Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          pOsW3svq1mgISL18F1X9bn2+YEog8uigA3g4qhHthZU=
Subject key identifier:   A4:B5:A8:EB:0D:78:34:45:1C:64:89:B9:F4:05:7F:04:C9:00:A4:CD
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       263E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          25AE
Signing time:             Tue 12 May 2026 15:42:03 +0000
Manifest this update:     Tue 12 May 2026 15:42:03 +0000
Manifest next update:     Tue 19 May 2026 15:42:03 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: owVz+6kWDDOkyvMWkec1eFfqyCfzOFFZRZBBoFHJNrA=)
                          2: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: RFsr1N2KTi7PJe4UAaGsmWCQvAyZ9nvIedECT3kK9OU=)
                          3: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: dGa4nkxpCNF+Op42iiE/OG275dMnkxiMapj9XKVgREA=)
                          4: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: rfzmnvtTCVcsWe0VxWp8g6Tq6UZUduUAmCFtAuAiJ3A=)
                          5: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: lzjUVAh7lLRszwhnYV5mhy3P56XkYFR9linf2gv6LBg=)
                          6: 407F0056629711EEB706DD75C4F9AE02.roa (hash: CBayDYCrVDB4X8aklXxcS8LTplrMkFlmSyrnxd12Xrg=)
                          7: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: mHV4drWiwbWZHrDJ+IT3MGEnYUp3eZU0FTppnMtcX/A=)
                          8: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: HWCfalxDqDB7FxnntFP+aYGA4uBqfi/Gb66vT9qdTaE=)
                          9: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: ZNEHf/54GGcbLnMMEuep3T/eJ2R/C8nvU+7T8vwce5s=)
                          10: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: YKw1rlL31hVg1Btav4cBL6K8S7mM5RTM05NklurcJqw=)
                          11: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: vGfMa0ZPpOoBHQ0F1o+Tf48+nQkSOujIt4/8SaTnKPs=)
                          12: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: lREjqsgi9HggUBrrLM7jfaDH8tUIzUUtxo/1wU+w2Vc=)
                          13: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: EG8PFOOesqWPvVdNHM52edAdaM9JSZK6Y4SC+lEpZu8=)
                          14: 260428EC312211EEAF54935BC4F9AE02.roa (hash: wTixEWRzehZDXAFVgWBvegL9oGmk6b/f9bu0J1LmayE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9790 (0x263e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: May 12 15:42:03 2026 GMT
            Not After : May 19 15:42:03 2026 GMT
        Subject: CN=6a034a4b-2b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:a0:1a:b0:13:b3:a0:27:b5:bb:d9:fc:d7:
                    fb:f0:6b:74:92:38:c4:2b:48:60:27:9d:75:e8:99:
                    eb:db:e4:cf:39:f5:e0:89:26:9b:97:09:d7:37:1c:
                    6a:28:23:69:d2:f3:72:e4:5d:dc:f1:27:19:63:3d:
                    ed:03:db:7d:a2:ce:a6:9f:50:18:79:80:a1:8b:cc:
                    80:6c:9e:76:83:22:e3:f5:ad:df:b3:e4:70:b5:70:
                    b3:44:aa:f8:fe:8a:5d:82:9a:82:72:50:2f:38:1e:
                    19:48:0f:04:58:34:7a:5e:ba:a7:23:11:a7:4f:13:
                    9c:8d:29:13:9e:82:df:ec:d1:5e:b8:aa:88:04:8b:
                    1e:07:05:9d:60:f7:0f:ea:7e:b7:24:b8:9a:4c:4c:
                    dc:44:94:3c:f5:95:11:d8:2d:f3:53:57:3a:99:f3:
                    d9:42:ac:65:8f:c4:17:ac:6a:60:b6:cb:aa:f4:f3:
                    00:81:34:ad:6b:fc:07:e3:1e:8b:94:83:01:5b:13:
                    53:1a:05:8f:13:cc:a8:93:da:29:53:bc:9d:9e:6c:
                    44:f3:f0:dd:a3:63:6e:41:19:fb:b5:d9:f9:90:ce:
                    f6:78:f2:fc:cd:61:00:3b:c2:1c:f1:cd:da:e2:65:
                    fa:36:ca:3c:c2:a8:53:c6:eb:3a:4b:a7:6f:5e:48:
                    38:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B5:A8:EB:0D:78:34:45:1C:64:89:B9:F4:05:7F:04:C9:00:A4:CD
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:5d:c1:c8:56:18:12:95:d2:ed:71:e5:7d:fc:36:86:ce:ee:
         d2:c0:86:98:ea:2d:9b:8a:a9:52:40:cb:72:71:db:95:ac:4f:
         62:4c:57:0c:c8:59:b5:d1:59:14:3e:19:2a:cf:0a:79:15:a8:
         0f:a6:5a:d6:92:33:22:71:dc:39:7b:10:a7:7b:c4:3d:31:b8:
         97:4c:37:8b:f1:13:e2:3a:f5:f7:9d:42:7f:f2:d3:ae:c5:8b:
         62:5e:0d:08:a7:88:1a:6b:26:91:bb:80:8b:bd:79:c9:71:24:
         d7:6d:02:f3:6b:25:47:c5:44:1e:13:22:b5:9f:6a:c5:f1:d4:
         89:e4:b0:e8:b5:42:3e:42:d7:bc:95:e5:45:6a:c2:92:c7:46:
         f4:dd:e2:c5:f3:b7:3b:0d:cf:24:66:0d:04:96:0a:0a:01:18:
         19:05:da:0e:a9:71:b4:c1:e4:22:9a:66:c3:66:ad:60:b1:00:
         66:65:10:5a:8c:b6:67:41:4d:31:c5:50:44:eb:3f:fe:e7:40:
         2a:eb:84:01:16:33:c4:c4:1f:89:9c:23:1b:d8:f0:68:be:e2:
         ab:0c:06:60:96:be:f4:b2:68:13:bb:66:71:4c:74:8e:b8:4b:
         b3:86:d4:9e:c6:9a:6d:11:49:3e:d4:45:fb:48:8e:cd:4d:01:
         37:a2:a4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:46:55 2026 by rpki-client