Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
File:                     QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json)
Hash identifier:          qZIUNMbkaKpKPO4/6nlEHAh70vjeavAUoLk6G4aSrNg=
Subject key identifier:   26:9F:01:8A:66:BB:EB:02:0C:B6:AF:1B:0D:C7:82:CF:7E:8F:D7:93
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0DE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
Manifest number:          0CCC
Signing time:             Thu 16 Apr 2026 18:46:34 +0000
Manifest this update:     Thu 16 Apr 2026 18:46:33 +0000
Manifest next update:     Thu 23 Apr 2026 18:46:33 +0000
Files and hashes:         1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: X0kp8q6Ybfl28X4VdUN7l1RNQm7mn6i/tRVvXYZAdTM=)
                          2: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: uui58eIkIAuoIfjCf5IA5jNvQTdVLqnOyu4QWW+fdPU=)
                          3: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: wyS0hB9hlamFhnUTh6Gv6KcrrBw3EQZa9bUf+tLTABQ=)
                          4: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: e7VhcfQT9ruvv4CGZkrGsmAxeo+APLPyU8Ze+kwj1t4=)
                          5: AABA617A78B811F0A62F9B28C4F9AE02.roa (hash: oNuLLF9C6AKKzFUYs/U/EruGqRBGVLjFZbUzr06e9As=)
                          6: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: e3i2wusdoLzTSROJLMycuqmh4b9nxg7+8W+M3MY32nk=)
                          7: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: i5ROrzKB1s+VCKVSWpJPv8NGaUfssmlckuMKuKCQzg4=)
                          8: 9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa (hash: he7IGzuagpt3gHt5joMU126QiNN6pXsb2nxpgt1NBRs=)
                          9: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: C1CK+9M/ckvpPGWd0ysVo6YESQAEhbu/xrQHT/N9P6Q=)
                          10: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: sHM4xXld7uDeHu4KE4YRCWi+rdXGTKPH7QzaRU3HxOU=)
                          11: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: eh/7xK3jzeTfsbyM/J4kfcM/+VwQ8Z7/19vJJZdyK1Y=)
                          12: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: TWadmcrZewtuAgz2VI+NPqZM8R7/PZMSyZJSCwVn5T0=)
                          13: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: aJpPvoSGRVMA94Dw8tXt33zHeGMuxciJSkooTeVqXLA=)
                          14: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: uLT99LvREt6aFgLq+8J5+/4C4Z0AHsSdTIhcGHc+DZg=)
                          15: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: PCXWhCBdOz3wuM8WU55B1FYMT0DwN0M40X705jCXOcQ=)
                          16: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Z79rrvAX+MkAU7RIj82HMSiIMnnHt8DRxj3iIlw1SGs=)
                          17: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: SvB+QsV4btdCFW7i059dWy1bkAp62n7wxY/pgRJzLzk=)
                          18: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: 0NXtzAL1o+tarKa4oNc7xxhauxSJ0WEZHKYx7ZTMEWI=)
                          19: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: Nisqq4Q0qjVEubmWisYThrjO8ZKrL4odD75LU3tphLs=)
                          20: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: /PC8S/6p0cKFfDtq1mZfKqLDeu+/nUGuOGrYhA617sY=)
                          21: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: pVH2bMGC7+464gDRV/z0xb8UJ/QPCj/ZW97Q6jJEWrE=)
                          22: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: yc3SgJhB9U1lGAckaKIVNdgap51jHeAdYVySNP13Icc=)
                          23: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: iSPArCekR6M/cWSzzjFrByEv9qSybnPOARzA3B9QRaY=)
                          24: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: d51m3hjXY2TezXxt2Mgw2qLO9oFLWxyGtgPvE/O7bjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3554 (0xde2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Apr 16 18:46:33 2026 GMT
            Not After : Apr 23 18:46:33 2026 GMT
        Subject: CN=69e12e8a-d8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:69:c1:45:ae:f5:52:27:e4:de:7a:5d:84:
                    12:4e:9c:86:8e:1c:8f:0a:81:17:3f:00:9f:7f:c9:
                    32:b4:83:64:9a:bf:a7:06:ec:44:46:a9:dc:18:6d:
                    b2:c8:ce:78:91:f6:31:3f:60:58:7c:db:37:50:7d:
                    1e:48:1d:6b:9b:27:56:0e:dc:d9:bb:66:a3:7a:55:
                    31:1f:28:dc:1d:9c:af:f6:43:65:b5:04:bd:fc:44:
                    ee:04:62:99:a0:b7:36:6f:3a:a9:7e:a0:22:f1:80:
                    7e:20:ec:21:45:96:62:70:be:29:4a:d4:6d:18:58:
                    3e:4f:63:5c:b4:61:a7:4a:6c:94:67:68:d7:8f:86:
                    b7:b4:ea:31:93:93:b1:58:e5:5c:02:76:c8:0e:b5:
                    49:68:39:55:e4:5b:f5:b1:8b:91:0d:81:bb:eb:20:
                    38:ad:8f:98:17:fa:e5:01:81:4d:a2:7d:4c:b9:da:
                    f9:75:dd:39:ca:9b:6d:f2:14:7b:cf:95:7c:e0:91:
                    cb:d3:1d:f7:8f:1c:eb:a1:c5:9d:99:24:a4:63:58:
                    29:3b:d2:76:f3:20:a7:6f:ad:8c:47:15:8e:61:53:
                    2f:b9:0f:82:32:d5:be:c5:c5:7d:df:6c:89:9e:26:
                    fd:95:00:4e:db:27:f6:b7:79:be:50:5f:1b:90:31:
                    56:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9F:01:8A:66:BB:EB:02:0C:B6:AF:1B:0D:C7:82:CF:7E:8F:D7:93
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d3:7d:c1:e5:df:fc:63:8e:e4:34:e7:b8:8c:f3:56:5b:cb:
         09:f8:80:1c:1b:22:c6:77:29:8e:77:91:97:0f:df:c7:95:5d:
         18:5b:92:1f:40:4a:1f:bc:9a:b5:3b:fc:fc:f0:50:0b:07:fa:
         0e:f1:e3:56:b0:a2:32:7e:5a:ae:13:03:ab:79:56:e4:45:7b:
         97:de:6f:5f:f7:00:35:30:13:b7:39:e3:e7:a4:1e:26:72:51:
         5a:0f:5c:2d:96:18:4c:fb:78:97:c4:db:4b:41:5e:e8:70:a3:
         14:55:eb:ec:87:62:d3:eb:30:cb:65:3b:08:c0:04:70:b4:87:
         f4:0b:4d:0e:4d:5f:e2:2e:50:71:51:d7:41:20:0a:d1:ae:49:
         ab:ce:21:c9:96:f6:8b:71:a3:e2:a1:e9:d5:1f:f3:9b:40:00:
         f3:58:98:10:da:1c:cb:2e:42:af:ae:17:84:3b:b2:55:52:ab:
         14:5c:90:20:c1:08:c9:88:57:52:29:60:00:b9:af:11:95:d8:
         3c:5c:32:aa:ff:49:7b:cf:04:91:b3:25:b5:67:10:09:8b:3b:
         31:82:65:5d:79:8a:e5:62:e5:e1:78:8e:4c:8b:02:46:8a:22:
         52:7c:c9:bc:a7:92:15:e8:a4:d0:fd:82:bf:d6:1b:77:7f:dd:
         4f:0f:ec:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:53 2026 by rpki-client