Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          ABlXg3N3QihroNGphAbVo+EiI55NATPpMlzMfieDxto=
Subject key identifier:   A1:4A:79:23:B1:EB:0B:B0:C8:B0:A3:4E:65:52:A8:16:35:54:E0:56
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       25A9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          2540
Signing time:             Wed 22 Oct 2025 15:53:29 +0000
Manifest this update:     Wed 22 Oct 2025 15:53:29 +0000
Manifest next update:     Wed 29 Oct 2025 15:53:29 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: NOsdlOLwvQS4U8K8kJo/TtKlvBjEwiIXJ5fUQfm1qr4=)
                          2: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: 2DQNtDG5SlXbYPNKHWvlCf1LoqXbXRDiCCKULGtJnHM=)
                          3: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: BPqGgTO/FXgmhll9acyqoVIwbgNH2EbF72C/59rTKAs=)
                          4: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: W5BOpPvdDaVJRiPCvQRJeUEXAu9OuHFa28A+g1a29VM=)
                          5: 407F0056629711EEB706DD75C4F9AE02.roa (hash: PPHYcuwo/hi+gWIj/jwhtP8TpkDUisIVIpssgpxO+Uk=)
                          6: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: ssVkoQGU9abtVaOJ8QQiFzJ2u/KxDVyiUSGDeDLOq7k=)
                          7: 260428EC312211EEAF54935BC4F9AE02.roa (hash: rs1BLbvYE3DjY31zt5pMsjMWm6NZ1lEGyNnSPudZWnw=)
                          8: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: 62+I0JCsjnrf/+FC3fWOyVd0FAIFAMqGALGtyUh/ptw=)
                          9: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: UsIOkhaB3Ku4WNkmAUrHYHwGz8u8rCny1doDJQc+IzY=)
                          10: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: uTcSN/s3jafNB4/D11q5q+/m0pypV3YLg7hL+NBlIuc=)
                          11: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: bI6DNZ+SMQoiH31SjdXczk0YB7z1qgZ9bG+qqRhYG1Q=)
                          12: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: tGAr+6Zn60awTp8cl05laafAibPgTaCeJzxGTywN05I=)
                          13: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: DZxtCrPx9nVC06xsT0giYHAu0uYg4D08gJHGXJpz69w=)
                          14: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: wWAuh5kIJNSIRZFUI/17Ka/eUztNPx+QrG0g1L0q+HM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 15:53:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9641 (0x25a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Oct 22 15:53:29 2025 GMT
            Not After : Oct 29 15:53:29 2025 GMT
        Subject: CN=68f8fdf9-c653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f9:05:ff:a5:c4:b8:84:3b:8a:fe:d1:99:9e:
                    ef:36:83:a3:d5:15:1c:7a:cf:2e:df:a1:d1:20:4a:
                    7f:fb:fa:08:2d:4f:13:00:f1:4f:09:e5:b7:0f:d9:
                    57:ae:58:04:f5:d5:89:c7:64:ba:8c:5d:00:3b:bf:
                    a0:f5:3d:6f:15:cf:78:f5:ff:a2:0d:52:c3:ee:68:
                    2a:34:5a:c2:18:f8:1b:35:59:12:70:ce:61:da:16:
                    dc:1a:24:07:a6:36:c6:8b:d8:76:30:ca:fa:b7:56:
                    ca:0e:34:b7:1a:36:39:98:89:13:74:7c:c5:57:2d:
                    14:e0:c2:61:6a:95:d6:97:0a:4c:05:f1:72:d0:c6:
                    92:1e:23:0e:29:1a:e4:e7:9f:bc:13:d6:a9:51:fb:
                    9f:54:5d:f0:7a:76:dd:3b:71:e3:5d:77:eb:65:24:
                    04:7f:52:7c:8f:6f:b7:4b:d5:81:e2:a5:15:71:b6:
                    0c:f4:ad:11:da:84:f3:da:e4:f9:9e:c0:27:23:12:
                    ab:84:d0:42:c8:32:b6:3b:c0:47:8c:57:ea:22:19:
                    1a:7b:37:58:f0:28:21:2f:8c:72:df:84:65:24:ae:
                    9b:19:cb:93:5c:7d:96:9a:db:4a:c9:55:72:c9:d0:
                    c1:cc:9c:ae:1d:45:4f:ef:da:9a:26:a9:42:b4:85:
                    ce:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4A:79:23:B1:EB:0B:B0:C8:B0:A3:4E:65:52:A8:16:35:54:E0:56
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:32:89:5c:bb:47:f8:2e:ef:ba:05:c4:1d:58:ef:cc:75:1a:
         56:80:07:31:48:ce:41:91:4f:45:98:68:45:9a:83:11:fa:3a:
         35:0d:d5:29:b3:a4:dc:c1:eb:7e:8b:b1:93:be:ed:74:89:36:
         0e:4d:27:d0:ba:1a:70:39:3e:42:21:cd:17:d3:83:76:11:7c:
         00:8e:77:d6:5f:62:93:e2:3f:c1:57:98:d7:94:ec:f8:98:e3:
         7a:e6:8e:bb:e9:15:be:75:4f:29:2f:14:e2:4d:fc:ad:34:37:
         b8:b4:ce:5d:8d:a4:89:06:63:9b:aa:fd:e9:2d:2a:9a:c9:c7:
         b0:ac:0f:53:65:45:21:f4:fb:11:6e:74:35:b9:4c:c9:d9:d7:
         df:e0:2f:14:39:ca:d8:49:4a:86:7d:db:99:ce:cd:8e:51:dd:
         6d:f4:d1:d4:fc:f9:89:fd:5b:a5:0e:a6:76:d3:25:14:42:21:
         1f:a8:b8:13:d5:bd:c4:61:84:4d:13:40:02:0c:70:2b:af:4e:
         22:93:f1:e4:02:20:4d:00:62:5e:d9:c0:d5:5b:d1:7e:03:f5:
         41:9a:82:85:27:01:cb:55:80:d3:8a:62:60:7d:fd:95:84:17:
         c4:33:ae:6e:62:9d:df:ca:8d:31:23:58:44:e8:9b:d5:f1:d2:
         b6:f9:18:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 21:06:56 2025 by rpki-client