Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          sqbGr4Ko0lABel+Fy5TOUbqiPGw+Pqk9+HL0TT+yLT4=
Subject key identifier:   09:C7:2F:2A:12:BB:46:49:87:ED:40:69:E6:8F:FC:2D:5B:C1:B1:BE
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       2625
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          2595
Signing time:             Tue 24 Mar 2026 15:38:32 +0000
Manifest this update:     Tue 24 Mar 2026 15:38:31 +0000
Manifest next update:     Tue 31 Mar 2026 15:38:31 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: cFvgeg3XRBGZGhVybrAZTHsnJ8rIWRXIu7zwNj/OSnc=)
                          2: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: lREjqsgi9HggUBrrLM7jfaDH8tUIzUUtxo/1wU+w2Vc=)
                          3: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: YKw1rlL31hVg1Btav4cBL6K8S7mM5RTM05NklurcJqw=)
                          4: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: ZNEHf/54GGcbLnMMEuep3T/eJ2R/C8nvU+7T8vwce5s=)
                          5: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: dGa4nkxpCNF+Op42iiE/OG275dMnkxiMapj9XKVgREA=)
                          6: 407F0056629711EEB706DD75C4F9AE02.roa (hash: CBayDYCrVDB4X8aklXxcS8LTplrMkFlmSyrnxd12Xrg=)
                          7: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: vGfMa0ZPpOoBHQ0F1o+Tf48+nQkSOujIt4/8SaTnKPs=)
                          8: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: HWCfalxDqDB7FxnntFP+aYGA4uBqfi/Gb66vT9qdTaE=)
                          9: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: lzjUVAh7lLRszwhnYV5mhy3P56XkYFR9linf2gv6LBg=)
                          10: 260428EC312211EEAF54935BC4F9AE02.roa (hash: wTixEWRzehZDXAFVgWBvegL9oGmk6b/f9bu0J1LmayE=)
                          11: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: EG8PFOOesqWPvVdNHM52edAdaM9JSZK6Y4SC+lEpZu8=)
                          12: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: rfzmnvtTCVcsWe0VxWp8g6Tq6UZUduUAmCFtAuAiJ3A=)
                          13: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: mHV4drWiwbWZHrDJ+IT3MGEnYUp3eZU0FTppnMtcX/A=)
                          14: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: RFsr1N2KTi7PJe4UAaGsmWCQvAyZ9nvIedECT3kK9OU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9765 (0x2625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Mar 24 15:38:31 2026 GMT
            Not After : Mar 31 15:38:31 2026 GMT
        Subject: CN=69c2aff8-a3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:a0:ac:22:01:8f:be:74:6a:65:1a:29:bd:
                    f0:47:fd:7f:24:80:26:19:d9:cd:c6:2f:94:02:ef:
                    75:e7:cb:10:1f:43:6b:8e:6d:34:cf:54:6d:c4:84:
                    97:d0:a8:67:32:5a:37:64:aa:33:70:b4:42:99:a4:
                    7a:1d:45:e5:aa:50:b0:0c:62:d9:8e:69:df:ab:ea:
                    f4:03:07:0f:49:14:9d:8f:4d:81:90:88:03:09:e3:
                    5b:91:17:ac:20:88:14:dc:d6:43:34:f7:bc:7d:00:
                    2d:51:48:09:e6:14:a2:40:86:c1:43:25:bd:c6:7f:
                    78:60:48:3b:ed:d0:05:2d:86:49:9c:23:ff:4c:7a:
                    ce:77:ab:04:ed:07:3e:0c:31:97:27:c7:cf:da:a0:
                    ef:d1:d1:5f:6c:2f:5d:fe:cd:6e:71:c3:7b:7f:9e:
                    8a:26:4c:4b:ec:44:e5:ea:24:75:14:1a:37:d1:7e:
                    8c:69:d2:e0:72:08:ea:4f:18:58:3d:40:5e:90:ce:
                    7c:71:09:3d:39:58:87:f4:9e:75:02:f2:d7:40:9b:
                    e0:ad:43:94:c1:16:fb:7a:b4:ba:4a:5b:b7:21:7f:
                    bd:3e:48:3c:18:fc:dd:8f:98:46:bd:e5:b0:ef:dd:
                    09:db:51:d1:67:47:3b:80:9f:6e:d5:dc:64:4d:00:
                    d2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C7:2F:2A:12:BB:46:49:87:ED:40:69:E6:8F:FC:2D:5B:C1:B1:BE
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:47:31:1c:c2:5b:e4:b0:09:5f:d0:ff:2b:b1:3c:c3:0a:d5:
         53:54:bf:f8:cd:55:7b:e9:e0:60:b4:3f:c7:43:9c:01:49:f8:
         43:99:c6:a8:c5:b7:59:e3:b2:15:81:dd:af:ec:1b:8b:d3:ab:
         14:4a:d1:c0:ba:1c:4e:48:b0:94:64:86:70:42:22:40:81:95:
         19:eb:0b:85:0e:bf:ed:70:ba:e1:4c:96:e7:c2:bb:e6:03:90:
         5c:ef:bc:bc:b2:72:0b:0c:fd:3c:e9:d4:56:fc:75:14:f5:36:
         41:15:a1:7b:2b:a5:8e:e3:8f:c1:c1:73:d0:54:95:b8:bb:de:
         fd:d1:11:b9:a2:72:f3:2c:3b:35:be:6a:41:01:52:71:56:4a:
         55:fa:30:1c:8a:51:30:c4:90:a2:77:71:6d:e9:0c:63:4d:72:
         ab:ea:fe:97:1c:4e:c0:52:33:14:18:b8:44:2b:96:22:95:15:
         6d:9f:6f:1e:de:9c:56:33:60:db:ee:b8:8d:8c:ea:c5:11:ec:
         a3:7c:86:0f:6a:80:13:e0:5c:20:58:6b:dc:ef:c2:a1:b5:3e:
         96:86:af:28:4e:70:f8:03:d5:28:98:ad:23:88:ed:e1:56:bc:
         b1:4a:ce:0c:d4:24:7f:ab:54:67:d3:b8:dd:7a:ec:40:c1:45:
         e9:61:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:51:27 2026 by rpki-client