Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
File:                     QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft (raw, json)
Hash identifier:          LuYzbb8AkT3JpzwtL6z3si7h5V/rTKNE9tv8CIA1p04=
Subject key identifier:   AB:CB:C6:FD:71:7E:D7:63:E4:BF:8F:52:5F:59:5F:F0:0B:C3:93:1E
Authority key identifier: 40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5
Certificate issuer:       /CN=A911CB05/serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
Manifest number:          012A
Signing time:             Wed 13 May 2026 05:42:49 +0000
Manifest this update:     Wed 13 May 2026 05:42:49 +0000
Manifest next update:     Wed 20 May 2026 05:42:49 +0000
Files and hashes:         1: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl (hash: PysixVHX1FjxvV16a3yziC9ulOhG0Z1c3HDXI9j7xfg=)
                          2: E692CC2A8A9B11EFBC56AA85C4F9AE02.roa (hash: /iUDR+GzejkmITAmPKgcB03fXiVvkAuvv4cWd5x9948=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl
                          rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CB05, serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5
        Validity
            Not Before: May 13 05:42:49 2026 GMT
            Not After : May 20 05:42:49 2026 GMT
        Subject: CN=6a040f59-96b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:58:8c:5e:5e:bc:69:de:71:8a:27:94:9c:a4:
                    9d:f2:4d:ce:49:48:2e:9b:b1:83:94:84:34:d8:11:
                    ff:da:9f:f5:4b:c6:c2:4a:dc:22:76:3a:a5:f8:64:
                    32:de:dc:f6:80:50:5f:53:84:18:3b:f1:94:64:59:
                    46:da:8e:90:ab:17:57:a9:53:19:da:33:a0:c7:99:
                    46:f1:63:ce:45:09:e0:1b:39:57:4c:41:0d:c6:fa:
                    c3:d3:68:f7:e4:cc:54:8b:4a:db:29:c6:0f:54:a1:
                    ce:43:57:2b:ae:f9:69:9c:8d:0f:71:74:0e:54:13:
                    f2:b1:13:96:69:d3:99:a1:56:43:67:7f:71:ba:f9:
                    e1:f3:25:28:ab:4c:a2:56:57:f3:ae:28:b5:05:c1:
                    69:2d:ef:ed:4f:c8:2b:86:3c:bc:08:cc:0a:cd:80:
                    60:9f:40:51:27:d6:73:3a:d7:40:41:4a:70:37:c4:
                    24:9c:94:93:c0:38:d8:11:ea:70:53:34:ab:f0:03:
                    b6:51:9e:73:88:06:dc:e6:95:79:09:39:a4:c0:5c:
                    40:1d:f4:02:d0:fa:e0:4c:42:09:4a:e3:d9:15:0d:
                    f3:ed:c8:e1:df:ae:05:16:46:9a:07:65:4a:ec:dd:
                    fd:5c:b3:c7:a8:96:33:28:58:81:f9:ec:b6:d2:a9:
                    e1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CB:C6:FD:71:7E:D7:63:E4:BF:8F:52:5F:59:5F:F0:0B:C3:93:1E
            X509v3 Authority Key Identifier:
                keyid:40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:18:70:c6:0e:cd:5a:4f:dc:59:ff:30:16:f0:e2:8e:e1:44:
         e2:a1:c4:da:c9:87:09:49:38:8b:3b:0f:ee:13:73:40:e8:34:
         24:4b:35:cb:bc:ef:ca:93:5a:9f:4b:37:cb:32:f0:ea:f6:09:
         ae:24:98:6a:68:f6:94:05:02:9b:4d:d7:c8:59:ec:fb:26:f1:
         87:72:82:b7:f3:fc:d3:0f:cc:48:6a:1e:b0:7b:96:bb:3e:62:
         5c:d1:7f:2e:13:1d:5c:9a:af:aa:e3:13:ea:02:02:1f:95:eb:
         19:ad:7e:ee:2d:0c:63:7b:ac:a4:0f:cd:c3:30:02:df:2c:8a:
         4b:22:5d:e5:72:9f:a0:a2:8c:18:aa:ef:cb:3e:29:d9:39:14:
         8e:cc:3c:8e:a5:a7:b9:87:f5:28:08:82:df:b5:53:d2:4c:cc:
         f7:a0:59:4e:eb:4c:de:26:9e:6a:73:96:62:e0:ce:fd:9c:60:
         90:19:47:c0:0c:22:38:3d:4f:5a:f5:73:ad:6b:13:f0:7d:be:
         e0:1d:91:30:cd:b6:0c:d3:1a:16:b9:a7:fb:9d:6e:1c:40:98:
         63:02:44:e2:19:11:05:0d:3e:27:7f:82:ac:3f:84:19:15:40:
         f1:7f:e0:35:12:14:50:d2:75:c8:ff:c2:2b:21:e8:91:7a:a3:
         34:50:62:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:05:17 2026 by rpki-client