Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          hwqX+hvt8Td0N+KnUj27+PtYEoqSmQ7/Kcmb63RsvwM=
Subject key identifier:   DC:AD:8B:C2:C5:61:90:0A:34:2F:D8:66:54:9D:B9:FA:C1:ED:67:8B
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       2559
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          24F2
Signing time:             Mon 02 Jun 2025 15:52:21 +0000
Manifest this update:     Mon 02 Jun 2025 15:52:20 +0000
Manifest next update:     Mon 09 Jun 2025 15:52:20 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: QkNdh7o+BviOipq9VTKvDHqKjcHcsC/COTeu9NZ1h5Y=)
                          2: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: 2DQNtDG5SlXbYPNKHWvlCf1LoqXbXRDiCCKULGtJnHM=)
                          3: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: BPqGgTO/FXgmhll9acyqoVIwbgNH2EbF72C/59rTKAs=)
                          4: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: W5BOpPvdDaVJRiPCvQRJeUEXAu9OuHFa28A+g1a29VM=)
                          5: 407F0056629711EEB706DD75C4F9AE02.roa (hash: PPHYcuwo/hi+gWIj/jwhtP8TpkDUisIVIpssgpxO+Uk=)
                          6: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: ssVkoQGU9abtVaOJ8QQiFzJ2u/KxDVyiUSGDeDLOq7k=)
                          7: 260428EC312211EEAF54935BC4F9AE02.roa (hash: rs1BLbvYE3DjY31zt5pMsjMWm6NZ1lEGyNnSPudZWnw=)
                          8: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: card7JNSXN/xmFN4DueLt9CEoLfIixAjl6O1VFSsoLU=)
                          9: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: ZjX79axkNC/VnRSkKPjshmIjcGsGG06UJjQxdQstgRg=)
                          10: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: uTcSN/s3jafNB4/D11q5q+/m0pypV3YLg7hL+NBlIuc=)
                          11: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: bI6DNZ+SMQoiH31SjdXczk0YB7z1qgZ9bG+qqRhYG1Q=)
                          12: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: tGAr+6Zn60awTp8cl05laafAibPgTaCeJzxGTywN05I=)
                          13: 18D20D12852511EFBE3D6E47C4F9AE02.roa (hash: Xf4WUlVOVXX5jFG9PvkmpeYeh0+vfoKZddXectuS1PA=)
                          14: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: DZxtCrPx9nVC06xsT0giYHAu0uYg4D08gJHGXJpz69w=)
                          15: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: wWAuh5kIJNSIRZFUI/17Ka/eUztNPx+QrG0g1L0q+HM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 15:52:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9561 (0x2559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jun  2 15:52:20 2025 GMT
            Not After : Jun  9 15:52:20 2025 GMT
        Subject: CN=683dc8b4-fde9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b3:c3:ad:cd:4a:61:76:29:92:eb:b4:27:80:
                    85:d4:ed:22:a9:47:2e:a8:9a:87:5f:37:a6:ed:15:
                    7d:88:60:3c:b4:7e:90:f4:59:d3:42:b6:00:2f:10:
                    3d:21:6e:06:5f:1a:84:77:eb:57:26:8f:a8:3e:05:
                    02:11:f4:7a:f7:72:2d:44:d1:a8:59:fc:fd:51:35:
                    4b:ff:38:48:9d:39:1d:09:3f:88:ea:3a:38:0c:69:
                    73:5a:3e:65:56:f1:d5:ba:f8:d7:13:82:d7:75:9f:
                    77:e4:03:37:1e:54:ca:18:08:bc:53:ab:d0:21:cd:
                    d1:50:11:10:68:a4:a4:7c:90:0a:76:e5:aa:60:d4:
                    c1:af:b6:31:b3:2d:3f:e9:f4:ff:4d:d6:22:21:a0:
                    dc:7a:f9:8d:0f:e9:b4:4a:42:31:c8:a1:cf:ef:06:
                    dd:03:b2:9d:ab:19:a5:05:d0:fd:9c:f6:f8:b8:51:
                    0a:69:d1:2d:96:ae:fb:32:54:16:51:40:08:e5:eb:
                    dc:3d:5d:bd:9e:27:23:2c:8c:d4:d7:37:5e:57:ff:
                    44:32:f9:b4:1d:b4:fc:53:65:83:54:4b:2c:e9:0f:
                    df:9b:0b:04:71:ff:4c:0b:9a:b9:d3:cd:40:e8:61:
                    f6:a4:5d:9c:71:1b:7e:a0:4b:71:7c:89:a8:54:2c:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AD:8B:C2:C5:61:90:0A:34:2F:D8:66:54:9D:B9:FA:C1:ED:67:8B
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:94:dd:84:f7:85:07:0a:99:ce:60:86:2b:d3:c6:3d:17:c8:
         82:17:ea:7f:5a:0b:87:51:76:b3:58:36:a8:91:95:9f:95:9d:
         2b:20:bc:5a:dd:9f:c1:17:5c:61:17:36:16:a3:34:d5:a5:02:
         bb:52:ed:8a:a9:da:a5:2d:b8:28:71:7d:54:eb:bb:66:89:fe:
         f8:7d:75:61:84:c4:e9:15:da:32:3a:62:bb:9a:31:8c:6e:b3:
         1d:5c:83:66:0f:a4:c9:16:95:98:18:e6:a2:b5:32:5e:19:79:
         ba:a7:3d:ee:86:9f:b8:16:c4:40:60:ac:b5:c2:31:af:6d:8b:
         77:a6:11:50:02:66:4b:31:91:05:2c:52:9a:67:df:4c:ef:97:
         ad:3d:89:77:0a:8f:03:c8:e3:1d:e5:20:61:96:0e:06:e2:58:
         5e:4e:00:ac:73:b0:a4:fe:4a:77:31:49:ca:99:4e:57:e4:7a:
         ec:e7:d2:58:67:f9:70:5c:0b:c9:f9:1d:b3:97:af:54:a6:3b:
         ce:dd:08:b3:70:84:82:6c:15:4f:1b:9c:84:42:40:34:69:fc:
         cc:bb:d3:48:ee:4b:c8:fb:22:7e:be:7f:ee:fa:8d:b9:2d:af:
         f1:64:c0:d6:4f:48:5a:0e:64:80:4a:bc:52:c9:60:54:df:77:
         fd:7f:fd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:16:27 2025 by rpki-client