Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
File:                     QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json)
Hash identifier:          iWF4btuO51ecl/VnH1lxWC9sNqtpVromX9jnmguPChc=
Subject key identifier:   D1:B0:BD:A9:90:7B:4D:04:2C:DA:48:7C:A6:8C:BB:96:C8:63:B0:D3
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0DF9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
Manifest number:          0CDE
Signing time:             Tue 12 May 2026 18:53:16 +0000
Manifest this update:     Tue 12 May 2026 18:53:15 +0000
Manifest next update:     Tue 19 May 2026 18:53:15 +0000
Files and hashes:         1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: s0r6mh6r+Pedh4OdO5cK3xrz56Ch4FjLKZy+wsZAs/Y=)
                          2: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: sHM4xXld7uDeHu4KE4YRCWi+rdXGTKPH7QzaRU3HxOU=)
                          3: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: aJpPvoSGRVMA94Dw8tXt33zHeGMuxciJSkooTeVqXLA=)
                          4: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: d51m3hjXY2TezXxt2Mgw2qLO9oFLWxyGtgPvE/O7bjk=)
                          5: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: yc3SgJhB9U1lGAckaKIVNdgap51jHeAdYVySNP13Icc=)
                          6: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: iSPArCekR6M/cWSzzjFrByEv9qSybnPOARzA3B9QRaY=)
                          7: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: 0NXtzAL1o+tarKa4oNc7xxhauxSJ0WEZHKYx7ZTMEWI=)
                          8: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: PCXWhCBdOz3wuM8WU55B1FYMT0DwN0M40X705jCXOcQ=)
                          9: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: eh/7xK3jzeTfsbyM/J4kfcM/+VwQ8Z7/19vJJZdyK1Y=)
                          10: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: /PC8S/6p0cKFfDtq1mZfKqLDeu+/nUGuOGrYhA617sY=)
                          11: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: SvB+QsV4btdCFW7i059dWy1bkAp62n7wxY/pgRJzLzk=)
                          12: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Z79rrvAX+MkAU7RIj82HMSiIMnnHt8DRxj3iIlw1SGs=)
                          13: 9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa (hash: he7IGzuagpt3gHt5joMU126QiNN6pXsb2nxpgt1NBRs=)
                          14: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: i5ROrzKB1s+VCKVSWpJPv8NGaUfssmlckuMKuKCQzg4=)
                          15: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: e7VhcfQT9ruvv4CGZkrGsmAxeo+APLPyU8Ze+kwj1t4=)
                          16: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: pVH2bMGC7+464gDRV/z0xb8UJ/QPCj/ZW97Q6jJEWrE=)
                          17: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: wyS0hB9hlamFhnUTh6Gv6KcrrBw3EQZa9bUf+tLTABQ=)
                          18: BB3B63A83A7011F1B365A8EDB1833773.roa (hash: rrNm2V87UUk3ZtAA1EOIUlvBXqSc+wZlGyp0mTMptsA=)
                          19: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: e3i2wusdoLzTSROJLMycuqmh4b9nxg7+8W+M3MY32nk=)
                          20: 9CC3E6FE41AD11F1956D3719A7833773.roa (hash: 9MXIomVvrTmfwdnWRXdd+RfM4pBLTd2ikyL9n8MdAkE=)
                          21: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: uLT99LvREt6aFgLq+8J5+/4C4Z0AHsSdTIhcGHc+DZg=)
                          22: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: TWadmcrZewtuAgz2VI+NPqZM8R7/PZMSyZJSCwVn5T0=)
                          23: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: Nisqq4Q0qjVEubmWisYThrjO8ZKrL4odD75LU3tphLs=)
                          24: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: uui58eIkIAuoIfjCf5IA5jNvQTdVLqnOyu4QWW+fdPU=)
                          25: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: C1CK+9M/ckvpPGWd0ysVo6YESQAEhbu/xrQHT/N9P6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3577 (0xdf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: May 12 18:53:15 2026 GMT
            Not After : May 19 18:53:15 2026 GMT
        Subject: CN=6a03771b-7cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b1:49:0d:35:d2:58:65:dd:70:87:dc:90:a9:
                    eb:94:55:d3:34:82:91:95:4d:5f:ab:c0:85:a1:54:
                    b5:71:91:b8:ec:05:6e:1b:8d:b9:99:4d:89:c5:c3:
                    02:cd:ec:da:cd:4f:19:61:92:52:6b:38:b3:1f:03:
                    db:3b:d5:26:e2:ff:ef:c8:e1:47:fb:d3:3c:0d:84:
                    4d:42:8f:60:17:02:4d:f6:52:5f:37:8a:24:a2:58:
                    ab:4a:27:02:76:92:3d:26:cc:7d:6f:a6:44:0a:e0:
                    ae:75:c2:af:08:15:b4:82:b4:c6:3f:00:24:90:bb:
                    e7:bb:6b:f5:4e:1f:12:c5:3b:59:23:69:cf:55:92:
                    e9:b2:ed:4b:5d:20:50:d5:e5:69:26:f1:ac:d8:79:
                    7b:14:86:6a:16:fe:1a:97:c4:bf:5d:89:7f:8d:93:
                    34:70:a2:d9:41:87:ff:3e:1a:09:41:a7:d6:ac:69:
                    0e:46:5a:43:5c:b8:a8:c7:30:03:53:a9:6e:3e:cc:
                    17:23:04:fa:81:fb:5a:0d:f1:6e:1a:18:53:ec:bb:
                    df:b8:07:39:74:3d:63:8b:bc:4e:dc:fb:17:a9:fc:
                    6a:38:0b:d2:92:ec:fd:17:12:72:b1:40:46:30:a6:
                    4f:4e:f9:ab:ff:73:42:7c:19:90:73:55:76:9e:39:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B0:BD:A9:90:7B:4D:04:2C:DA:48:7C:A6:8C:BB:96:C8:63:B0:D3
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fa:88:df:e0:86:83:ad:d9:fb:23:92:ac:b9:a2:1e:ce:28:
         16:4c:03:ea:69:bd:2e:3a:47:29:e4:03:1e:6d:ef:54:a0:64:
         19:09:b8:2f:65:7d:18:2e:c3:ff:92:f2:a3:25:12:24:1f:41:
         3e:27:d1:26:da:b3:22:6a:c5:cc:3e:b0:c0:c1:c6:86:b9:be:
         91:f4:77:dc:61:96:7b:a1:9b:36:80:59:94:50:7a:ce:2c:e0:
         5c:11:66:a7:88:81:0d:96:fd:64:27:f1:bd:8b:43:46:a1:95:
         04:18:be:4d:ac:10:66:bb:33:6b:dd:28:14:ce:76:b2:47:e9:
         c1:53:8f:0d:d3:b7:11:0e:06:37:65:6e:1a:df:c1:9f:95:80:
         55:5d:9e:37:bc:e0:81:a0:73:7a:8d:5c:fe:16:14:2a:14:bc:
         2d:74:13:4d:5d:ac:12:d7:53:7e:56:c3:2e:81:95:60:6f:90:
         03:cd:1f:d7:82:7a:d8:24:c0:c5:9f:e6:31:1b:f4:20:ba:86:
         c8:cc:fb:a5:2f:05:d6:b4:f4:1b:2b:da:85:9a:0e:1d:7d:4f:
         53:44:29:bb:dd:7f:46:e6:ad:a8:83:38:b5:4b:7a:bc:32:55:
         e7:0f:02:69:94:5b:20:e2:b1:49:9d:46:c9:9b:c8:b6:46:b7:
         5a:ff:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:34:26 2026 by rpki-client