Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          bz8Vub34q8/CfOL2PRefTbcEn6enUs4p9Vi1cuXEr2Y=
Subject key identifier:   D3:85:E7:37:96:02:EC:6D:0F:B3:67:3F:09:0C:EF:96:C0:15:E5:D6
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       2580
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          2518
Signing time:             Sun 10 Aug 2025 15:40:07 +0000
Manifest this update:     Sun 10 Aug 2025 15:40:06 +0000
Manifest next update:     Sun 17 Aug 2025 15:40:06 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: Z6QY40wJg6PwekMvfV8KjiXwJg2i7+U5v6/x2B/dShA=)
                          2: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: 2DQNtDG5SlXbYPNKHWvlCf1LoqXbXRDiCCKULGtJnHM=)
                          3: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: BPqGgTO/FXgmhll9acyqoVIwbgNH2EbF72C/59rTKAs=)
                          4: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: W5BOpPvdDaVJRiPCvQRJeUEXAu9OuHFa28A+g1a29VM=)
                          5: 407F0056629711EEB706DD75C4F9AE02.roa (hash: PPHYcuwo/hi+gWIj/jwhtP8TpkDUisIVIpssgpxO+Uk=)
                          6: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: ssVkoQGU9abtVaOJ8QQiFzJ2u/KxDVyiUSGDeDLOq7k=)
                          7: 260428EC312211EEAF54935BC4F9AE02.roa (hash: rs1BLbvYE3DjY31zt5pMsjMWm6NZ1lEGyNnSPudZWnw=)
                          8: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: UsIOkhaB3Ku4WNkmAUrHYHwGz8u8rCny1doDJQc+IzY=)
                          9: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: ZjX79axkNC/VnRSkKPjshmIjcGsGG06UJjQxdQstgRg=)
                          10: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: uTcSN/s3jafNB4/D11q5q+/m0pypV3YLg7hL+NBlIuc=)
                          11: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: bI6DNZ+SMQoiH31SjdXczk0YB7z1qgZ9bG+qqRhYG1Q=)
                          12: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: tGAr+6Zn60awTp8cl05laafAibPgTaCeJzxGTywN05I=)
                          13: 18D20D12852511EFBE3D6E47C4F9AE02.roa (hash: Xf4WUlVOVXX5jFG9PvkmpeYeh0+vfoKZddXectuS1PA=)
                          14: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: DZxtCrPx9nVC06xsT0giYHAu0uYg4D08gJHGXJpz69w=)
                          15: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: wWAuh5kIJNSIRZFUI/17Ka/eUztNPx+QrG0g1L0q+HM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9600 (0x2580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Aug 10 15:40:06 2025 GMT
            Not After : Aug 17 15:40:06 2025 GMT
        Subject: CN=6898bd57-15b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:47:76:3f:e3:d9:16:16:48:87:78:a9:55:29:
                    f3:ed:14:4e:53:c3:cf:6b:e4:39:7d:13:5f:ac:fb:
                    61:bb:59:63:c5:a2:b8:76:60:fb:5a:16:6d:eb:8f:
                    33:5d:49:4e:49:34:4e:7a:ea:c6:20:4c:de:ab:f5:
                    d3:5a:e5:2b:29:8d:53:b4:2e:d1:c5:b6:8e:60:44:
                    4d:29:c3:3c:9e:b3:48:0a:d0:4d:93:fc:ac:a7:e2:
                    27:0b:a7:5f:94:8d:80:ce:3e:95:4e:6e:2d:a2:ad:
                    27:04:0a:1c:d1:22:b5:46:71:62:d9:8b:36:0f:4f:
                    67:7c:e7:bd:fb:48:64:6e:c4:d0:b0:a2:a5:f3:8e:
                    68:e3:6f:2b:43:50:e9:7a:b7:ac:e8:de:34:f0:b4:
                    87:54:8a:45:86:a8:72:f7:e7:3f:4b:26:fc:65:ce:
                    41:20:10:b8:e3:b6:0d:80:54:bd:1d:dd:5e:4e:c8:
                    9f:50:59:a9:09:83:d4:2f:b1:99:55:6d:1f:15:92:
                    b3:35:af:13:53:44:ee:cf:fa:de:4a:28:35:16:cf:
                    b5:85:60:8e:fd:79:20:0e:e4:73:76:11:67:40:44:
                    99:7e:4c:38:43:6b:f6:9e:c7:c7:e2:64:fc:14:9a:
                    3b:af:5e:ec:7d:2a:2c:a5:04:ad:fa:6f:b8:6c:ca:
                    20:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:85:E7:37:96:02:EC:6D:0F:B3:67:3F:09:0C:EF:96:C0:15:E5:D6
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:5b:61:f6:08:bc:36:5a:03:cf:15:0f:67:a5:7b:5d:21:c2:
         e4:18:d8:85:ab:fc:1e:7f:84:c9:ca:bc:a0:30:d8:3f:e1:db:
         8d:52:57:d8:c7:ee:b2:63:8a:f6:83:24:a2:71:cc:37:f4:84:
         34:e4:3a:3d:d5:22:c1:d3:1b:84:eb:fc:e2:45:55:7d:5f:1d:
         62:19:4f:7a:90:71:4d:bf:40:9b:f7:01:be:8c:19:21:f4:68:
         10:08:67:32:c7:8e:c4:cf:8a:a6:7c:f8:02:7f:91:80:5d:dc:
         8d:9c:4e:aa:e3:ce:09:8e:a4:de:e6:55:14:c7:e8:08:e1:db:
         93:d2:02:67:03:0a:cf:6b:1b:6f:75:fe:10:09:da:a5:fd:91:
         5b:81:f6:14:04:2e:ae:43:50:0b:b1:3a:73:08:01:6c:9c:1a:
         be:f5:41:30:34:81:e9:d3:da:53:9a:f6:e9:82:a3:b2:00:c0:
         d7:6d:2b:12:8a:76:db:44:14:53:21:bf:07:35:0b:8f:b7:f3:
         a9:1c:bd:21:dc:80:32:d3:c0:d3:ae:a2:37:5b:d8:b7:83:41:
         ac:19:d3:ff:81:8c:07:bf:8d:bc:1a:1d:e8:f0:21:04:dc:f6:
         be:6c:76:cf:b6:21:4b:f9:f5:cd:9e:64:71:a1:db:4c:a6:c7:
         20:b1:c1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:17:54 2025 by rpki-client