Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
File:                     QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft (raw, json)
Hash identifier:          WZo9JiMoHrgWi9YUBXovISQOfAdma2072+LFJVOjVEU=
Subject key identifier:   84:B7:97:27:D5:5F:76:FA:83:87:6F:A7:F1:B1:D5:61:AC:C7:F8:E8
Authority key identifier: 40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5
Certificate issuer:       /CN=A911CB05/serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
Manifest number:          0134
Signing time:             Mon 01 Jun 2026 06:16:03 +0000
Manifest this update:     Mon 01 Jun 2026 06:16:03 +0000
Manifest next update:     Mon 08 Jun 2026 06:16:03 +0000
Files and hashes:         1: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl (hash: Ex007L+0cVP5j94fvYyGsychLVX9hlJ/M/O0AdVqZEs=)
                          2: E692CC2A8A9B11EFBC56AA85C4F9AE02.roa (hash: /iUDR+GzejkmITAmPKgcB03fXiVvkAuvv4cWd5x9948=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl
                          rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CB05, serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5
        Validity
            Not Before: Jun  1 06:16:03 2026 GMT
            Not After : Jun  8 06:16:03 2026 GMT
        Subject: CN=6a1d23a3-044d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:d4:eb:40:2f:c6:fa:58:0c:aa:8a:97:e4:
                    cc:4e:09:58:50:50:01:1b:7f:49:8b:91:a8:07:d6:
                    42:0e:36:89:9c:30:50:b0:0e:69:94:2d:c9:ec:9f:
                    5e:8b:3d:64:b5:e1:39:36:3d:58:cd:ac:fa:e9:db:
                    31:8e:5c:b6:37:2b:f9:55:af:f6:cf:a8:8c:c7:c3:
                    89:b8:d0:3d:ae:77:70:b7:dd:90:4d:5d:c8:a7:df:
                    47:83:fb:aa:ff:ce:6d:76:6f:ad:85:9e:78:44:cd:
                    87:83:7f:19:0f:e4:7b:36:24:d2:2c:6c:57:48:5a:
                    f8:41:49:2a:72:fa:a6:28:0f:c3:82:c8:e7:e7:12:
                    15:6c:77:61:ec:a1:62:6a:7c:b0:19:fb:83:61:16:
                    13:5a:8e:2a:83:e2:4c:71:3b:ba:a4:06:a3:65:c0:
                    69:d7:c8:46:a7:8d:3d:4a:af:3b:1f:41:f5:5b:d4:
                    08:a6:d6:f0:57:c6:13:64:a8:33:a7:2a:81:d9:2f:
                    1f:d9:16:5a:aa:b6:8e:fd:73:03:a8:ec:9b:df:f8:
                    ca:69:d2:7d:0b:c6:b2:a7:8d:dd:96:51:5a:c4:67:
                    e0:e5:bf:31:8a:62:bd:e1:10:b3:9a:46:18:82:e8:
                    88:6d:b2:6d:0d:aa:1a:2a:39:12:85:05:bc:e9:89:
                    bc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B7:97:27:D5:5F:76:FA:83:87:6F:A7:F1:B1:D5:61:AC:C7:F8:E8
            X509v3 Authority Key Identifier:
                keyid:40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a2:b1:48:2e:cc:95:0a:99:bb:df:54:e1:67:60:e2:0d:06:
         c7:7f:8d:a9:33:fa:93:a2:fd:b2:12:20:a6:62:34:3b:7c:97:
         0e:7a:a8:bf:54:e8:86:f4:77:e6:7d:b7:23:1e:20:2c:1a:95:
         32:d7:96:5f:ba:5f:3d:89:c6:a0:00:31:de:ca:f8:c5:f9:4d:
         71:5e:b2:1e:74:d8:dc:20:b0:bf:5b:b2:3b:7f:e5:87:17:59:
         f2:8d:7a:de:76:d4:87:84:d7:20:46:be:ee:ef:7d:13:12:b0:
         99:6d:2f:fb:09:54:d5:40:6f:56:a5:fd:36:dd:b4:d2:6d:f7:
         7d:72:36:8f:79:0d:9f:27:f2:c1:6e:6f:87:37:f6:ac:7c:ac:
         86:96:50:51:61:74:e0:66:3d:6f:e0:ab:5f:c5:2e:c3:b5:83:
         c1:db:a7:35:7f:db:29:aa:29:b2:20:7c:d6:ff:63:c0:b9:8a:
         fd:fa:b2:a0:07:30:5f:b9:b4:d2:45:15:fa:61:75:f6:76:d1:
         5f:c9:47:82:29:47:c2:e5:d2:c5:2d:b9:83:d0:d3:84:eb:33:
         15:0a:06:45:4e:73:c7:81:f1:db:5b:49:d8:1e:d5:6f:88:c6:
         a2:90:5d:35:56:9d:e7:83:05:fe:ef:f1:11:f4:c4:95:9d:ac:
         c3:a0:33:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:41:35 2026 by rpki-client