Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
File:                     M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json)
Hash identifier:          EVpyvI65wyjm1wJPz7I+pqsrFJxNzbaZuxA8A1elysM=
Subject key identifier:   5C:4F:71:B7:E9:D9:85:73:B3:F1:17:51:6F:68:28:58:58:5A:AE:9F
Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12
Certificate issuer:       /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912
Certificate serial:       0D8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
Manifest number:          0D78
Signing time:             Fri 12 Jun 2026 17:56:36 +0000
Manifest this update:     Fri 12 Jun 2026 17:56:35 +0000
Manifest next update:     Fri 19 Jun 2026 17:56:35 +0000
Files and hashes:         1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: R4nDjOZZvwY9rI+Pkr7M9XHVITzLcA5Ly2LQoWvnA0E=)
                          2: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: L+RGI8DiExoZY0mv12iDdF9NzZPJb1mnMDdUtqo1o7c=)
                          3: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: MDbj2hVOOxzs8CoqYD/hJpFa7Snue5I+I7NZea+ifVQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl
                          rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3468 (0xd8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912
        Validity
            Not Before: Jun 12 17:56:35 2026 GMT
            Not After : Jun 19 17:56:35 2026 GMT
        Subject: CN=6a2c4854-2799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:be:8c:75:21:5a:53:bb:fb:69:45:0f:4c:6f:
                    10:58:9e:cc:65:60:08:7e:5b:c8:90:71:50:34:59:
                    c3:13:cf:40:33:ee:11:0a:20:60:63:9b:e9:c0:93:
                    df:1b:1c:b7:98:aa:ea:a1:b2:44:90:c9:70:4a:65:
                    16:f8:de:96:05:00:28:0a:8d:e0:0c:26:99:6a:6e:
                    ba:90:40:92:e4:be:28:4c:a9:08:1d:e6:1b:1f:2f:
                    ef:d2:7a:b0:3c:a8:4b:85:aa:3b:1c:4e:75:77:67:
                    c6:46:3c:e2:4b:00:94:6b:36:e7:eb:05:d7:b1:ba:
                    6c:8a:c9:99:61:67:0a:ea:45:d9:32:3b:30:46:6f:
                    4e:50:10:68:ff:5d:3a:ed:91:db:4a:2c:be:d3:81:
                    7d:e7:4e:98:8e:88:d9:3f:8c:9f:c8:1f:f4:5f:0f:
                    cb:4b:e9:d4:61:cc:92:32:3e:84:8a:fc:46:44:72:
                    f8:a8:b8:ae:59:e1:07:6a:e1:0d:b8:61:8a:93:ae:
                    36:3b:e0:7e:e4:60:3f:eb:4c:40:33:84:7a:da:92:
                    97:67:05:b6:c6:bc:e7:9b:65:b6:12:da:98:d6:44:
                    f4:69:57:3c:df:ad:8d:c7:54:49:8e:3d:5c:cc:25:
                    2b:de:61:c9:66:65:07:27:43:9a:f3:fd:fe:d4:c2:
                    eb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4F:71:B7:E9:D9:85:73:B3:F1:17:51:6F:68:28:58:58:5A:AE:9F
            X509v3 Authority Key Identifier:
                keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:22:c3:cc:5f:59:98:77:a9:da:9f:4e:70:d8:5c:ee:46:ef:
         18:b5:91:ba:b5:bb:89:12:1b:f2:2c:0e:3d:f0:9e:66:0d:1e:
         58:42:16:8e:ea:37:6b:c1:1c:92:e4:b3:3c:87:52:37:13:89:
         64:84:24:2b:31:75:25:74:b3:5d:1b:16:59:d8:64:a8:76:82:
         24:27:b3:f3:d1:7e:34:1a:06:fa:8f:17:57:4e:21:c2:0d:88:
         89:30:10:77:26:2f:14:7b:86:d4:54:80:69:9c:bf:f8:98:fc:
         46:a5:8c:62:3d:6b:20:23:99:e3:21:3f:6e:72:ad:0b:01:c5:
         99:31:85:b0:37:3e:f5:7a:58:8d:23:43:b5:ed:c8:62:35:36:
         4a:3f:0b:3c:30:54:90:e0:17:75:94:d5:0c:f5:75:81:39:d6:
         16:bd:97:c6:7d:72:ad:fd:a1:31:46:85:25:a5:ac:84:bb:53:
         01:79:81:cc:04:40:86:f0:3d:16:b2:59:44:eb:01:70:60:67:
         13:48:b4:30:84:a4:13:e2:88:a8:63:56:6f:72:16:9c:c6:28:
         81:44:d1:09:94:b3:9c:21:21:21:92:54:13:68:3e:51:1e:bd:
         f9:41:a9:06:a2:e4:eb:c9:95:ea:99:ef:dd:1b:7d:e4:b4:dc:
         ce:29:c8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:07:33 2026 by rpki-client