Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
File:                     QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json)
Hash identifier:          rH/R6nHvQ1NkgZ8Hh59x086cs/uKowzSxf2irGVvazA=
Subject key identifier:   12:71:85:6A:90:AE:C5:54:CC:92:5F:6B:D9:C7:6B:9C:AE:3E:06:89
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0DDE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
Manifest number:          0CC8
Signing time:             Wed 08 Apr 2026 18:45:04 +0000
Manifest this update:     Wed 08 Apr 2026 18:45:04 +0000
Manifest next update:     Wed 15 Apr 2026 18:45:04 +0000
Files and hashes:         1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: 0Ez+UgpBJfiRIMjh4kwcSS+h/tEHvjDt5WmSMRAlaMA=)
                          2: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: Nisqq4Q0qjVEubmWisYThrjO8ZKrL4odD75LU3tphLs=)
                          3: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: eh/7xK3jzeTfsbyM/J4kfcM/+VwQ8Z7/19vJJZdyK1Y=)
                          4: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: TWadmcrZewtuAgz2VI+NPqZM8R7/PZMSyZJSCwVn5T0=)
                          5: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: pVH2bMGC7+464gDRV/z0xb8UJ/QPCj/ZW97Q6jJEWrE=)
                          6: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: e3i2wusdoLzTSROJLMycuqmh4b9nxg7+8W+M3MY32nk=)
                          7: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: uLT99LvREt6aFgLq+8J5+/4C4Z0AHsSdTIhcGHc+DZg=)
                          8: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: 0NXtzAL1o+tarKa4oNc7xxhauxSJ0WEZHKYx7ZTMEWI=)
                          9: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: i5ROrzKB1s+VCKVSWpJPv8NGaUfssmlckuMKuKCQzg4=)
                          10: AABA617A78B811F0A62F9B28C4F9AE02.roa (hash: oNuLLF9C6AKKzFUYs/U/EruGqRBGVLjFZbUzr06e9As=)
                          11: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: sHM4xXld7uDeHu4KE4YRCWi+rdXGTKPH7QzaRU3HxOU=)
                          12: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: iSPArCekR6M/cWSzzjFrByEv9qSybnPOARzA3B9QRaY=)
                          13: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: yc3SgJhB9U1lGAckaKIVNdgap51jHeAdYVySNP13Icc=)
                          14: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: d51m3hjXY2TezXxt2Mgw2qLO9oFLWxyGtgPvE/O7bjk=)
                          15: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: wyS0hB9hlamFhnUTh6Gv6KcrrBw3EQZa9bUf+tLTABQ=)
                          16: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: C1CK+9M/ckvpPGWd0ysVo6YESQAEhbu/xrQHT/N9P6Q=)
                          17: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: PCXWhCBdOz3wuM8WU55B1FYMT0DwN0M40X705jCXOcQ=)
                          18: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: uui58eIkIAuoIfjCf5IA5jNvQTdVLqnOyu4QWW+fdPU=)
                          19: 9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa (hash: he7IGzuagpt3gHt5joMU126QiNN6pXsb2nxpgt1NBRs=)
                          20: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: /PC8S/6p0cKFfDtq1mZfKqLDeu+/nUGuOGrYhA617sY=)
                          21: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: aJpPvoSGRVMA94Dw8tXt33zHeGMuxciJSkooTeVqXLA=)
                          22: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: SvB+QsV4btdCFW7i059dWy1bkAp62n7wxY/pgRJzLzk=)
                          23: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Z79rrvAX+MkAU7RIj82HMSiIMnnHt8DRxj3iIlw1SGs=)
                          24: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: e7VhcfQT9ruvv4CGZkrGsmAxeo+APLPyU8Ze+kwj1t4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Apr 2026 18:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3550 (0xdde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Apr  8 18:45:04 2026 GMT
            Not After : Apr 15 18:45:04 2026 GMT
        Subject: CN=69d6a230-9872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7a:14:42:64:ae:1d:c0:ba:f8:d3:8f:3e:f6:
                    18:83:6f:75:15:0a:68:ac:3d:94:fc:09:73:90:f6:
                    f8:ae:b2:90:21:d0:5a:24:0c:18:19:db:ef:f8:30:
                    1d:50:ef:dc:32:9e:65:1e:f5:12:80:bf:de:ed:17:
                    d2:0b:ad:ee:99:b1:4b:f4:47:54:65:31:8b:b5:da:
                    f8:ab:0a:85:3f:8e:55:60:e6:65:ba:d3:df:c8:80:
                    f8:fe:02:7f:a4:cc:09:8b:4e:00:ad:36:d5:ef:aa:
                    34:90:bf:90:63:ee:7e:87:0a:44:a0:ee:52:4a:43:
                    02:c4:b8:51:fe:30:c8:6b:fa:0a:79:2a:4c:e1:7d:
                    36:22:f3:1f:24:b9:dd:b7:f6:ab:3a:f2:8e:26:ed:
                    9a:2f:7a:48:4f:1b:1e:e4:03:70:97:e2:da:fb:01:
                    02:55:2c:af:7d:da:b1:e1:9f:49:ef:1e:a8:fd:41:
                    c4:64:0e:1f:de:dc:6b:b7:c8:0e:4d:e0:c0:d3:d7:
                    41:05:48:99:9c:e9:0d:eb:11:ab:d3:f2:e0:85:62:
                    c2:f4:21:d6:8c:1e:10:bb:2e:f9:18:0a:1a:a5:c5:
                    a4:f7:d9:dd:37:4c:cf:d7:73:c5:7c:ea:57:2c:67:
                    0b:e7:bb:21:b0:5e:bf:fa:05:49:69:a4:18:38:af:
                    e3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:71:85:6A:90:AE:C5:54:CC:92:5F:6B:D9:C7:6B:9C:AE:3E:06:89
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:91:d6:5e:8b:e8:ed:96:ba:f7:46:5e:26:bf:ae:4d:94:e7:
         f7:e7:c5:2d:37:fa:bc:6a:e4:93:a8:5f:75:f9:77:88:a6:89:
         88:ea:14:b1:b9:b7:30:28:73:33:23:78:02:eb:0c:1d:b7:12:
         83:75:16:11:f9:15:a7:2c:9c:4a:b3:ec:e0:af:21:4e:6f:d5:
         6d:a8:25:8b:0d:6f:2b:6a:ad:87:bf:03:ad:77:9a:24:ba:0f:
         ba:4e:d6:77:52:ae:6d:a5:6a:af:de:05:42:7a:d5:ae:98:b0:
         e9:90:56:47:50:58:76:05:5e:66:30:f4:3f:09:47:df:03:92:
         5f:a6:25:ff:88:da:87:81:ef:c0:c9:5e:d3:36:36:ae:71:9a:
         13:a4:59:6f:42:6b:19:3a:ea:77:d9:6d:87:3b:4d:bf:48:86:
         a8:95:f8:61:81:91:fc:48:bf:85:0b:cf:fe:c0:11:60:11:95:
         c2:b8:8c:b3:71:65:eb:f5:4c:db:01:be:a6:41:85:8b:5e:68:
         f9:c3:23:75:0b:3d:45:5c:0a:0f:05:0f:42:6b:38:96:bb:5f:
         79:39:a1:e6:51:a0:fe:e4:84:70:9e:0a:9e:38:b3:ba:20:56:
         6f:67:dd:8e:82:b0:ab:2a:0e:d7:e5:a7:5a:c6:a4:74:a5:14:
         cc:f1:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 00:21:52 2026 by rpki-client