Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          FSpV/ab07CTi+88TfBn5XP8AaMu/Rxse8WuGmth9Iww=
Subject key identifier:   62:B5:BD:4F:76:FB:4B:A3:06:8A:C6:8A:32:68:35:8F:08:0A:11:A2
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       2632
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          25A2
Signing time:             Sat 18 Apr 2026 15:38:37 +0000
Manifest this update:     Sat 18 Apr 2026 15:38:36 +0000
Manifest next update:     Sat 25 Apr 2026 15:38:36 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: UIePkn6NptYcnxg9KwNoonGEsHjxRi8Jp2mNy4kdH1A=)
                          2: 260428EC312211EEAF54935BC4F9AE02.roa (hash: wTixEWRzehZDXAFVgWBvegL9oGmk6b/f9bu0J1LmayE=)
                          3: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: ZNEHf/54GGcbLnMMEuep3T/eJ2R/C8nvU+7T8vwce5s=)
                          4: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: EG8PFOOesqWPvVdNHM52edAdaM9JSZK6Y4SC+lEpZu8=)
                          5: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: lREjqsgi9HggUBrrLM7jfaDH8tUIzUUtxo/1wU+w2Vc=)
                          6: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: RFsr1N2KTi7PJe4UAaGsmWCQvAyZ9nvIedECT3kK9OU=)
                          7: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: YKw1rlL31hVg1Btav4cBL6K8S7mM5RTM05NklurcJqw=)
                          8: 407F0056629711EEB706DD75C4F9AE02.roa (hash: CBayDYCrVDB4X8aklXxcS8LTplrMkFlmSyrnxd12Xrg=)
                          9: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: rfzmnvtTCVcsWe0VxWp8g6Tq6UZUduUAmCFtAuAiJ3A=)
                          10: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: vGfMa0ZPpOoBHQ0F1o+Tf48+nQkSOujIt4/8SaTnKPs=)
                          11: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: lzjUVAh7lLRszwhnYV5mhy3P56XkYFR9linf2gv6LBg=)
                          12: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: dGa4nkxpCNF+Op42iiE/OG275dMnkxiMapj9XKVgREA=)
                          13: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: HWCfalxDqDB7FxnntFP+aYGA4uBqfi/Gb66vT9qdTaE=)
                          14: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: mHV4drWiwbWZHrDJ+IT3MGEnYUp3eZU0FTppnMtcX/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 15:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9778 (0x2632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Apr 18 15:38:36 2026 GMT
            Not After : Apr 25 15:38:36 2026 GMT
        Subject: CN=69e3a57d-d7d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:88:bd:fd:4b:9a:31:c0:d1:ea:d2:6b:cb:
                    ca:3a:74:81:54:82:61:16:dc:f4:e8:75:fb:1c:01:
                    eb:75:b6:15:59:97:5a:c5:3c:61:e8:06:72:37:89:
                    7a:05:93:c3:a6:7c:d5:5f:54:a7:e7:92:ae:35:91:
                    d3:fd:c3:f3:a3:fb:f0:2d:03:67:0a:c8:9f:41:4b:
                    cf:4e:db:64:cb:b2:25:f1:be:8e:db:25:75:6f:dc:
                    56:6d:cb:7c:a4:22:dd:a0:9e:6d:4a:ed:3d:ce:72:
                    54:82:b2:ec:bc:f3:01:07:b3:e5:34:38:fb:f8:21:
                    72:dd:0e:5a:2a:08:c3:95:64:da:13:9e:06:d9:64:
                    27:6e:19:30:d8:0f:e1:7b:ec:46:ec:bb:a4:2d:85:
                    32:40:38:63:d8:9e:d5:3e:10:d6:8a:5a:17:db:36:
                    69:4b:8f:77:ce:e8:d9:95:e2:21:d7:4d:37:3f:7f:
                    ad:29:96:2f:ce:7a:6f:4c:37:1f:ad:db:7b:14:ab:
                    b8:10:04:a6:ba:00:f5:2c:a4:3e:b5:9f:59:df:6d:
                    20:3f:43:ba:e3:08:7b:7d:c4:ef:4a:b0:04:7c:79:
                    b0:c0:1d:8b:a9:61:51:02:aa:30:62:ac:70:44:ce:
                    8b:c1:b8:86:dc:cd:de:74:6e:26:49:ab:17:3e:67:
                    73:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B5:BD:4F:76:FB:4B:A3:06:8A:C6:8A:32:68:35:8F:08:0A:11:A2
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:be:0f:dd:49:7d:91:85:43:04:4c:9e:9b:76:7f:a3:bf:63:
         97:28:60:60:30:ce:33:61:58:2a:ac:45:ed:6a:88:fb:c0:9c:
         f2:a7:13:b4:5f:8d:f7:5c:ac:aa:1d:a4:28:75:e8:8a:e6:38:
         1a:b5:dd:0c:34:3c:16:29:f2:56:87:51:9c:99:a7:90:b9:e1:
         34:8f:42:6e:a0:f2:dc:22:44:dc:77:10:00:ec:57:01:39:97:
         4c:91:5a:93:96:71:78:21:b9:f5:34:72:e8:86:9b:ed:3d:05:
         70:0d:5f:2a:be:95:45:07:9f:c2:eb:50:1f:f1:c9:95:f0:63:
         c5:6e:77:e6:7a:c3:c9:17:d1:9c:91:52:fe:8c:9a:fc:5c:22:
         c3:04:0c:6f:6c:8d:5e:65:fe:8b:19:2e:ce:25:d0:2e:89:b6:
         55:17:21:11:cf:32:de:5f:d8:af:3a:be:ee:1f:ad:69:95:5f:
         1c:97:be:00:b2:59:9c:6e:5a:f9:a0:f5:47:49:ac:80:35:e9:
         4d:23:6a:3f:7f:20:22:b2:01:22:60:3d:21:75:9e:e6:6e:55:
         f4:73:a5:cf:08:c5:38:6d:5f:7c:56:b7:78:ae:02:e6:c0:6d:
         73:3e:d4:8a:0b:b7:b0:05:74:74:77:0a:b7:a6:dd:f9:15:3a:
         7e:31:a6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:39:20 2026 by rpki-client