Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
File:                     6156BECA0310C700B8B4AF43C472D722BF6E1694.mft (raw, json)
Hash identifier:          IOOY5FDZ9hYOeqgf7NoJcHa1FnSjNs0yiZ2HCPvdJBQ=
Subject key identifier:   94:08:5B:36:AA:8B:D4:CA:97:8C:83:66:A6:CB:A0:DA:44:BB:74:3D
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       4D565B05B163AB9BB7844D20628D8DA98EBD5A89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
Manifest number:          62
Signing time:             Wed 25 Mar 2026 16:21:31 +0000
Manifest this update:     Wed 25 Mar 2026 16:16:31 +0000
Manifest next update:     Thu 26 Mar 2026 18:32:31 +0000
Files and hashes:         1: 31342e3133372e3235312e302f32342d3234203d3e20323132323539.roa (hash: CxegjX7Xj2f6hMreza0ap+cuQuB5I7S4wlmloleMgNs=)
                          2: 31342e3133372e3232362e302f32342d3234203d3e203136323736.roa (hash: EECiLST47YBJqxRi5iWAOWgUl9i2azYqsI4/sGS75Ps=)
                          3: 31342e3133372e3234362e302f32342d3234203d3e20323132323338.roa (hash: F31fqLMkP/Jxx4dd64lJfhvumRckrvT7vCse229CSuo=)
                          4: 31342e3133372e3234312e302f32342d3234203d3e20323134363639.roa (hash: pGpR2hXLE/ZFnTL6OcQOQZCsGcmbuBdo4b8eNEzernI=)
                          5: 31342e3133372e3234372e302f32342d3234203d3e20393739.roa (hash: JijQtrikwQFPV3nBE7gVebd8f3AN5KxakYIvZCbezdY=)
                          6: 31342e3133372e3235302e302f32342d3234203d3e203438323636.roa (hash: Nwk61XMmd7YPMfBkN8839IztXuKAC4sTtcmoCtRIyu8=)
                          7: 31342e3133372e3234382e302f32342d3234203d3e203436353539.roa (hash: DUEFtcCDqSyZYjkjXAjFmWzcDQxorqJ+1cT5BylqgZ0=)
                          8: 6156BECA0310C700B8B4AF43C472D722BF6E1694.crl (hash: ton1ikaKgXAoKXcB8ECwzVjTulVFzpBUc/iqtd4fDLI=)
                          9: 31342e3133372e3233352e302f32342d3234203d3e203631313132.roa (hash: 5zW6n0mz/atKDc26diyVRDAyQu3Q1+NLxLgkKQIh+ak=)
                          10: 31342e3133372e3233342e302f32342d3234203d3e20383334.roa (hash: OZWi9q/sULjIJ8gYF5VYZdZGjAsEFHTuTUEOADmJh4E=)
                          11: 31342e3133372e3234342e302f32342d3234203d3e20383334.roa (hash: kQ3ENgAOZlrqz8WDoqdrBp9F2MllqCrjQkk16H68OCI=)
                          12: 31342e3133372e3234322e302f32342d3234203d3e20313531333839.roa (hash: 7Dp+N+7B5mUnhgbVQvMtAHWZr+N3eDrLgtC0cwn3gVA=)
                          13: 31342e3133372e3234332e302f32342d3234203d3e20313531333839.roa (hash: 2TWwkIxMgV6QR3tGaX60Vwl3WwcXXs/9m6hFKcpIHs0=)
                          14: 31342e3133372e3234312e302f32342d3234203d3e20333935303437.roa (hash: 7X8yo3EvrRjWQmLXG+K1RXremtB7ZkugzSsSFMvrE70=)
                          15: 31342e3133372e3233322e302f32332d3234203d3e20383334.roa (hash: lJh7GNr2vpfKjAE26uP2aqzjo7Dw96bI0JmJlEWuouk=)
                          16: 31342e3133372e3234302e302f32342d3234203d3e20383334.roa (hash: UpFFtqP4jK3VVGHyQ1fn1W5S410BNBGLmhCOzvii1u0=)
                          17: 31342e3133372e3234372e302f32342d3234203d3e20323036333030.roa (hash: TQesARHszsgZra+Bxv9haJLLdNxK20Hb5OLe+W3KW0k=)
                          18: 31342e3133372e3235352e302f32342d3234203d3e20323036333030.roa (hash: zwQ4taIgFoWz22vDNlECLdrLwdVDnq2FKQnAMgTOYXU=)
                          19: 31342e3133372e3235342e302f32342d3234203d3e203436353539.roa (hash: Eu6i1paGIZnTqmT2XR94Xj3aYG9BWt2VlYBarkCYG6Q=)
                          20: 31342e3133372e3235312e302f32342d3234203d3e20313531333331.roa (hash: S9GI9sVCkq9wzqJZ7Rt/aeisq+yePeHFUkyMs1RHv1U=)
                          21: 31342e3133372e3232382e302f32322d3234203d3e20383334.roa (hash: 7ug5qdCc6N2U6EZ4ZQx1/tAU2p/gCbbLFzvDB+ttets=)
                          22: 31342e3133372e3235332e302f32342d3234203d3e20313533393239.roa (hash: LfUIgUYiQxTJwSybYNLnkYvAWP+55CgFrfvjTRFRLBs=)
