Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
File:                     -QbZf3qofIbamQOdI27NtR0jH3o.mft (raw, json)
Hash identifier:          XuTjnMvQVM3Bwhknch2yhFJVgOx0Tgw0tojVSO2ZFBY=
Subject key identifier:   96:6E:96:3B:B3:A4:AE:5A:19:A1:F9:45:A0:F8:91:C6:A0:C4:82:39
Authority key identifier: F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A
Certificate issuer:       /CN=A919FE97/serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A
Certificate serial:       0711
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
Manifest number:          0707
Signing time:             Tue 24 Mar 2026 21:39:03 +0000
Manifest this update:     Tue 24 Mar 2026 21:39:03 +0000
Manifest next update:     Tue 31 Mar 2026 21:39:03 +0000
Files and hashes:         1: -QbZf3qofIbamQOdI27NtR0jH3o.crl (hash: Sjrr4ckUk/PfpL3T+L73tbxhwGG48p2mzNM9BS7dBlA=)
                          2: 06EFF1D07D4B11EBA736017DC4F9AE02.roa (hash: NGP8ke2DkEB3hYpbUVG6UTVU7Lf4hrBe8aQecdq/b3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl
                          rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:39:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1809 (0x711)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE97, serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A
        Validity
            Not Before: Mar 24 21:39:03 2026 GMT
            Not After : Mar 31 21:39:03 2026 GMT
        Subject: CN=69c30477-796b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a0:7d:aa:ba:96:41:57:72:ac:f9:d9:28:88:
                    61:74:8d:a0:20:75:1f:09:83:58:f6:bd:78:e1:bb:
                    0b:3f:9e:2d:f5:cb:5b:b6:85:fa:13:2f:f5:d5:07:
                    3c:20:96:05:71:0d:4f:d5:de:54:3a:70:b6:90:89:
                    2a:c0:ad:53:57:26:8a:5f:4d:d2:82:c2:86:77:6e:
                    39:44:6a:4d:f6:4e:b7:fd:9e:0d:8d:ea:83:e4:ca:
                    2b:c8:f8:54:f7:2f:bd:04:49:36:09:91:b5:20:ee:
                    df:11:dc:8e:11:d6:e7:1f:bb:04:1e:3c:8b:19:42:
                    17:c7:35:d6:e0:e5:56:b6:38:27:ca:75:57:7a:72:
                    73:9e:bd:2e:b4:9e:44:5f:7e:1e:16:19:51:79:18:
                    d7:8a:c5:2b:0c:e3:99:a5:b0:77:11:e9:27:d2:b8:
                    c3:f8:28:d7:89:53:9e:0e:2b:20:9a:87:0a:54:8d:
                    ce:f8:86:d2:8d:b0:3c:e4:c7:2b:02:79:bc:e7:d9:
                    97:8b:d1:14:9d:78:be:54:27:fa:1b:c3:1d:56:2f:
                    ec:84:de:8a:e1:f2:9b:4b:67:2d:38:99:c7:c9:4d:
                    e1:68:55:6a:e0:0f:8a:8c:cf:ec:65:6e:73:c4:b1:
                    71:9d:24:3e:7a:c1:c8:23:0e:53:b4:cc:9a:a2:ab:
                    98:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6E:96:3B:B3:A4:AE:5A:19:A1:F9:45:A0:F8:91:C6:A0:C4:82:39
