Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
File:                     QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json)
Hash identifier:          qFBtxi60QMdF3MGM6YgIuCBX8ne544NGiv9D5q6J1zM=
Subject key identifier:   52:18:5A:D6:CC:59:11:53:70:DC:94:99:79:BE:E7:5C:D3:DE:E2:B0
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0E4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
Manifest number:          0D2A
Signing time:             Thu 24 Sep 2026 18:41:23 +0000
Manifest this update:     Thu 24 Sep 2026 18:41:22 +0000
Manifest next update:     Thu 01 Oct 2026 18:41:22 +0000
Files and hashes:         1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: TkpDGHnt2uA5uIOPxM3j05ml3L3ch1HUXU7JHh/KcDY=)
                          2: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: uLT99LvREt6aFgLq+8J5+/4C4Z0AHsSdTIhcGHc+DZg=)
                          3: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: wyS0hB9hlamFhnUTh6Gv6KcrrBw3EQZa9bUf+tLTABQ=)
                          4: BB3B63A83A7011F1B365A8EDB1833773.roa (hash: rrNm2V87UUk3ZtAA1EOIUlvBXqSc+wZlGyp0mTMptsA=)
                          5: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: uui58eIkIAuoIfjCf5IA5jNvQTdVLqnOyu4QWW+fdPU=)
                          6: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: PCXWhCBdOz3wuM8WU55B1FYMT0DwN0M40X705jCXOcQ=)
                          7: D79FB38AAB6511F1A0EA4F9E3B11F970.roa (hash: /w9cMLFs3AmXiKviME1yYbjMu1F1JmT7vGZdeuDc8m8=)
                          8: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: i5ROrzKB1s+VCKVSWpJPv8NGaUfssmlckuMKuKCQzg4=)
                          9: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: Nisqq4Q0qjVEubmWisYThrjO8ZKrL4odD75LU3tphLs=)
                          10: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: 0NXtzAL1o+tarKa4oNc7xxhauxSJ0WEZHKYx7ZTMEWI=)
                          11: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: e7VhcfQT9ruvv4CGZkrGsmAxeo+APLPyU8Ze+kwj1t4=)
                          12: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: eh/7xK3jzeTfsbyM/J4kfcM/+VwQ8Z7/19vJJZdyK1Y=)
                          13: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: aJpPvoSGRVMA94Dw8tXt33zHeGMuxciJSkooTeVqXLA=)
                          14: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: sHM4xXld7uDeHu4KE4YRCWi+rdXGTKPH7QzaRU3HxOU=)
                          15: 5CBF3F2A540B11F1B7C20C5592833773.roa (hash: 1RR4rXrGdgVkusSgQXAk0hFyo7p3RZsSCUOiYGlL9OQ=)
                          16: 6BB6356086F111F19E006003A7EE528E.roa (hash: 8E4lWe8eMXTQftSqErp6AT1u7W/ptR1bQS6g7D5lpVs=)
                          17: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: TWadmcrZewtuAgz2VI+NPqZM8R7/PZMSyZJSCwVn5T0=)
                          18: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Z79rrvAX+MkAU7RIj82HMSiIMnnHt8DRxj3iIlw1SGs=)
                          19: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: e3i2wusdoLzTSROJLMycuqmh4b9nxg7+8W+M3MY32nk=)
                          20: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: yc3SgJhB9U1lGAckaKIVNdgap51jHeAdYVySNP13Icc=)
                          21: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: SvB+QsV4btdCFW7i059dWy1bkAp62n7wxY/pgRJzLzk=)