                          23: 31342e3133372e3233382e302f32332d3234203d3e20343031333339.roa (hash: lEa5u9jVuE0kfsOeKBb6dkAG6kFUOtWuI3xb6MF0a0o=)
                          24: 31342e3133372e3234352e302f32342d3234203d3e20323132323338.roa (hash: 3DR5Mq5Dq+OGflccKKBt7tnJCKKddlnZArFDGUuSP1A=)
                          25: 31342e3133372e3234392e302f32342d3234203d3e203436353539.roa (hash: EUDKS7lOKdFS8VA9qWAvGbjHh9swO54hbM5yiQRQsFQ=)
                          26: 31342e3133372e3232372e302f32342d3234203d3e203330303538.roa (hash: do5lPBU/xHtgwvcuTP/yelXnfi8FtaNW5q6RV5AamWo=)
                          27: 31342e3133372e3235322e302f32342d3234203d3e20383334.roa (hash: lTp5QRkSNeHWY5q6ciZTEfZMx5E2y4dKa4cQ3sNS1TA=)
                          28: 31342e3133372e3232342e302f32332d3234203d3e203538333639.roa (hash: uLuWH5FT/y2Nmob1L1JVI0IlFRJMPb4F73JOB/6c6t8=)
                          29: 31342e3133372e3235352e302f32342d3234203d3e20393739.roa (hash: j8LP4cp95BH+HHoIlDc2OpyW11uVWk6kZd9TQ/G74CE=)
                          30: 31342e3133372e3233362e302f32332d3234203d3e20383334.roa (hash: 0znyIQXXGYMunWIVFzB8zmNMNeSvlRA+9wS2E87FKOY=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 18:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:56:5b:05:b1:63:ab:9b:b7:84:4d:20:62:8d:8d:a9:8e:bd:5a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Mar 25 16:16:31 2026 GMT
            Not After : Mar 26 18:32:31 2026 GMT
        Subject: CN=94085B36AA8BD4CA978C8366A6CBA0DA44BB743D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:80:eb:c9:8b:b0:d7:ef:f3:58:9f:33:aa:ee:
                    08:59:89:3b:fa:ca:b2:f9:8a:9e:fd:9b:4a:9d:f9:
                    b4:f0:9a:96:bb:55:94:49:0d:fc:1d:77:31:2b:32:
                    59:12:75:b2:79:9e:fa:c7:4a:ec:0d:05:42:c1:78:
                    cf:a3:6a:37:01:4b:95:65:59:0a:a4:4f:eb:9e:ec:
                    0d:7d:e0:f2:64:96:bc:9d:5a:65:eb:f5:17:3f:e3:
                    98:42:2e:30:5b:97:e6:81:8e:93:d0:96:ca:4c:62:
                    d0:00:72:e8:5d:6d:1e:49:23:46:10:44:65:29:49:
                    f1:0f:57:31:79:ba:33:c1:78:cf:1b:02:79:d4:9d:
                    6d:27:e5:20:7d:6e:41:15:a7:99:07:c8:27:a0:0f:
                    9b:c5:bb:8b:d6:fb:ea:c0:3c:20:c7:e5:ff:bc:59:
                    5b:78:c8:9e:4c:84:d1:2f:b9:96:c8:dd:9e:d7:4e:
                    e3:06:cd:81:d1:97:50:19:46:ca:79:1c:8d:65:56:
                    40:28:f4:12:af:6d:1b:cc:e8:d0:c7:b2:dd:90:7d:
                    0b:e5:88:a5:93:f2:57:6f:d6:de:b1:3d:fd:ca:58:
                    06:97:60:fc:56:ac:12:cd:ae:a3:88:8f:21:9d:a4:
                    ce:10:22:16:68:5b:ff:c0:3e:67:70:49:b4:ca:ed:
                    78:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:08:5B:36:AA:8B:D4:CA:97:8C:83:66:A6:CB:A0:DA:44:BB:74:3D
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:75:50:08:f3:10:e1:53:9d:ae:44:97:5e:bd:4f:42:ad:15:
         dd:9c:11:ed:f3:23:39:15:59:94:7b:18:93:f4:b4:a0:83:ef:
         18:32:32:2a:38:24:cd:d1:16:ac:63:a8:47:84:06:ef:5f:3b:
         ea:b0:82:1c:9d:18:af:41:50:29:29:75:a4:ee:05:18:85:83:
         7f:10:f6:d1:7d:47:83:f6:95:96:da:26:a8:81:ec:fa:bd:a1:
         22:50:87:ed:47:36:36:27:37:2e:93:5b:3c:58:a1:3a:b4:96:
         8b:e2:77:ab:34:c5:0c:a4:a7:5a:f9:0e:ed:f3:bc:74:56:5a:
         12:f4:33:1b:e9:e6:d7:03:26:d6:c8:24:df:8e:63:0a:34:bc:
         56:7e:72:bc:96:d2:57:88:a5:80:c5:5f:6c:d8:ae:a8:23:3f:
         19:68:e1:73:ff:03:10:ab:f5:26:ba:1f:96:11:87:be:27:92:
         1e:48:a8:28:1a:c9:27:dc:5b:65:78:82:dd:03:20:b4:bb:b5:
         87:33:33:4d:8d:bd:8a:bb:a3:f4:e3:4c:45:10:cf:2f:0f:25:
         d2:20:97:5a:c9:0c:df:63:25:b9:c5:20:46:8b:9a:d1:9d:67:
         bc:a6:e0:bf:d5:db:fd:bf:99:ac:f2:9b:3a:a7:a4:cb:80:18:
         63:ab:f9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:42 2026 by rpki-client