Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
File:                     QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json)
Hash identifier:          f9QJ1IdoqHty0nqTpDkhye39Hjoa0gXKkGyCIGXug1I=
Subject key identifier:   86:8B:70:76:42:51:66:4E:5F:65:BE:7D:F4:B0:62:8E:49:5D:C3:00
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0E25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
Manifest number:          0D06
Signing time:             Mon 20 Jul 2026 19:06:34 +0000
Manifest this update:     Mon 20 Jul 2026 19:06:34 +0000
Manifest next update:     Mon 27 Jul 2026 19:06:34 +0000
Files and hashes:         1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: 23iDHp7OSpi73JZC+McK3BVCNz2o37SO41GNL1/9Smc=)
                          2: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: e7VhcfQT9ruvv4CGZkrGsmAxeo+APLPyU8Ze+kwj1t4=)
                          3: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: SvB+QsV4btdCFW7i059dWy1bkAp62n7wxY/pgRJzLzk=)
                          4: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: d51m3hjXY2TezXxt2Mgw2qLO9oFLWxyGtgPvE/O7bjk=)
                          5: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: wyS0hB9hlamFhnUTh6Gv6KcrrBw3EQZa9bUf+tLTABQ=)
                          6: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: Nisqq4Q0qjVEubmWisYThrjO8ZKrL4odD75LU3tphLs=)
                          7: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: C1CK+9M/ckvpPGWd0ysVo6YESQAEhbu/xrQHT/N9P6Q=)
                          8: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: 0NXtzAL1o+tarKa4oNc7xxhauxSJ0WEZHKYx7ZTMEWI=)
                          9: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: eh/7xK3jzeTfsbyM/J4kfcM/+VwQ8Z7/19vJJZdyK1Y=)
                          10: BB3B63A83A7011F1B365A8EDB1833773.roa (hash: rrNm2V87UUk3ZtAA1EOIUlvBXqSc+wZlGyp0mTMptsA=)
                          11: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: PCXWhCBdOz3wuM8WU55B1FYMT0DwN0M40X705jCXOcQ=)
                          12: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: i5ROrzKB1s+VCKVSWpJPv8NGaUfssmlckuMKuKCQzg4=)
                          13: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Z79rrvAX+MkAU7RIj82HMSiIMnnHt8DRxj3iIlw1SGs=)
                          14: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: /PC8S/6p0cKFfDtq1mZfKqLDeu+/nUGuOGrYhA617sY=)
                          15: 5CBF3F2A540B11F1B7C20C5592833773.roa (hash: 1RR4rXrGdgVkusSgQXAk0hFyo7p3RZsSCUOiYGlL9OQ=)
                          16: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: uui58eIkIAuoIfjCf5IA5jNvQTdVLqnOyu4QWW+fdPU=)
                          17: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: TWadmcrZewtuAgz2VI+NPqZM8R7/PZMSyZJSCwVn5T0=)
                          18: EAEDFF7C5B2F11F18831A46FC1833773.roa (hash: 2j7pKVmhbmtzPl4OIBvJ2Ukumhiz8DeMu2aosaw7f8w=)
                          19: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: uLT99LvREt6aFgLq+8J5+/4C4Z0AHsSdTIhcGHc+DZg=)
                          20: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: pVH2bMGC7+464gDRV/z0xb8UJ/QPCj/ZW97Q6jJEWrE=)
