Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          2fj4IVU1fKYLBDVxX/BxbfIHywuM97ban36ZHCDYKno=
Subject key identifier:   86:FD:56:FE:FE:AF:B9:F0:CB:B2:91:E8:2E:8F:58:C2:13:74:97:CC
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       2650
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          25C0
Signing time:             Fri 12 Jun 2026 15:40:16 +0000
Manifest this update:     Fri 12 Jun 2026 15:40:15 +0000
Manifest next update:     Fri 19 Jun 2026 15:40:15 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: zFXpBko8gJ/4t2BmIOiKTdXmVdDiSR2TLuFzdIf07DQ=)
                          2: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: ZNEHf/54GGcbLnMMEuep3T/eJ2R/C8nvU+7T8vwce5s=)
                          3: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: lzjUVAh7lLRszwhnYV5mhy3P56XkYFR9linf2gv6LBg=)
                          4: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: YKw1rlL31hVg1Btav4cBL6K8S7mM5RTM05NklurcJqw=)
                          5: 407F0056629711EEB706DD75C4F9AE02.roa (hash: CBayDYCrVDB4X8aklXxcS8LTplrMkFlmSyrnxd12Xrg=)
                          6: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: vGfMa0ZPpOoBHQ0F1o+Tf48+nQkSOujIt4/8SaTnKPs=)
                          7: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: rfzmnvtTCVcsWe0VxWp8g6Tq6UZUduUAmCFtAuAiJ3A=)
                          8: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: RFsr1N2KTi7PJe4UAaGsmWCQvAyZ9nvIedECT3kK9OU=)
                          9: 260428EC312211EEAF54935BC4F9AE02.roa (hash: wTixEWRzehZDXAFVgWBvegL9oGmk6b/f9bu0J1LmayE=)
                          10: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: dGa4nkxpCNF+Op42iiE/OG275dMnkxiMapj9XKVgREA=)
                          11: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: lREjqsgi9HggUBrrLM7jfaDH8tUIzUUtxo/1wU+w2Vc=)
                          12: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: EG8PFOOesqWPvVdNHM52edAdaM9JSZK6Y4SC+lEpZu8=)
                          13: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: HWCfalxDqDB7FxnntFP+aYGA4uBqfi/Gb66vT9qdTaE=)
                          14: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: mHV4drWiwbWZHrDJ+IT3MGEnYUp3eZU0FTppnMtcX/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9808 (0x2650)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jun 12 15:40:15 2026 GMT
            Not After : Jun 19 15:40:15 2026 GMT
        Subject: CN=6a2c285f-596e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:75:c5:3e:7d:34:91:54:ad:76:22:79:f5:16:
                    b6:e4:73:0a:a6:d8:9d:c9:a1:6a:d4:6c:e8:2d:d3:
                    26:66:07:4b:32:48:8d:5f:4e:59:cb:9d:b5:97:26:
                    58:bc:21:be:25:90:03:46:10:d6:ed:2c:bc:f7:d6:
                    18:ad:51:a3:a1:13:b8:fa:04:90:0c:90:92:24:09:
                    2a:2d:2d:11:f3:83:f9:15:56:b7:b5:5d:a0:ab:d2:
                    ae:4e:fa:fb:0b:e0:b7:cd:45:a4:f3:bf:8e:2b:80:
                    88:83:28:2a:a9:3c:20:3c:c1:e7:ec:74:a0:8b:c6:
                    9d:03:39:b1:f7:32:5e:f3:63:36:0a:8f:17:47:50:
                    67:26:49:79:dd:31:ac:75:c2:ad:83:65:4a:1c:75:
                    80:04:b5:a1:44:b4:b3:37:01:f8:5a:5c:40:08:78:
                    d2:c1:93:f2:07:1b:cc:e1:1e:1d:cc:38:25:83:41:
                    7b:9d:c1:41:6c:15:9a:d9:14:b5:8f:96:48:30:6b:
                    05:c0:c4:5a:bf:25:2b:e3:4a:93:93:bd:3f:63:16:
                    60:6d:af:3d:5b:ab:f0:ea:db:b6:15:63:dc:ea:63:
                    78:d1:b9:9d:2f:1d:29:e4:96:34:f9:0c:c7:f3:22:
                    33:42:29:2a:bb:30:9d:be:d0:57:5e:a9:32:0b:9b:
                    86:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FD:56:FE:FE:AF:B9:F0:CB:B2:91:E8:2E:8F:58:C2:13:74:97:CC
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:bb:3a:dc:3a:14:39:41:9c:2e:28:83:3c:90:55:ed:75:13:
         a4:5e:ce:92:fc:36:59:bb:9c:a3:2a:f6:3f:16:86:e3:70:b5:
         f9:e6:03:1f:83:64:80:b1:19:6c:2f:6c:29:59:3a:5a:00:b6:
         cb:68:50:e4:73:18:5e:0b:62:65:5d:09:3b:68:b6:09:fd:f6:
         84:af:83:96:b3:34:8b:c0:08:05:ac:4f:c5:8a:d4:79:96:9a:
         27:7b:c1:db:1c:8d:57:65:eb:c3:7c:c5:ce:e7:e5:5e:41:29:
         72:7f:e8:ed:88:69:f9:b0:9c:57:d2:a7:cc:6a:25:76:e8:bc:
         83:f6:b8:7c:14:0f:3a:4b:2e:32:1d:41:7f:c8:96:05:a1:f1:
         20:af:cd:76:02:18:75:a2:b0:c5:12:57:e1:7f:8e:d8:5e:eb:
         95:ec:38:80:06:92:c0:15:a2:a8:5e:83:18:2e:1b:ef:2f:a1:
         2d:9b:6c:1e:88:2a:d3:c0:31:fe:db:0b:f3:5b:b0:95:39:34:
         3a:1e:3c:74:a6:b8:9c:a4:6f:f0:d5:4e:d1:14:41:cf:b0:62:
         6e:4a:3c:e1:6e:88:a5:6b:ff:e5:bd:64:aa:12:c4:51:e5:ee:
         ce:ab:db:65:88:6c:5a:09:c7:3a:e2:70:19:e0:4b:c4:4b:0b:
         10:02:b8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:41:29 2026 by rpki-client