Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
File:                     hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json)
Hash identifier:          3ZskmWCvpdZmq0BpMHJ6acjQrc0nvHfHtEMnV5afgOY=
Subject key identifier:   09:D0:20:0A:6A:3C:6A:22:29:8C:4D:6A:6B:CB:27:64:A3:1E:3D:74
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Certificate issuer:       /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial:       0498
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
Manifest number:          03EA
Signing time:             Thu 23 Jul 2026 01:34:06 +0000
Manifest this update:     Thu 23 Jul 2026 01:34:05 +0000
Manifest next update:     Thu 30 Jul 2026 01:34:05 +0000
Files and hashes:         1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: wnKl5gbgdxSOgisYD5XNyTeI6Ch6n65GTYZxwhUyMCQ=)
                          2: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: Ev/s13A6k/DcIm1OffodSAjmHH7SzOfcmso4hb44RXg=)
                          3: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: t+cHfFMyQ8NmvDexgT+4lzg2Q83rmvnX7nYHf4IBQdE=)
                          4: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: BF86pvfpbRBo9qXutEzgqO61bS2nTEWr+T+kabrPp1I=)
                          5: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: H8VgsGVXvOR/DsZUOIG9OsZtDhG6b/7E83e/ckfyCFk=)
                          6: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: cxcPBGfE5CZoxeyWHWqPrl7qUEDb1w9Ivop3RXOuNy8=)
                          7: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: O2/KxKIdSE2v482JbxbnQ0getoqbnZqZ+/nYKo7sZyY=)
                          8: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: grW6xPxdsNkObgmvC9oU5U7FXXHibN8xdWW4iVbsRa4=)
                          9: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: CxVWM785DWNfTdffR2/Yw/2Hi2LQnhqbcgLOymKnnM8=)
                          10: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: Sy5GnEGGq49Ut4C8AZxeQpVbXW8n/TI4EHxkVNOwMUM=)
                          11: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: 3uU6kQ8f6IzetYcsltzYNLy8hPqbwPnaYrl6t4o4ReU=)
                          12: B35D540E68F611EFB785D145C4F9AE02.roa (hash: 6jCTzKFpZAM5sRcwoj/RVhwR1AvH7Y/xHmW9G5IE69c=)
                          13: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: wtq9PupYRV4XEewrdMqA8/4bNl2edm+HOBW3n2PpfNo=)
                          14: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: EH518Dy6MrAFwmekT0SecOdweFL+FTqCksa8EB6seaE=)
                          15: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: MOAi7s6/6G4J+pIDkTOufzZW6KS0P8wRn9IgpgfF+kk=)
                          16: 058B976ECA9811F0A295B360C4F9AE02.roa (hash: lCNez/KnH3/u+GXyUNFMwTEZ8K7MJDqkA0Go5e/dS58=)
                          17: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: 4S3t2dvowIG/EeUUH9BW/CIG4gP34ZZohoWk2j8rwOk=)
                          18: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: PuC0DdgiggYtIjLvoalRRhkL/oLZu3l1qbEXfv11uZQ=)
                          19: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: brYkxZidojowoYQIqbU0aCNgQ49H7mQPg5jz4K3RIX0=)
                          20: EA792108690E11EF9396CC48C4F9AE02.roa (hash: cK4Lx01JCSZW4H3YCVnodtAx/ORf7B0e7vIxfgqX3uI=)
                          21: BE4B3228691411EFB573C120C4F9AE02.roa (hash: ovaDzOhz8t6euzDNkjZEtSnXx9uEV3qfaxhhzdo9Nh8=)
                          22: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: TRErWmuqP/DsNILuB+Bsg/oOXJFxA8k+YEgBWxxZqis=)
