Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          ybrBOOQmMH5xvCy9Bq7D4ype6sdgaaG7xp5FNyBouA4=
Subject key identifier:   98:56:D1:92:40:AF:FB:41:92:6F:C5:E2:1D:52:AB:6A:4A:25:49:3F
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       2691
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          25FB
Signing time:             Sun 20 Sep 2026 15:39:04 +0000
Manifest this update:     Sun 20 Sep 2026 15:39:03 +0000
Manifest next update:     Sun 27 Sep 2026 15:39:03 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: /u6ckvOjvY0kLgfRDEg4O+DKI24ZwvbGLH9oWciDaMA=)
                          2: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: ZNEHf/54GGcbLnMMEuep3T/eJ2R/C8nvU+7T8vwce5s=)
                          3: 260428EC312211EEAF54935BC4F9AE02.roa (hash: wTixEWRzehZDXAFVgWBvegL9oGmk6b/f9bu0J1LmayE=)
                          4: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: YKw1rlL31hVg1Btav4cBL6K8S7mM5RTM05NklurcJqw=)
                          5: 96D63300A03F11F18845DC903A11F970.roa (hash: Qn3KV4OX+7NpADy6nTakfR6jlcCtsaFA/bop6cOJpvA=)
                          6: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: mHV4drWiwbWZHrDJ+IT3MGEnYUp3eZU0FTppnMtcX/A=)
                          7: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: lzjUVAh7lLRszwhnYV5mhy3P56XkYFR9linf2gv6LBg=)
                          8: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: RFsr1N2KTi7PJe4UAaGsmWCQvAyZ9nvIedECT3kK9OU=)
                          9: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: vGfMa0ZPpOoBHQ0F1o+Tf48+nQkSOujIt4/8SaTnKPs=)
                          10: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: lREjqsgi9HggUBrrLM7jfaDH8tUIzUUtxo/1wU+w2Vc=)
                          11: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: dGa4nkxpCNF+Op42iiE/OG275dMnkxiMapj9XKVgREA=)
                          12: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: HWCfalxDqDB7FxnntFP+aYGA4uBqfi/Gb66vT9qdTaE=)
                          13: 407F0056629711EEB706DD75C4F9AE02.roa (hash: CBayDYCrVDB4X8aklXxcS8LTplrMkFlmSyrnxd12Xrg=)
                          14: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: EG8PFOOesqWPvVdNHM52edAdaM9JSZK6Y4SC+lEpZu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9873 (0x2691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Sep 20 15:39:03 2026 GMT
            Not After : Sep 27 15:39:03 2026 GMT
        Subject: CN=6aaffe18-9443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:34:2d:ed:9c:60:cb:1c:1a:40:0c:05:f9:f5:
                    d3:5e:58:c9:3b:ba:a6:b0:a7:82:1e:ee:eb:31:78:
                    42:18:0e:67:9c:54:05:4b:7b:d8:24:56:32:98:25:
                    48:12:70:88:89:50:ed:9b:86:fe:12:ec:ab:bf:43:
                    aa:7a:f0:b1:34:15:d0:ff:0f:22:f1:7b:a8:7e:99:
                    47:ef:9d:0f:79:7b:ea:d9:42:d9:80:08:2c:74:5a:
                    c8:d3:81:cb:95:fc:f8:ad:2d:16:a3:3f:12:3d:b3:
                    0f:19:1f:a8:18:63:20:b1:d8:f2:fc:79:59:03:c6:
                    83:a9:c0:87:1d:97:9d:77:cd:5c:3e:4d:5c:6b:2f:
                    a6:c2:dd:58:d5:9f:e0:bf:ee:27:5d:6a:01:9f:cd:
                    6c:b5:d8:5a:fc:77:b2:b5:68:5e:64:b2:f0:b0:c9:
                    dd:84:19:dd:91:94:b3:07:3e:03:b2:7d:0e:a0:f5:
                    69:37:ed:32:48:83:34:21:42:14:1b:dc:0e:c1:ce:
                    cd:d7:3c:5e:38:3e:99:00:30:54:82:5d:fc:90:9a:
                    14:24:12:c0:e7:18:31:d2:42:11:8c:03:29:15:bf:
                    3b:1d:2a:36:78:45:b9:87:4a:a2:1c:9b:91:bd:c7:
                    ed:7c:80:7a:0b:c1:18:69:ac:4f:13:cc:5a:9b:75:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:56:D1:92:40:AF:FB:41:92:6F:C5:E2:1D:52:AB:6A:4A:25:49:3F
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:62:33:62:49:75:50:51:14:90:29:14:3e:cc:be:4d:1c:57:
         95:66:29:20:3f:01:d9:a5:e0:20:0e:7c:75:ab:71:29:55:c4:
         b6:dc:09:50:f2:c1:33:44:13:b7:25:c8:5a:2b:de:7b:f4:87:
         43:d1:90:e0:9d:ea:f3:22:29:b7:7a:55:f4:da:5b:61:7a:1f:
         c5:d2:00:cc:92:df:67:d8:bb:aa:e4:44:2d:db:63:a4:ca:34:
         dd:a9:a9:56:76:5e:52:34:b0:5e:cc:2c:5f:9f:2b:76:5b:cd:
         b0:ac:cf:98:df:ae:45:35:05:0d:dc:37:e1:b7:09:ee:c7:12:
         7e:8f:52:f3:14:83:5b:83:bf:07:e7:9f:a3:44:b4:66:a2:8d:
         b6:34:3c:99:82:a1:a3:a5:0d:99:e6:1f:0a:7a:50:14:56:66:
         ee:e6:28:ae:d4:2e:73:7d:62:b9:28:16:cf:bd:03:93:92:d1:
         c1:e8:20:7f:97:4e:ae:52:7d:28:7c:df:22:1a:37:58:4e:d0:
         35:e7:5c:3a:07:fe:bc:b1:73:1d:f8:2c:20:cf:20:93:e4:77:
         08:c8:27:7a:31:98:24:db:d4:9b:9a:6b:71:55:70:d2:6b:f2:
         bd:e4:52:3f:ba:04:37:9c:4d:10:71:60:a2:ed:e7:49:31:d4:
         a8:cd:39:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:14:08 2026 by rpki-client