Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
File:                     QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json)
Hash identifier:          TpnV0yTmDe5vNWSw1xzmkhLUgVWZtxtuK6XEhwL9Y+o=
Subject key identifier:   E1:90:2C:FE:52:FB:F6:D0:76:4D:4B:10:2C:31:E4:F4:BC:0A:D5:13
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0E05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
Manifest number:          0CE7
Signing time:             Fri 22 May 2026 18:50:21 +0000
Manifest this update:     Fri 22 May 2026 18:50:21 +0000
Manifest next update:     Fri 29 May 2026 18:50:21 +0000
Files and hashes:         1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: r7UeJKUvMqhLX7D6EAXiMsnDhMPujP+tjNsMjnYrx7c=)
                          2: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: sHM4xXld7uDeHu4KE4YRCWi+rdXGTKPH7QzaRU3HxOU=)
                          3: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: uLT99LvREt6aFgLq+8J5+/4C4Z0AHsSdTIhcGHc+DZg=)
                          4: 5CBF3F2A540B11F1B7C20C5592833773.roa (hash: 1RR4rXrGdgVkusSgQXAk0hFyo7p3RZsSCUOiYGlL9OQ=)
                          5: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: aJpPvoSGRVMA94Dw8tXt33zHeGMuxciJSkooTeVqXLA=)
                          6: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: eh/7xK3jzeTfsbyM/J4kfcM/+VwQ8Z7/19vJJZdyK1Y=)
                          7: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Z79rrvAX+MkAU7RIj82HMSiIMnnHt8DRxj3iIlw1SGs=)
                          8: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: wyS0hB9hlamFhnUTh6Gv6KcrrBw3EQZa9bUf+tLTABQ=)
                          9: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: iSPArCekR6M/cWSzzjFrByEv9qSybnPOARzA3B9QRaY=)
                          10: 9CC3E6FE41AD11F1956D3719A7833773.roa (hash: 6Xhtjd4H7QCjF8lEQUTU+ru3uMNm+2A1ZGjVmTpy+Gc=)
                          11: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: PCXWhCBdOz3wuM8WU55B1FYMT0DwN0M40X705jCXOcQ=)
                          12: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: 0NXtzAL1o+tarKa4oNc7xxhauxSJ0WEZHKYx7ZTMEWI=)
                          13: BB3B63A83A7011F1B365A8EDB1833773.roa (hash: rrNm2V87UUk3ZtAA1EOIUlvBXqSc+wZlGyp0mTMptsA=)
                          14: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: d51m3hjXY2TezXxt2Mgw2qLO9oFLWxyGtgPvE/O7bjk=)
                          15: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: TWadmcrZewtuAgz2VI+NPqZM8R7/PZMSyZJSCwVn5T0=)
                          16: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: C1CK+9M/ckvpPGWd0ysVo6YESQAEhbu/xrQHT/N9P6Q=)
                          17: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: i5ROrzKB1s+VCKVSWpJPv8NGaUfssmlckuMKuKCQzg4=)
                          18: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: e7VhcfQT9ruvv4CGZkrGsmAxeo+APLPyU8Ze+kwj1t4=)
                          19: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: yc3SgJhB9U1lGAckaKIVNdgap51jHeAdYVySNP13Icc=)
                          20: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: uui58eIkIAuoIfjCf5IA5jNvQTdVLqnOyu4QWW+fdPU=)