                          22: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: iSPArCekR6M/cWSzzjFrByEv9qSybnPOARzA3B9QRaY=)
                          23: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: C1CK+9M/ckvpPGWd0ysVo6YESQAEhbu/xrQHT/N9P6Q=)
                          24: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: pVH2bMGC7+464gDRV/z0xb8UJ/QPCj/ZW97Q6jJEWrE=)
                          25: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: /PC8S/6p0cKFfDtq1mZfKqLDeu+/nUGuOGrYhA617sY=)
                          26: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: d51m3hjXY2TezXxt2Mgw2qLO9oFLWxyGtgPvE/O7bjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3659 (0xe4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Sep 24 18:41:22 2026 GMT
            Not After : Oct  1 18:41:22 2026 GMT
        Subject: CN=6ab56ed3-ec38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:ea:55:c8:28:48:e5:4c:04:17:3e:96:a0:
                    f8:93:08:78:dd:6d:68:7f:57:42:02:84:91:09:6e:
                    f9:7f:ea:4e:09:a6:27:a3:9f:8a:30:22:df:2a:9b:
                    d2:b4:32:47:78:9c:f8:39:94:a5:5f:19:0f:84:d6:
                    5c:67:5a:8e:02:df:6f:23:34:d5:61:be:fa:99:66:
                    7e:7e:1e:05:93:52:2f:ce:ad:43:04:3f:be:3b:14:
                    11:9d:0f:a1:ba:90:77:32:07:2a:10:28:da:11:26:
                    2c:bd:2f:28:45:a0:28:1f:9e:5c:9c:83:e9:b8:7d:
                    3c:e6:c1:53:a7:30:5e:ad:72:ac:73:77:d8:31:94:
                    d2:9b:79:59:0d:32:24:db:65:dc:e0:1c:b6:cc:10:
                    0b:7f:ae:77:83:b2:6d:d1:1c:61:06:9f:fc:ba:42:
                    2b:78:67:fd:8b:fd:ad:cc:53:de:36:31:24:f9:68:
                    99:a7:97:4b:70:e7:62:f8:de:af:02:0c:aa:1b:a0:
                    a4:ae:3a:22:22:c5:2d:c6:e0:a9:ed:72:ce:5e:3d:
                    35:a3:a1:0e:a8:6e:73:1e:a0:70:cf:91:aa:a2:55:
                    e9:ed:91:c7:79:76:59:c3:af:35:ab:a0:00:1c:68:
                    aa:a3:30:1a:21:2d:ee:c0:23:a2:25:8b:7e:20:29:
                    76:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:18:5A:D6:CC:59:11:53:70:DC:94:99:79:BE:E7:5C:D3:DE:E2:B0
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e0:42:01:48:60:73:fd:56:20:99:95:63:c9:0b:a3:be:11:
         8b:10:98:f0:bd:f9:32:89:31:3b:25:ac:16:21:53:8e:ce:82:
         26:16:0d:6f:4c:2e:03:55:a8:82:7b:60:47:d2:60:b4:6b:2e:
         dc:7b:8a:62:ee:0f:ae:45:be:97:c5:9e:ee:c9:bb:f8:fa:00:
         3d:e7:57:cc:4d:a8:9f:f1:6f:89:72:65:1b:14:9a:0e:80:51:
         4a:ec:f6:2e:33:ed:f6:4a:54:82:44:86:98:7f:72:e8:3d:1b:
         7e:a3:45:b8:72:9c:4a:0e:d3:3a:c0:73:06:29:59:d8:0c:8f:
         c2:f5:68:69:83:4b:a9:5c:d0:a6:ed:f3:a7:b5:7f:0c:f6:54:
         17:8f:43:44:d3:25:fb:d8:2d:b1:07:7b:f1:c8:82:20:40:14:
         32:44:5a:46:75:1d:15:4f:33:36:fc:0f:55:ed:bc:56:00:aa:
         13:e2:e9:b6:47:bd:e0:d2:8e:49:c5:f4:c5:c5:4a:2e:cd:fe:
         c6:f1:e9:e2:c1:6f:08:d2:a8:56:90:e0:3c:ef:33:e2:94:de:
         15:82:90:a9:c3:f1:90:1d:0e:fa:21:8f:91:48:fb:f8:79:c7:
         49:b2:24:dd:09:9e:38:05:df:5d:87:52:64:8d:b6:e1:6a:c9:
         74:5d:4b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:31:29 2026 by rpki-client