchq+e9/SINQF01hIBKIJXCpETw=
Subject key identifier:   A9:D6:FE:42:A4:70:97:DA:68:47:53:4A:51:30:1A:59:45:88:C9:D3
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       256E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          2506
Signing time:             Tue 08 Jul 2025 15:50:42 +0000
Manifest this update:     Tue 08 Jul 2025 15:50:41 +0000
Manifest next update:     Tue 15 Jul 2025 15:50:41 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: IanCbIXwx5O0EJd6EpW7b8jYMT8ddiLWnqI9petl8sc=)
                          2: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: 2DQNtDG5SlXbYPNKHWvlCf1LoqXbXRDiCCKULGtJnHM=)
                          3: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: BPqGgTO/FXgmhll9acyqoVIwbgNH2EbF72C/59rTKAs=)
                          4: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: W5BOpPvdDaVJRiPCvQRJeUEXAu9OuHFa28A+g1a29VM=)
                          5: 407F0056629711EEB706DD75C4F9AE02.roa (hash: PPHYcuwo/hi+gWIj/jwhtP8TpkDUisIVIpssgpxO+Uk=)
                          6: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: ssVkoQGU9abtVaOJ8QQiFzJ2u/KxDVyiUSGDeDLOq7k=)
                          7: 260428EC312211EEAF54935BC4F9AE02.roa (hash: rs1BLbvYE3DjY31zt5pMsjMWm6NZ1lEGyNnSPudZWnw=)
                          8: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: UsIOkhaB3Ku4WNkmAUrHYHwGz8u8rCny1doDJQc+IzY=)
                          9: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: ZjX79axkNC/VnRSkKPjshmIjcGsGG06UJjQxdQstgRg=)
                          10: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: uTcSN/s3jafNB4/D11q5q+/m0pypV3YLg7hL+NBlIuc=)
                          11: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: bI6DNZ+SMQoiH31SjdXczk0YB7z1qgZ9bG+qqRhYG1Q=)
                          12: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: tGAr+6Zn60awTp8cl05laafAibPgTaCeJzxGTywN05I=)
                          13: 18D20D12852511EFBE3D6E47C4F9AE02.roa (hash: Xf4WUlVOVXX5jFG9PvkmpeYeh0+vfoKZddXectuS1PA=)
                          14: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: DZxtCrPx9nVC06xsT0giYHAu0uYg4D08gJHGXJpz69w=)
                          15: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: wWAuh5kIJNSIRZFUI/17Ka/eUztNPx+QrG0g1L0q+HM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Jul 2025 15:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9582 (0x256e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jul  8 15:50:41 2025 GMT
            Not After : Jul 15 15:50:41 2025 GMT
        Subject: CN=686d3e51-b76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:d7:50:90:db:8d:32:77:7e:ef:60:a3:9e:
                    84:c2:0b:b3:35:98:d1:1e:b1:9c:5c:3f:51:81:02:
                    c1:99:22:57:1a:fe:bb:b2:d0:fc:f6:b8:9b:d8:31:
                    ab:63:b6:51:93:4b:48:1e:39:d9:56:d4:1c:c1:4e:
                    d5:e4:53:75:a7:30:28:10:e9:22:52:0f:6e:27:d0:
                    06:a9:7e:53:6e:db:b2:b9:f9:21:7b:51:14:cc:ab:
                    5d:98:f7:5b:50:4b:b7:b7:db:5b:ea:cb:83:52:48:
                    94:ee:18:24:16:90:dc:e0:b5:2d:1f:fb:b1:92:4d:
                    10:5e:4f:c6:1f:b4:5f:df:70:ec:b0:34:3e:58:86:
                    4f:53:94:a1:13:d3:65:d7:0f:58:c5:d1:12:e3:ee:
                    99:1f:63:8a:83:d8:06:ac:4f:33:90:24:d2:cc:45:
                    68:8e:8a:4f:b0:85:95:95:f3:27:54:44:ad:ae:5f:
                    70:ba:8d:1c:e1:d9:fd:8b:05:67:69:4e:e2:64:fb:
                    d3:c2:63:b4:2a:66:c2:bf:66:c5:34:05:3c:8f:b7:
                    6b:4e:e2:d4:f9:d9:94:6c:22:81:3e:07:54:42:48:
                    55:fc:ff:58:3d:77:8c:b8:db:08:2d:5d:c5:65:91:
                    80:36:a7:d7:3c:54:27:9c:e7:ec:40:59:18:e7:09:
                    b2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D6:FE:42:A4:70:97:DA:68:47:53:4A:51:30:1A:59:45:88:C9:D3
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:50:2b:25:c2:65:51:31:42:aa:f2:f5:9a:0b:6d:df:29:55:
         b6:87:74:da:16:f3:51:a8:67:39:dd:32:25:d6:7d:92:d0:fc:
         68:3d:e4:77:af:23:4e:c0:60:13:05:72:fc:71:3c:38:bb:c3:
         30:7e:12:ce:bb:8d:ef:3f:90:9b:42:54:98:fc:0b:db:15:23:
         e0:fb:21:43:c3:8b:55:aa:a3:a8:36:d8:46:d2:bb:bc:f2:f7:
         1b:0b:6b:30:94:c6:03:18:a2:e5:d5:e8:64:d4:8d:72:4c:d7:
         7e:d0:03:20:b6:10:f0:9e:ca:77:aa:3e:7d:02:f4:00:0a:12:
         4b:fe:4c:71:da:a0:7a:89:4a:21:bb:66:3d:74:fd:0a:90:8a:
         0b:fb:48:da:14:dd:c2:f5:3c:ed:85:a1:0b:99:d0:d5:70:69:
         65:bf:0a:43:b1:78:e1:77:d0:40:d0:c6:9d:ce:d7:cd:29:73:
         e3:6f:12:26:dd:f7:af:62:fb:5e:12:6a:86:55:9c:7e:ee:c4:
         12:28:79:b6:c9:e8:28:96:90:1f:81:bc:a4:5a:56:d9:2c:0c:
         41:e2:84:70:4a:f4:b2:3b:02:6b:ca:2c:cd:29:1f:b3:e3:0a:
         42:c2:0c:06:85:39:1f:f9:f5:fd:60:46:d8:da:a5:ae:09:2b:
         f1:e3:63:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 08:49:23 2025 by rpki-client