                          21: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: iSPArCekR6M/cWSzzjFrByEv9qSybnPOARzA3B9QRaY=)
                          22: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: sHM4xXld7uDeHu4KE4YRCWi+rdXGTKPH7QzaRU3HxOU=)
                          23: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: yc3SgJhB9U1lGAckaKIVNdgap51jHeAdYVySNP13Icc=)
                          24: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: aJpPvoSGRVMA94Dw8tXt33zHeGMuxciJSkooTeVqXLA=)
                          25: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: e3i2wusdoLzTSROJLMycuqmh4b9nxg7+8W+M3MY32nk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 19:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3621 (0xe25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Jul 20 19:06:34 2026 GMT
            Not After : Jul 27 19:06:34 2026 GMT
        Subject: CN=6a5e71ba-6b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e1:19:26:6f:a2:5a:11:cb:18:28:6e:65:03:
                    0f:5a:ce:c7:fb:43:55:d7:21:07:9d:89:8c:b0:07:
                    66:28:d1:9d:7d:a4:f4:39:ff:df:4f:3f:43:5f:8e:
                    f8:c7:70:3a:ea:a3:af:de:3c:8a:f9:1c:f8:1d:b3:
                    77:5d:a0:7b:93:05:44:5b:e8:af:7f:56:02:ff:1b:
                    72:74:05:91:8c:f4:31:34:2c:74:14:36:ad:e7:b7:
                    18:d9:aa:7e:ef:fd:1a:41:81:1c:a0:11:a1:73:5e:
                    fa:c9:ff:f6:4f:fb:77:5a:d7:9e:58:2d:c4:c9:60:
                    2d:9d:07:79:18:ca:bb:69:12:f3:9a:97:c6:bd:45:
                    d8:bd:ec:b4:5a:e6:fd:6d:7f:50:6c:95:19:08:eb:
                    10:43:dc:a3:18:a1:10:2a:81:33:c2:4a:06:1d:07:
                    e7:4b:9b:7f:fd:72:8e:1f:9a:89:28:e6:00:0e:6b:
                    0f:8e:0a:ab:c3:b9:ae:5f:1d:9f:d0:87:75:d4:18:
                    16:36:ac:fd:c4:a7:ac:b1:ba:36:1c:4c:eb:f2:18:
                    0d:87:2c:42:28:5e:a7:10:46:22:5c:85:0c:b9:ac:
                    8b:41:e6:ac:f6:c1:0b:e1:bb:1b:86:6d:ad:b3:f1:
                    cd:24:44:9e:10:d7:44:bf:7f:fd:80:12:a5:41:43:
                    4d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8B:70:76:42:51:66:4E:5F:65:BE:7D:F4:B0:62:8E:49:5D:C3:00
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:70:74:7a:c8:62:da:f3:40:9d:54:5c:36:1e:bf:10:c8:7b:
         d5:3e:47:fc:f7:2b:24:f7:67:ab:02:05:95:72:79:b3:ea:b9:
         44:2b:c7:b9:86:ce:cb:47:f9:cf:7f:af:50:0c:0d:98:90:a3:
         92:83:71:09:3e:4a:43:ff:d8:9c:1a:29:77:60:87:25:00:a6:
         35:f8:1d:62:23:52:1f:6b:20:00:b9:63:ae:60:c1:7b:4f:3b:
         19:c0:98:90:0c:29:58:0f:ee:15:63:a1:cf:3a:7a:9f:83:5a:
         4f:17:ea:29:52:fa:0d:03:3d:d9:93:fb:25:66:1a:6c:47:7f:
         e3:31:70:50:6a:b1:8d:ef:64:83:35:5b:bd:72:1a:c5:df:7d:
         3e:df:b6:bb:80:a6:4b:eb:d2:95:73:7d:99:db:a2:33:18:74:
         62:aa:84:4c:10:1e:e5:0f:b3:58:9a:d0:0f:d4:9d:89:fd:ec:
         98:fe:89:59:69:c3:a8:a0:d1:90:aa:35:ef:72:a0:73:6c:8f:
         fe:1f:4e:9c:f8:71:7c:59:95:4e:66:3f:00:c4:98:1f:5a:17:
         61:d2:ca:0f:e8:c3:26:2c:e4:a8:20:e9:d7:71:6a:2a:1b:87:
         5d:4f:5b:d1:eb:a9:d9:f0:bf:e2:95:91:92:11:31:21:ed:1d:
         46:04:53:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:51:36 2026 by rpki-client