                          23: 218211CA68F911EF986C8281C4F9AE02.roa (hash: MwIf35XYCZODKT46sKZ+J1cz+B+fnbUAXj0j3RbLFN4=)
                          24: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: AhsLyZ6cSjsB6OxlhSMjPiIcrs1dzGaYxdwJxIKQAV0=)
                          25: 3B4551B4CAA811F09DDC8D69C4F9AE02.roa (hash: hDuVof7d3QEQIcHs4zgmq/ai6KUFB43GrplnDI2UHX4=)
                          26: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: P/zfn2TnTP8oh0npf6LxHTRFCNPzez1h9qHSPByk2/0=)
                          27: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: ylWMSBGShl92T17Vr5K5bsotQdr2G9LiHvdhhYPVrsQ=)
                          28: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: xClDM8EpPeO91j0Mezn/P780Xmby1QeCDq53lVbawmM=)
                          29: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: lTmSpanWfkonoLk8NmfV940KaHPkO1rnz77AY+6Xqc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
        Validity
            Not Before: Jul 23 01:34:05 2026 GMT
            Not After : Jul 30 01:34:05 2026 GMT
        Subject: CN=6a616f8e-26b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:71:30:e2:9b:91:e6:fd:26:95:c9:c8:0e:6a:
                    8b:4e:3a:45:79:c0:0d:b2:94:4b:7f:79:be:b2:f6:
                    4e:6b:87:42:7f:62:60:c6:39:9b:1d:83:3a:10:24:
                    90:c6:5f:2e:e5:78:5e:6c:53:3c:44:8e:13:a3:ae:
                    e5:a9:8b:ed:b0:5d:7d:37:13:7b:6d:b0:49:4e:27:
                    80:fc:27:11:52:6c:e6:b3:04:dd:b2:34:f1:d3:14:
                    f4:63:3f:f4:fa:c8:d4:ea:c4:40:c2:09:c0:d4:05:
                    3e:ea:1c:0a:31:d4:89:c4:a2:2a:37:ce:9d:7d:ad:
                    23:6f:e0:0e:e6:9a:f1:3b:07:8c:6c:16:02:ce:3d:
                    ba:97:cb:37:90:c4:03:13:28:68:63:f3:e3:c8:03:
                    64:ca:d4:b6:d7:c2:9c:37:c3:dc:e2:8d:e9:90:f6:
                    57:ca:b6:12:41:14:0c:52:9e:c5:36:de:7f:86:fe:
                    5d:40:9a:5b:25:9d:f7:40:fa:0f:96:8d:3f:ef:8e:
                    2a:14:69:3f:85:0c:54:41:b6:dd:16:be:a8:71:23:
                    b1:1c:8a:43:f3:6f:c9:3d:2d:86:26:b2:67:73:2a:
                    35:56:43:f0:bb:c4:ed:d7:c1:2a:9d:5a:03:e8:d6:
                    39:e3:99:89:1f:a8:da:45:b1:cc:0e:8c:82:36:a5:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D0:20:0A:6A:3C:6A:22:29:8C:4D:6A:6B:CB:27:64:A3:1E:3D:74
            X509v3 Authority Key Identifier:
                keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:92:1b:a3:f6:e7:32:0d:6b:0b:a1:61:64:2c:4c:dc:3a:be:
         36:93:f3:b0:ed:c4:3e:44:5f:f9:b4:80:08:6e:8a:ed:33:fc:
         4c:9c:54:f5:8d:72:09:71:d7:74:b5:73:80:a1:a6:f8:d6:a2:
         9f:c4:2e:f1:fd:2f:43:49:e3:03:16:c3:fd:44:1d:e1:15:c4:
         3a:75:d2:39:f4:be:d1:6c:36:20:0a:85:fc:29:bf:54:4a:99:
         f9:3e:6c:b3:d8:1e:8c:ea:db:90:f0:14:6c:3a:04:c2:c8:2c:
         89:8a:c7:2e:16:8e:cd:b7:8d:33:79:ba:f4:a7:15:45:63:fc:
         b0:7f:78:96:b1:83:9a:20:e0:b4:67:cd:ac:f0:80:5e:53:42:
         28:18:83:fa:65:a0:9f:2b:68:1d:bf:45:66:47:4a:7e:95:c8:
         bc:61:61:76:08:54:0b:c1:af:ba:0c:42:cb:ac:e2:8b:8c:14:
         51:af:58:66:11:c8:30:cb:9b:0d:d9:c3:5d:07:0c:c0:cd:80:
         3c:b3:46:c3:54:64:4c:2c:19:67:46:97:86:a9:af:73:ff:88:
         64:fc:50:fc:e7:6e:8a:8a:ca:61:c9:7b:a3:97:8c:22:60:70:
         f5:80:88:dc:76:d6:a6:e1:7b:f6:d5:cd:82:6e:d6:df:03:6f:
         41:94:87:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:29 2026 by rpki-client