Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
File:                     QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json)
Hash identifier:          0uV0+ES1CJ8HZ7TCNTZjmqlFw9eimxpeMxxH4xMMm7E=
Subject key identifier:   89:B5:BC:E0:54:09:21:E9:52:6A:23:AA:46:3F:04:FA:42:A0:CD:7A
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0E12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
Manifest number:          0CF3
Signing time:             Fri 12 Jun 2026 18:50:38 +0000
Manifest this update:     Fri 12 Jun 2026 18:50:38 +0000
Manifest next update:     Fri 19 Jun 2026 18:50:38 +0000
Files and hashes:         1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: 5MSui38FIrvUMDej+PX1HiXb2Z+FLo3d7FrMWkvvbAA=)
                          2: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: iSPArCekR6M/cWSzzjFrByEv9qSybnPOARzA3B9QRaY=)
                          3: EAEDFF7C5B2F11F18831A46FC1833773.roa (hash: 2j7pKVmhbmtzPl4OIBvJ2Ukumhiz8DeMu2aosaw7f8w=)
                          4: BB3B63A83A7011F1B365A8EDB1833773.roa (hash: rrNm2V87UUk3ZtAA1EOIUlvBXqSc+wZlGyp0mTMptsA=)
                          5: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: yc3SgJhB9U1lGAckaKIVNdgap51jHeAdYVySNP13Icc=)
                          6: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: SvB+QsV4btdCFW7i059dWy1bkAp62n7wxY/pgRJzLzk=)
                          7: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: /PC8S/6p0cKFfDtq1mZfKqLDeu+/nUGuOGrYhA617sY=)
                          8: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: i5ROrzKB1s+VCKVSWpJPv8NGaUfssmlckuMKuKCQzg4=)
                          9: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: e7VhcfQT9ruvv4CGZkrGsmAxeo+APLPyU8Ze+kwj1t4=)
                          10: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: e3i2wusdoLzTSROJLMycuqmh4b9nxg7+8W+M3MY32nk=)
                          11: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: Nisqq4Q0qjVEubmWisYThrjO8ZKrL4odD75LU3tphLs=)
                          12: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: d51m3hjXY2TezXxt2Mgw2qLO9oFLWxyGtgPvE/O7bjk=)
                          13: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: uLT99LvREt6aFgLq+8J5+/4C4Z0AHsSdTIhcGHc+DZg=)
                          14: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: eh/7xK3jzeTfsbyM/J4kfcM/+VwQ8Z7/19vJJZdyK1Y=)
                          15: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: 0NXtzAL1o+tarKa4oNc7xxhauxSJ0WEZHKYx7ZTMEWI=)
                          16: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Z79rrvAX+MkAU7RIj82HMSiIMnnHt8DRxj3iIlw1SGs=)
                          17: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: uui58eIkIAuoIfjCf5IA5jNvQTdVLqnOyu4QWW+fdPU=)
                          18: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: TWadmcrZewtuAgz2VI+NPqZM8R7/PZMSyZJSCwVn5T0=)
                          19: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: PCXWhCBdOz3wuM8WU55B1FYMT0DwN0M40X705jCXOcQ=)
                          20: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: pVH2bMGC7+464gDRV/z0xb8UJ/QPCj/ZW97Q6jJEWrE=)