            X509v3 Authority Key Identifier:
                keyid:F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:64:1b:03:93:0f:a5:26:f7:64:15:21:03:0d:d7:64:76:81:
         87:70:c1:03:8b:3b:94:c5:a0:d6:e7:d6:75:fd:b7:6d:ac:d5:
         8b:16:c4:63:a0:88:38:b5:28:e9:57:f9:27:c9:97:66:33:f2:
         17:98:2d:62:27:fe:fa:19:88:e0:79:39:b5:7d:8f:0a:05:fb:
         08:52:14:b1:6d:8e:d2:00:d8:9b:94:8f:11:32:1a:15:7b:c7:
         ee:28:6e:b0:82:23:e7:54:2b:75:1a:10:04:ed:67:5d:92:e2:
         66:80:82:86:46:db:ce:7b:39:c4:12:e9:e9:04:5a:33:6d:cf:
         e4:b2:74:d8:d2:40:79:40:98:a5:07:51:fd:7e:b8:e2:72:a8:
         c2:23:f9:b1:79:68:cc:a3:c4:fb:19:72:ab:45:13:a7:5d:e1:
         6a:e8:bd:5d:fc:e2:98:48:9d:82:4e:45:6b:af:0f:e9:69:cf:
         be:e8:ad:48:f3:86:6a:c0:3f:fe:a3:33:70:d2:f5:19:a8:e5:
         3f:a2:c6:4d:d3:f2:b5:dc:82:45:a5:71:61:aa:77:8c:c4:18:
         da:bd:55:bb:6c:17:13:eb:54:fc:f0:18:0d:2f:ab:10:f4:24:
         36:61:f2:75:93:94:d9:7f:79:ad:9b:84:24:f5:a6:bd:dd:b5:
         da:15:f0:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUZFOTcxMTAvBgNVBAUTKEY5MDZEOTdGN0FBODdDODZEQTk5MDM5RDIzNkVDREI1
MUQyMzFGN0EwHhcNMjYwMzI0MjEzOTAzWhcNMjYwMzMxMjEzOTAzWjAYMRYwFAYD
VQQDEw02OWMzMDQ3Ny03OTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi6B9qrqWQVdyrPnZKIhhdI2gIHUfCYNY9r144bsLP54t9ctbtoX6Ey/11Qc8
IJYFcQ1P1d5UOnC2kIkqwK1TVyaKX03SgsKGd245RGpN9k63/Z4NjeqD5MoryPhU
9y+9BEk2CZG1IO7fEdyOEdbnH7sEHjyLGUIXxzXW4OVWtjgnynVXenJznr0utJ5E
X34eFhlReRjXisUrDOOZpbB3Eekn0rjD+CjXiVOeDisgmocKVI3O+IbSjbA85Mcr
Anm859mXi9EUnXi+VCf6G8MdVi/shN6K4fKbS2ctOJnHyU3haFVq4A+KjM/sZW5z
xLFxnSQ+esHIIw5TtMyaoquYbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJZuljuz
pK5aGaH5RaD4kcagxII5MB8GA1UdIwQYMBaAFPkG2X96qHyG2pkDnSNuzbUdIx96
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkU5Ny9EMjE4MzAyRTdE
NDcxMUVCOTMxMjFGNThDNEY5QUUwMi8tUWJaZjNxb2ZJYmFtUU9kSTI3TnRSMGpI
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1RYlpmM3FvZkliYW1RT2RJMjdOdFIwakgzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RkU5Ny9EMjE4MzAyRTdENDcxMUVCOTMxMjFGNThDNEY5QUUwMi8tUWJaZjNxb2ZJ
YmFtUU9kSTI3TnRSMGpIM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALGQbA5MPpSb3ZBUhAw3XZHaBh3DBA4s7lMWg1ufWdf23bazVixbEY6CIOLUo
6Vf5J8mXZjPyF5gtYif++hmI4Hk5tX2PCgX7CFIUsW2O0gDYm5SPETIaFXvH7ihu
sIIj51QrdRoQBO1nXZLiZoCChkbbzns5xBLp6QRaM23P5LJ02NJAeUCYpQdR/X64
4nKowiP5sXlozKPE+xlyq0UTp13haui9XfzimEidgk5Fa68P6WnPvuitSPOGasA/
/qMzcNL1GajlP6LGTdPytdyCRaVxYap3jMQY2r1Vu2wXE+tU/PAYDS+rEPQkNmHy
dZOU2X95rZuEJPWmvd212hXwwQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:18:37 2026 by rpki-client