                          21: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: pVH2bMGC7+464gDRV/z0xb8UJ/QPCj/ZW97Q6jJEWrE=)
                          22: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: e3i2wusdoLzTSROJLMycuqmh4b9nxg7+8W+M3MY32nk=)
                          23: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: /PC8S/6p0cKFfDtq1mZfKqLDeu+/nUGuOGrYhA617sY=)
                          24: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: Nisqq4Q0qjVEubmWisYThrjO8ZKrL4odD75LU3tphLs=)
                          25: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: SvB+QsV4btdCFW7i059dWy1bkAp62n7wxY/pgRJzLzk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 May 2026 18:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3589 (0xe05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: May 22 18:50:21 2026 GMT
            Not After : May 29 18:50:21 2026 GMT
        Subject: CN=6a10a56d-4a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5b:a9:c2:e6:9d:d7:6e:a0:bc:6e:87:8a:44:
                    93:82:86:47:81:90:1c:fd:95:9b:ee:b4:a9:66:1c:
                    55:f6:a1:c2:b5:23:ae:a3:c2:00:ac:c1:f7:e3:86:
                    0d:8d:d8:d6:18:77:5b:06:a4:d0:07:93:cd:69:43:
                    b6:fc:3f:ea:56:59:64:5c:36:09:ff:6b:d7:65:e3:
                    d7:28:31:91:c4:0a:3d:ca:0a:64:7d:63:f4:8f:c2:
                    b7:63:a6:db:6d:bf:76:78:34:15:44:8b:c0:28:86:
                    91:0c:78:25:76:ae:52:06:c9:ba:9b:4f:a8:bb:00:
                    eb:ed:2f:b1:8c:09:dd:72:c2:9f:40:f0:18:69:6c:
                    69:de:77:c0:2e:74:e6:0b:9d:d5:7b:6c:16:93:8d:
                    67:16:7d:02:46:fa:25:02:4d:ab:ef:53:d9:97:af:
                    9f:08:d8:cd:2f:ea:57:9f:54:18:32:68:15:f8:f6:
                    94:8d:f1:1d:f4:54:09:7c:a7:99:48:4d:24:ba:d4:
                    85:94:50:4c:e3:2a:ac:71:8e:15:f5:52:76:ab:14:
                    d2:5f:af:2b:fd:b5:ab:c2:d6:6f:c5:29:ad:48:66:
                    8f:58:4f:24:49:bc:4a:3c:e8:5d:7b:b3:1b:5b:f3:
                    15:b5:90:4f:a6:74:51:c0:30:4e:fc:d4:8f:83:13:
                    9c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:90:2C:FE:52:FB:F6:D0:76:4D:4B:10:2C:31:E4:F4:BC:0A:D5:13
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ac:03:bb:4f:aa:15:01:b9:c8:22:67:e4:81:de:11:11:65:
         65:fe:81:bd:ff:d7:35:ed:51:d1:12:80:3c:26:70:6a:6e:70:
         6c:38:69:c8:49:bf:30:c0:a4:89:f6:4a:73:26:4d:2c:1e:ce:
         92:c9:3a:f7:63:13:40:0a:5c:ed:d2:48:69:53:34:32:7c:71:
         71:10:3b:14:88:35:d8:97:56:74:e7:fc:b8:55:b6:6e:d8:48:
         b2:14:32:00:2d:33:b8:79:aa:10:cc:cb:e0:07:1e:65:2d:39:
         d1:b0:81:92:4f:3c:3a:1e:2f:d5:71:f9:c7:30:30:ff:11:f0:
         61:47:6e:af:d6:d6:7b:2a:ae:e0:47:be:49:b9:8c:7c:bf:90:
         53:04:83:5a:ad:c1:b3:e7:8b:f6:84:a3:97:d4:28:64:4e:b6:
         19:82:ae:49:0f:28:58:3f:78:76:63:4b:95:34:d0:b5:00:b2:
         dd:40:71:7c:17:49:3c:17:f3:cb:c9:8d:33:5c:b6:72:48:25:
         30:57:bf:fa:76:e2:d3:47:d7:ba:86:5d:bb:7d:e5:14:fb:14:
         ef:e9:1a:81:58:86:84:4c:97:30:70:ea:a2:dd:c1:b8:e2:91:
         52:a7:15:39:6e:67:b5:35:bb:7c:55:4c:f5:21:d6:40:91:48:
         70:28:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:36:39 2026 by rpki-client