Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
File:                     mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft (raw, json)
Hash identifier:          4NjtaFagh/i9vmY+LympdIFxMObALzqWi9VZ3u52DaI=
Subject key identifier:   76:B5:91:7F:07:8A:6D:81:E8:CA:04:89:8E:18:78:9A:56:BE:1D:BF
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
Manifest number:          B2
Signing time:             Mon 11 May 2026 08:17:17 +0000
Manifest this update:     Mon 11 May 2026 08:17:16 +0000
Manifest next update:     Mon 18 May 2026 08:17:16 +0000
Files and hashes:         1: mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl (hash: +7FJobL2qbVnNXrHs9YW0kz1qFY67T6Q57dq//tPBb4=)
                          2: 20151124C8EE11F0BD2FFA4CC4F9AE02.roa (hash: V4KzQo4wZ81qbo+MqiN5pgO8Y+Nc0vatL2esSSR0mec=)
                          3: 576F51B8C91911F0AB974C6DC4F9AE02.roa (hash: B7o39MCNiwPkqimijPdHtCcLEzghu38rFNT9tzx72Xo=)
                          4: B1E31BF6C92411F087908126C4F9AE02.roa (hash: GQFH/AinoWYWy/+S33nOX1sOOYYuDreBoZl3vsEFu7k=)
                          5: B2815168C92411F0B6E88126C4F9AE02.roa (hash: CKGad+jxEPQI1Q563YDVR4xdQQ2X4PcTAVEPopEqkPg=)
                          6: 5537463AC91911F0AFA34C6DC4F9AE02.roa (hash: +Aqpgsv63vqmtQkR3ggdxV7iptUt9Fzgpnq420IOOtc=)
                          7: B2F27AFAC92411F09F068126C4F9AE02.roa (hash: 18KHmFviCpW+1MpSyrjZy2QFKZiIGjy/6kV7DRcX0Y8=)
                          8: 9E1FAF62C91A11F08AC0C673C4F9AE02.roa (hash: k/R5dEj2eRfr7v4Cwra7e+lRrjtz7qmR7/pXUFo+/fk=)
                          9: 9F196B2EC91A11F0AAB4C673C4F9AE02.roa (hash: tyQ+cSqsH2Qv0ddD7XoDmKPDoTkmyW/CRBZ+upSwUfo=)
                          10: D008EA4AC92211F0AD92BA21C4F9AE02.roa (hash: C7uwuCI7TqrSFDaQH8Zzgy3OnejNXfnU7UwlS3rMRx4=)
                          11: 567E4552C91911F0BB194C6DC4F9AE02.roa (hash: BXcg8YArXJ5CmD6evpZM4dq8jMTCCVwQHO6BvkW3b7g=)
                          12: 9F9D4E9EC91A11F08745C673C4F9AE02.roa (hash: iYpQ7cVbxOGpGyj+MLYh3y7Qiox2JCzWYbEYeJID7GU=)
                          13: 7D679C84C92511F09CF68054C4F9AE02.roa (hash: S9XUSJnxKvgsBDvTpONrUcHMGtxkSO4X3tK4EZVr99k=)
                          14: 55B2771AC91911F0BA7D4C6DC4F9AE02.roa (hash: hVwh2ep8Iw7o7hX3MNdhNDewDGbex1WLUmhHf+4i9PI=)
                          15: B40A9A4EC92411F09FAB8126C4F9AE02.roa (hash: 3N14qaLKIE8BN0vWJd2KtmivGDsUthfcKYgKyJWVe3U=)
                          16: 067813BC4A8D11F18345C51BAD833773.roa (hash: u0iZdyLySU5nh8BmJG8Ko9aaKO8cDJaJNm17Hvjmaek=)
                          17: B4B21A80C92411F099228126C4F9AE02.roa (hash: rjpeXMm4lHb5Ck0Ms0tdS2iF+f13HUBBUzVVJWV4PPM=)
                          18: 230E492ECB6711F0991B7E4FC4F9AE02.roa (hash: tNXsHZohUwAzxEAZYS9aP/mod2gm0YLp4U1BMbJHsAQ=)