                          21: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: wyS0hB9hlamFhnUTh6Gv6KcrrBw3EQZa9bUf+tLTABQ=)
                          22: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: sHM4xXld7uDeHu4KE4YRCWi+rdXGTKPH7QzaRU3HxOU=)
                          23: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: aJpPvoSGRVMA94Dw8tXt33zHeGMuxciJSkooTeVqXLA=)
                          24: 5CBF3F2A540B11F1B7C20C5592833773.roa (hash: 1RR4rXrGdgVkusSgQXAk0hFyo7p3RZsSCUOiYGlL9OQ=)
                          25: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: C1CK+9M/ckvpPGWd0ysVo6YESQAEhbu/xrQHT/N9P6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3602 (0xe12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Jun 12 18:50:38 2026 GMT
            Not After : Jun 19 18:50:38 2026 GMT
        Subject: CN=6a2c54fe-327c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:ac:21:f9:e2:be:ac:ff:cf:30:05:28:30:
                    f6:49:44:35:d1:40:30:20:ff:c0:6a:53:9e:93:34:
                    85:e3:88:4a:b2:99:8f:2d:53:93:2c:4e:91:50:46:
                    c4:db:df:54:40:b7:ba:97:6c:f8:6d:f6:c1:6b:86:
                    1f:fd:ba:29:af:63:23:a8:71:02:53:86:c3:da:64:
                    2c:80:91:5b:23:7d:2d:f3:69:49:09:c3:c4:09:3f:
                    cf:5f:3d:65:d2:e2:63:e3:5c:31:80:4a:03:ad:20:
                    67:90:d9:de:c7:1d:34:1e:36:ee:10:df:19:ba:3c:
                    5c:4a:60:a1:9e:02:98:dd:bf:24:ac:cc:6c:70:ad:
                    11:40:d5:fc:c1:42:75:2c:c6:9c:cf:4b:ee:3f:4c:
                    3b:cc:a1:ea:e5:23:56:9a:be:50:f3:a7:d5:9b:8b:
                    cb:e0:9e:11:18:5d:7a:7a:fc:b8:da:b1:ad:a7:23:
                    d1:64:07:fa:07:65:07:66:f3:22:c8:cd:9b:85:24:
                    9d:c0:17:3c:c8:92:a7:54:0f:89:d5:c5:a2:d2:aa:
                    9f:45:5c:f0:15:fb:92:25:26:c9:e4:d9:66:7a:2b:
                    05:2d:32:b4:6f:7b:bb:67:77:0b:80:5e:8d:0c:f9:
                    44:6f:89:45:8f:8a:97:60:ea:26:b4:38:2f:10:e6:
                    ec:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B5:BC:E0:54:09:21:E9:52:6A:23:AA:46:3F:04:FA:42:A0:CD:7A
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:5a:c0:d8:e0:ae:4b:1f:ed:2b:0a:02:91:0b:a7:18:cb:b3:
         50:99:10:ae:5d:a0:23:0d:95:50:a6:49:0b:59:22:a7:5b:94:
         e9:a2:d1:3b:ee:88:15:29:75:47:32:d0:1c:5b:84:6c:2b:e6:
         f1:42:79:a3:5a:42:ca:8d:3e:31:1b:9d:8a:ec:74:9f:2c:50:
         0f:c1:8e:29:18:f6:cc:65:37:f3:3a:ac:0f:29:68:05:e6:d6:
         4b:62:9e:d0:00:6a:29:7a:42:8c:2b:ba:52:72:f7:9b:a5:27:
         9c:8a:e0:2b:a3:94:1b:04:ac:eb:ba:52:9c:d1:f8:3e:e0:47:
         f1:7e:91:d5:b9:9c:a8:3b:c9:22:25:34:2d:bc:35:6b:78:c8:
         05:22:71:ee:33:78:b6:4e:ab:1c:99:e8:2f:d6:52:da:26:28:
         f7:72:17:46:22:ee:68:66:94:ec:66:42:d0:c7:a0:69:62:d2:
         de:e4:e7:e1:80:00:a1:c9:bd:d2:4a:91:4b:83:06:ca:11:94:
         f7:6c:a5:1e:07:27:38:29:b5:e3:42:ae:ff:e6:72:c3:14:6b:
         59:56:a1:65:00:57:0b:14:76:62:b4:ed:72:eb:3d:19:bd:ec:
         c7:75:76:a7:dd:61:ee:1f:ef:f3:02:08:cf:15:37:35:a4:63:
         f6:b7:86:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:05:40 2026 by rpki-client