Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
File:                     QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json)
Hash identifier:          Q/ll+66QJgSwTtLMGSAlXp1UNQKc4Df53nN8j89jWmw=
Subject key identifier:   F1:F7:3A:39:B0:9D:FB:C3:76:A6:55:67:6B:7C:5A:E2:EC:84:48:F5
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0DD6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
Manifest number:          0CC0
Signing time:             Tue 24 Mar 2026 18:42:02 +0000
Manifest this update:     Tue 24 Mar 2026 18:42:02 +0000
Manifest next update:     Tue 31 Mar 2026 18:42:02 +0000
Files and hashes:         1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: CTwN4hzMjlpgqLnHg16rTw6OHa27k8BWNrtV/xjPKr4=)
                          2: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: C1CK+9M/ckvpPGWd0ysVo6YESQAEhbu/xrQHT/N9P6Q=)
                          3: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: eh/7xK3jzeTfsbyM/J4kfcM/+VwQ8Z7/19vJJZdyK1Y=)
                          4: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: aJpPvoSGRVMA94Dw8tXt33zHeGMuxciJSkooTeVqXLA=)
                          5: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: yc3SgJhB9U1lGAckaKIVNdgap51jHeAdYVySNP13Icc=)
                          6: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: d51m3hjXY2TezXxt2Mgw2qLO9oFLWxyGtgPvE/O7bjk=)
                          7: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: pVH2bMGC7+464gDRV/z0xb8UJ/QPCj/ZW97Q6jJEWrE=)
                          8: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Z79rrvAX+MkAU7RIj82HMSiIMnnHt8DRxj3iIlw1SGs=)
                          9: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: /PC8S/6p0cKFfDtq1mZfKqLDeu+/nUGuOGrYhA617sY=)
                          10: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: sHM4xXld7uDeHu4KE4YRCWi+rdXGTKPH7QzaRU3HxOU=)
                          11: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: TWadmcrZewtuAgz2VI+NPqZM8R7/PZMSyZJSCwVn5T0=)
                          12: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: e7VhcfQT9ruvv4CGZkrGsmAxeo+APLPyU8Ze+kwj1t4=)
                          13: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: i5ROrzKB1s+VCKVSWpJPv8NGaUfssmlckuMKuKCQzg4=)
                          14: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: SvB+QsV4btdCFW7i059dWy1bkAp62n7wxY/pgRJzLzk=)
                          15: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: 0NXtzAL1o+tarKa4oNc7xxhauxSJ0WEZHKYx7ZTMEWI=)
                          16: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: e3i2wusdoLzTSROJLMycuqmh4b9nxg7+8W+M3MY32nk=)
                          17: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: PCXWhCBdOz3wuM8WU55B1FYMT0DwN0M40X705jCXOcQ=)
                          18: AABA617A78B811F0A62F9B28C4F9AE02.roa (hash: oNuLLF9C6AKKzFUYs/U/EruGqRBGVLjFZbUzr06e9As=)
                          19: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: Nisqq4Q0qjVEubmWisYThrjO8ZKrL4odD75LU3tphLs=)
                          20: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: iSPArCekR6M/cWSzzjFrByEv9qSybnPOARzA3B9QRaY=)
                          21: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: uui58eIkIAuoIfjCf5IA5jNvQTdVLqnOyu4QWW+fdPU=)
                          22: 9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa (hash: he7IGzuagpt3gHt5joMU126QiNN6pXsb2nxpgt1NBRs=)
                          23: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: uLT99LvREt6aFgLq+8J5+/4C4Z0AHsSdTIhcGHc+DZg=)
                          24: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: wyS0hB9hlamFhnUTh6Gv6KcrrBw3EQZa9bUf+tLTABQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3542 (0xdd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Mar 24 18:42:02 2026 GMT
            Not After : Mar 31 18:42:02 2026 GMT
        Subject: CN=69c2dafa-08ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:80:98:e7:62:43:f7:de:ba:fa:bf:1f:91:5b:
                    6d:ec:e6:b3:ee:dc:ff:94:33:e6:fc:26:bd:66:24:
                    13:2b:fa:56:52:cc:17:74:9c:83:a9:da:16:db:73:
                    7e:c1:61:65:fc:25:be:ec:05:54:49:22:48:1f:9f:
                    a7:b4:49:3b:a6:a4:f1:4e:04:80:b7:2f:52:18:c4:
                    f2:6c:30:42:87:9e:b0:6f:50:74:12:a7:56:ea:4b:
                    dd:53:20:de:14:78:27:da:b1:e2:2a:7d:e7:7b:47:
                    16:e0:62:78:da:76:e9:91:37:29:28:69:f9:be:8c:
                    8f:a1:00:2d:2f:fa:b5:b3:f7:5a:53:85:0f:88:19:
                    49:1a:cb:07:cf:a2:ff:f2:9c:46:f3:f9:03:71:90:
                    04:dc:32:3a:7e:fc:be:fb:b0:b5:4c:3a:e0:41:bd:
                    bb:a8:11:0e:0d:53:ad:f6:03:a1:dc:2f:06:d5:49:
                    31:ce:3a:15:37:e7:15:ab:e5:e2:8a:ab:e4:70:b6:
                    00:69:a9:29:fd:57:9c:61:26:a2:43:b6:16:5f:0d:
                    86:65:73:96:cd:ed:36:49:9a:d6:a2:cb:b1:4c:33:
                    3e:5b:be:49:9b:ee:69:2b:68:bd:80:99:c6:db:bf:
                    e2:9a:cd:4d:10:19:a3:24:3a:65:5e:3d:e9:b3:7b:
                    00:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F7:3A:39:B0:9D:FB:C3:76:A6:55:67:6B:7C:5A:E2:EC:84:48:F5
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c9:ce:22:5d:32:86:46:44:f7:00:e6:89:ae:e7:24:13:aa:
         29:53:0b:19:d2:21:68:b2:28:d0:08:24:ab:08:4d:e4:18:79:
         62:6d:81:66:42:70:1b:9c:d6:41:37:82:4c:3c:b8:5f:ca:89:
         84:c8:0f:b5:91:6b:e9:f6:7f:2b:15:71:c6:64:bc:40:64:d8:
         06:fc:f8:f2:3c:16:cd:f1:0e:73:0d:68:e8:7c:d2:b7:7c:f0:
         a5:bc:f4:f5:ce:6f:1d:5f:b9:3c:99:4f:0f:ca:0e:82:4d:cc:
         20:af:4c:19:69:51:fb:95:35:ad:1f:df:b4:81:00:d5:77:a4:
         f3:c3:d0:d0:a1:34:ee:2b:75:c3:73:b0:76:2a:97:f6:83:be:
         86:7b:96:1e:0f:c5:6f:ca:17:5b:d3:05:99:08:b7:f0:58:40:
         05:d6:6b:1d:aa:a0:c9:c0:8c:ac:2b:6c:8e:ea:a9:68:50:70:
         8d:89:91:1c:ce:4f:dd:21:99:da:87:15:ac:aa:03:54:b4:f6:
         98:f4:90:ab:91:14:d3:46:f2:1e:4c:bc:e6:e0:cb:e6:53:da:
         0d:0e:a5:32:14:f4:4f:ed:ca:d1:34:46:99:8e:c5:9c:11:e2:
         86:c5:38:58:48:60:72:e8:1f:ef:23:c1:f5:42:bb:58:e3:6a:
         17:b1:33:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:27 2026 by rpki-client