                          19: 9DA31C0EC91A11F0AEDEC673C4F9AE02.roa (hash: DHpdbRF2Zso6P1hxGHzUsRdlrbKQ33Y/CNHuuhJjb5g=)
                          20: C4EC2A8ED4AB11F08EA0FC57C4F9AE02.roa (hash: AgB/Lpuse8T/z5cV67IzFShDTNVxyKAZ8KwUvRhawFQ=)
                          21: A0000D2CC91A11F08D74C673C4F9AE02.roa (hash: sY76HWNe2DtCJtYS74CJx7prfOKVaNPpOF+PUbbT4H0=)
                          22: 57F3E1BCC91911F083BE4C6DC4F9AE02.roa (hash: 5dwmeSZ0SRVIGYAiO2cL5WhMdIRKKwW4wqbG2GaMUhM=)
                          23: 2486E3E0D4B011F0A4E6361AC4F9AE02.roa (hash: ZW6jL59jikFz0FLaafnNnq4L3V9q7AF9K/n1i2MST+s=)
                          24: B3994B8CC92411F0928E8126C4F9AE02.roa (hash: yEb+i+mak4WjK+zJpb4ckWnaPd4JzdPaxKZm8fn0XYU=)
                          25: A87058D8445111F196638493CB833773.roa (hash: hjmeDeK8OqpXBY0QHMz/cAiPa+eSBTe6PN1y5++7MO8=)
                          26: 58EF9BECC91911F080D34C6DC4F9AE02.roa (hash: BGmFZ9dRfD8EZt0V672OP6EF10Q8PY5YgUnIZ7TDMZ4=)
                          27: 9D3B8A8AC91A11F0B4BFC673C4F9AE02.roa (hash: /+8j5V7Q4inRuiyHFTWZNWPR7MOmulWdNP3/6QLql64=)
                          28: 1C2DE6A6D4A311F08D323E54C4F9AE02.roa (hash: tfqU0yp7k06G8a+YLVOyxW/4efWaKePEWJ7Jmic77aU=)
                          29: 9E825176C91A11F0876AC673C4F9AE02.roa (hash: d71K3UhmJpGSIPnHwtXjuIVmSy3U1s/D91e+1fG5beE=)
                          30: 86DAE3A04A8C11F188553DBDAC833773.roa (hash: /cmAtIFJsaYzPWu1xv/Moo/JrJ9wB/SowewT12UuOCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: May 11 08:17:16 2026 GMT
            Not After : May 18 08:17:16 2026 GMT
        Subject: CN=6a01908c-a500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:76:99:f9:3e:42:bb:b5:3d:90:ff:ff:64:
                    64:65:c9:62:5b:4e:56:59:8f:b4:91:00:18:43:33:
                    01:d9:da:9f:00:48:c5:64:2f:e1:a2:f6:3a:a6:d9:
                    c8:c7:6f:04:ed:10:3a:e7:50:ba:f0:cc:22:de:c1:
                    4f:f4:a4:cf:ed:40:a5:26:af:d4:a1:c4:c5:12:16:
                    53:e5:dd:6e:4f:f6:50:14:4b:63:07:c0:64:85:8f:
                    5a:ff:23:ed:c3:ed:07:81:ac:e4:8b:24:ba:ba:ce:
                    50:3b:59:5f:2f:b5:04:dc:d4:24:0e:a5:d8:f1:f8:
                    9e:b9:68:19:5e:fe:ba:88:6d:ee:dd:84:0e:42:d2:
                    79:81:a2:d7:9b:b1:c5:ee:42:15:f8:a6:2c:c2:7a:
                    b7:fb:93:6b:5b:0c:b9:44:46:d6:fd:2c:9b:4b:2b:
                    3e:ba:11:dd:b6:4c:b2:6a:3c:3d:70:dd:ca:0a:bc:
                    f6:2a:99:53:5a:b5:6c:27:69:ce:f8:7e:b8:cb:4d:
                    2a:04:d3:d3:05:d5:9e:55:14:6b:4d:b4:65:79:fb:
                    5b:c4:9b:53:52:76:10:aa:96:64:d9:24:03:d8:18:
