Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          abZnA70Sqcyuez2GIJkg/w8TBqRq30St+pRcolAnHho=
Subject key identifier:   B8:89:DD:BD:46:BC:60:AA:01:1A:64:CB:09:7C:D5:22:DC:A8:3C:B6
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       2562
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          24FB
Signing time:             Fri 20 Jun 2025 15:45:33 +0000
Manifest this update:     Fri 20 Jun 2025 15:45:33 +0000
Manifest next update:     Fri 27 Jun 2025 15:45:33 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: NX729fxG8lYiqsiMmHrEQHP8HCOGwLhtLw4hh3pYJRw=)
                          2: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: 2DQNtDG5SlXbYPNKHWvlCf1LoqXbXRDiCCKULGtJnHM=)
                          3: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: BPqGgTO/FXgmhll9acyqoVIwbgNH2EbF72C/59rTKAs=)
                          4: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: W5BOpPvdDaVJRiPCvQRJeUEXAu9OuHFa28A+g1a29VM=)
                          5: 407F0056629711EEB706DD75C4F9AE02.roa (hash: PPHYcuwo/hi+gWIj/jwhtP8TpkDUisIVIpssgpxO+Uk=)
                          6: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: ssVkoQGU9abtVaOJ8QQiFzJ2u/KxDVyiUSGDeDLOq7k=)
                          7: 260428EC312211EEAF54935BC4F9AE02.roa (hash: rs1BLbvYE3DjY31zt5pMsjMWm6NZ1lEGyNnSPudZWnw=)
                          8: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: card7JNSXN/xmFN4DueLt9CEoLfIixAjl6O1VFSsoLU=)
                          9: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: ZjX79axkNC/VnRSkKPjshmIjcGsGG06UJjQxdQstgRg=)
                          10: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: uTcSN/s3jafNB4/D11q5q+/m0pypV3YLg7hL+NBlIuc=)
                          11: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: bI6DNZ+SMQoiH31SjdXczk0YB7z1qgZ9bG+qqRhYG1Q=)
                          12: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: tGAr+6Zn60awTp8cl05laafAibPgTaCeJzxGTywN05I=)
                          13: 18D20D12852511EFBE3D6E47C4F9AE02.roa (hash: Xf4WUlVOVXX5jFG9PvkmpeYeh0+vfoKZddXectuS1PA=)
                          14: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: DZxtCrPx9nVC06xsT0giYHAu0uYg4D08gJHGXJpz69w=)
                          15: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: wWAuh5kIJNSIRZFUI/17Ka/eUztNPx+QrG0g1L0q+HM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 15:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9570 (0x2562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Jun 20 15:45:33 2025 GMT
            Not After : Jun 27 15:45:33 2025 GMT
        Subject: CN=6855821d-01fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:08:8b:de:f9:df:40:af:e8:e9:2f:96:fc:
                    a0:26:f5:d9:2a:e0:03:77:e1:5a:6d:21:c3:a7:63:
                    11:45:fe:c0:b2:29:58:8f:2f:b8:55:ab:c0:2f:fb:
                    8a:72:36:d1:2e:d6:b7:73:69:da:d8:bc:96:1d:2d:
                    58:2d:63:07:bc:87:90:a7:e1:bd:3b:6a:72:fb:0c:
                    0d:c4:14:57:0f:ae:2c:c7:3d:82:bf:2a:ef:85:79:
                    6f:cb:0b:ac:60:b6:32:9b:6f:1e:b1:a8:2c:5f:0a:
                    c2:6b:a2:2b:4c:d8:28:bf:86:76:62:64:2d:eb:c8:
                    b1:64:6d:d0:dd:12:6c:b6:37:f7:c8:dc:5a:c1:0a:
                    d1:c7:f6:0e:cd:3e:14:d9:a0:8e:ca:79:c4:0c:91:
                    76:b9:23:44:8c:88:65:51:61:8f:fd:ca:cd:54:4f:
                    23:d2:41:9c:38:2e:c6:1c:90:1d:ad:96:b8:03:64:
                    6f:a3:66:04:06:36:14:a4:57:ed:e7:d5:c4:4b:78:
                    da:58:bc:a9:ba:1d:a5:d9:3a:d0:34:0c:1b:63:22:
                    1b:c5:3d:5e:ed:12:fe:ab:cb:2c:9d:48:9b:ab:48:
                    84:1e:f3:21:71:96:39:9b:d9:2d:4d:88:9b:c1:6d:
                    a5:db:d3:21:37:c5:c0:43:dc:81:86:dc:8e:92:25:
                    01:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:89:DD:BD:46:BC:60:AA:01:1A:64:CB:09:7C:D5:22:DC:A8:3C:B6
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6e:0a:db:9f:93:c7:d1:5f:6e:39:55:52:74:c7:4b:0f:6f:
         e2:fa:f7:98:f0:d8:0e:0f:fc:93:2c:53:5d:96:c7:94:af:31:
         0e:05:f2:1a:ce:41:8c:dd:95:2b:2f:ab:68:fe:89:ea:1c:90:
         aa:01:b1:8e:c6:74:be:c4:0f:b5:0d:3f:cc:73:8d:f2:47:b8:
         a6:9a:45:f0:f5:05:41:4f:d2:f1:20:65:cc:b8:66:3d:94:c9:
         5b:1c:31:5d:db:cd:25:fd:e9:8e:5a:e6:e5:39:69:42:23:b0:
         4a:ab:ac:99:54:63:f3:34:50:65:76:6f:4a:75:71:3d:c4:b3:
         9c:0c:31:16:e2:ae:51:6e:27:d3:7b:75:95:0e:51:66:02:25:
         59:2b:e2:2e:bd:19:24:14:e9:35:1e:a1:43:b4:83:f7:bb:46:
         4b:49:21:81:63:11:27:16:bd:46:79:b8:34:18:6f:95:17:35:
         0c:15:c0:67:77:0b:9b:ff:2a:8e:49:dd:be:c2:c6:10:61:80:
         d8:39:65:a4:81:f1:55:aa:7f:55:8d:f4:b4:d0:aa:00:76:10:
         89:22:ec:ee:d0:1e:eb:12:c9:ed:0e:73:de:eb:ee:dd:5b:d3:
         2c:92:8f:19:d7:34:26:78:f7:19:f5:28:01:ee:14:5c:3a:2e:
         5f:7e:3d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 02:59:23 2025 by rpki-client