                    66:cf:69:d2:78:e8:5e:b4:2f:94:06:e8:08:0d:ac:
                    a9:dd:b2:a0:e1:c1:cd:54:97:f6:b5:eb:3e:1f:09:
                    4e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B5:91:7F:07:8A:6D:81:E8:CA:04:89:8E:18:78:9A:56:BE:1D:BF
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:37:4f:7f:c6:7c:6b:91:30:f7:ff:f2:3b:c6:f7:28:a6:fe:
         e7:48:09:18:f3:8a:5e:ae:2f:a2:9f:16:54:87:5b:83:d6:32:
         80:ab:30:48:ba:f1:b8:47:33:0e:31:ba:28:72:07:0b:47:12:
         62:04:e7:b7:82:1a:18:c4:43:82:97:d0:1a:63:21:1e:d5:c7:
         20:7d:36:bf:a6:87:11:e4:fa:f1:27:a3:53:58:3f:bd:2c:69:
         a1:3d:69:4e:91:64:c1:f7:2a:92:ad:e3:ff:13:ba:4d:d0:92:
         c8:d6:02:ed:e8:a4:bd:42:ea:b5:3d:91:94:43:78:67:f9:90:
         0d:c6:e6:dc:b1:63:d7:8a:bf:08:7a:5a:84:79:97:44:14:92:
         aa:ce:fb:7f:70:ae:96:80:d4:6b:d6:49:63:bf:3a:77:89:50:
         00:4c:c3:45:f6:30:82:df:26:84:7b:42:7a:b5:de:96:23:df:
         7d:4a:03:0a:89:89:23:d3:69:1b:f3:d4:5e:8e:d8:a2:68:00:
         ee:62:dd:38:ef:fe:41:e8:01:3b:3f:f6:b9:61:85:78:66:da:
         29:94:03:fb:75:85:d7:6d:a1:b0:4b:e8:45:b8:70:3e:ec:77:
         41:3a:72:af:af:41:ba:0b:d0:53:ff:ac:52:3c:bd:c3:a0:65:
         d9:02:63:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU5OEQxMTAvBgNVBAUTKDlBM0E2N0VERENEMDk3NzUzM0E5QTBCOEM0OUY0QzAx
MDBDODUzOTEwHhcNMjYwNTExMDgxNzE2WhcNMjYwNTE4MDgxNzE2WjAYMRYwFAYD
VQQDEw02YTAxOTA4Yy1hNTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApWt2mfk+Qru1PZD//2RkZcliW05WWY+0kQAYQzMB2dqfAEjFZC/hovY6ptnI
x28E7RA651C68Mwi3sFP9KTP7UClJq/UocTFEhZT5d1uT/ZQFEtjB8BkhY9a/yPt
w+0HgazkiyS6us5QO1lfL7UE3NQkDqXY8fieuWgZXv66iG3u3YQOQtJ5gaLXm7HF
7kIV+KYswnq3+5NrWwy5REbW/SybSys+uhHdtkyyajw9cN3KCrz2KplTWrVsJ2nO
+H64y00qBNPTBdWeVRRrTbRleftbxJtTUnYQqpZk2SQD2Bhmz2nSeOhetC+UBugI
Dayp3bKg4cHNVJf2tes+HwlOHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHa1kX8H
im2B6MoEiY4YeJpWvh2/MB8GA1UdIwQYMBaAFJo6Z+3c0Jd1M6mguMSfTAEAyFOR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9CODg1MzFDQUM4
RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi9tanBuN2R6UWwzVXpxYUM0eEo5TUFRRElV
NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi9tanBuN2R6UWwz
VXpxYUM0eEo5TUFRRElVNUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsDdPf8Z8a5Ew9//yO8b3KKb+50gJGPOKXq4vop8WVIdbg9YygKswSLrxuEcz
DjG6KHIHC0cSYgTnt4IaGMRDgpfQGmMhHtXHIH02v6aHEeT68SejU1g/vSxpoT1p
TpFkwfcqkq3j/xO6TdCSyNYC7eikvULqtT2RlEN4Z/mQDcbm3LFj14q/CHpahHmX
RBSSqs77f3CuloDUa9ZJY786d4lQAEzDRfYwgt8mhHtCerXeliPffUoDComJI9Np
G/PUXo7YomgA7mLdOO/+QegBOz/2uWGFeGbaKZQD+3WF122hsEvoRbhwPux3QTpy
r69BugvQU/+sUjy9w6Bl2QJjXw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:59:09 2026 by rpki-client