Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
File:                     hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json)
Hash identifier:          DLuGpwmiAOHvKcyU3nFCXiDSVL9OJlRcOibI//gOjGI=
Subject key identifier:   80:AA:0F:A4:2C:A6:2E:C6:AD:62:24:93:E6:05:E2:99:98:F3:17:A0
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Certificate issuer:       /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial:       04BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
Manifest number:          040E
Signing time:             Wed 23 Sep 2026 00:09:18 +0000
Manifest this update:     Wed 23 Sep 2026 00:09:17 +0000
Manifest next update:     Wed 30 Sep 2026 00:09:17 +0000
Files and hashes:         1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: IClphYrZ56sg5V6Sspd2R0YOh431lm6dJcU+VmnY9RQ=)
                          2: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: AhsLyZ6cSjsB6OxlhSMjPiIcrs1dzGaYxdwJxIKQAV0=)
                          3: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: ylWMSBGShl92T17Vr5K5bsotQdr2G9LiHvdhhYPVrsQ=)
                          4: B35D540E68F611EFB785D145C4F9AE02.roa (hash: 6jCTzKFpZAM5sRcwoj/RVhwR1AvH7Y/xHmW9G5IE69c=)
                          5: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: BF86pvfpbRBo9qXutEzgqO61bS2nTEWr+T+kabrPp1I=)
                          6: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: wtq9PupYRV4XEewrdMqA8/4bNl2edm+HOBW3n2PpfNo=)
                          7: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: 4S3t2dvowIG/EeUUH9BW/CIG4gP34ZZohoWk2j8rwOk=)
                          8: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: PuC0DdgiggYtIjLvoalRRhkL/oLZu3l1qbEXfv11uZQ=)
                          9: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: grW6xPxdsNkObgmvC9oU5U7FXXHibN8xdWW4iVbsRa4=)
                          10: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: Ev/s13A6k/DcIm1OffodSAjmHH7SzOfcmso4hb44RXg=)
                          11: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: TRErWmuqP/DsNILuB+Bsg/oOXJFxA8k+YEgBWxxZqis=)
                          12: 3B4551B4CAA811F09DDC8D69C4F9AE02.roa (hash: hDuVof7d3QEQIcHs4zgmq/ai6KUFB43GrplnDI2UHX4=)
                          13: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: xClDM8EpPeO91j0Mezn/P780Xmby1QeCDq53lVbawmM=)
                          14: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: CxVWM785DWNfTdffR2/Yw/2Hi2LQnhqbcgLOymKnnM8=)
                          15: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: brYkxZidojowoYQIqbU0aCNgQ49H7mQPg5jz4K3RIX0=)
                          16: EA792108690E11EF9396CC48C4F9AE02.roa (hash: cK4Lx01JCSZW4H3YCVnodtAx/ORf7B0e7vIxfgqX3uI=)
                          17: BE4B3228691411EFB573C120C4F9AE02.roa (hash: ovaDzOhz8t6euzDNkjZEtSnXx9uEV3qfaxhhzdo9Nh8=)
                          18: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: MOAi7s6/6G4J+pIDkTOufzZW6KS0P8wRn9IgpgfF+kk=)
                          19: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: O2/KxKIdSE2v482JbxbnQ0getoqbnZqZ+/nYKo7sZyY=)
                          20: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: EH518Dy6MrAFwmekT0SecOdweFL+FTqCksa8EB6seaE=)
                          21: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: cxcPBGfE5CZoxeyWHWqPrl7qUEDb1w9Ivop3RXOuNy8=)
                          22: 218211CA68F911EF986C8281C4F9AE02.roa (hash: MwIf35XYCZODKT46sKZ+J1cz+B+fnbUAXj0j3RbLFN4=)
                          23: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: H8VgsGVXvOR/DsZUOIG9OsZtDhG6b/7E83e/ckfyCFk=)
                          24: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: t+cHfFMyQ8NmvDexgT+4lzg2Q83rmvnX7nYHf4IBQdE=)
                          25: 058B976ECA9811F0A295B360C4F9AE02.roa (hash: lCNez/KnH3/u+GXyUNFMwTEZ8K7MJDqkA0Go5e/dS58=)
                          26: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: 3uU6kQ8f6IzetYcsltzYNLy8hPqbwPnaYrl6t4o4ReU=)
                          27: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: Sy5GnEGGq49Ut4C8AZxeQpVbXW8n/TI4EHxkVNOwMUM=)
                          28: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: P/zfn2TnTP8oh0npf6LxHTRFCNPzez1h9qHSPByk2/0=)
                          29: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: lTmSpanWfkonoLk8NmfV940KaHPkO1rnz77AY+6Xqc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1212 (0x4bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
        Validity
            Not Before: Sep 23 00:09:17 2026 GMT
            Not After : Sep 30 00:09:17 2026 GMT
        Subject: CN=6ab318ae-29f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8c:13:f0:ae:9c:7b:b9:3c:c0:c6:72:82:49:
                    a4:72:7f:7e:82:2f:21:c0:d3:ff:91:5d:dc:d9:52:
                    29:87:e9:dd:61:b5:2e:90:d1:5d:a3:5e:05:d3:92:
                    fe:99:d4:5c:f8:d6:e9:8b:d3:f8:f4:f1:0e:ea:57:
                    ac:18:9a:d1:bb:27:65:35:34:28:59:35:ae:a5:bb:
                    1e:a2:c4:5d:01:eb:92:74:ca:84:51:8c:01:5c:fa:
                    ce:fc:f3:94:99:88:85:86:51:ca:80:37:9b:a3:2f:
                    ad:80:ac:a2:ad:d3:5f:cc:fb:2a:f1:1b:0c:2a:ff:
                    cc:b4:a8:74:2e:18:a7:3b:37:8b:ce:2a:f6:ba:02:
                    8f:4f:a9:9b:05:f8:da:a3:f7:ee:e7:f9:e6:04:d3:
                    ff:3c:8d:88:a1:67:be:98:63:80:f3:b0:a6:64:a3:
                    53:a9:35:4a:32:d6:dc:53:69:7a:7c:17:6e:90:8c:
                    7b:83:5d:09:9e:ea:47:91:85:0e:15:ec:80:0a:db:
                    ed:4e:00:1f:b2:5f:bc:00:c7:6e:d7:cf:e1:51:cc:
                    9e:13:6d:ec:3e:40:b2:3f:08:15:c7:4f:5b:b7:ab:
                    a4:f7:80:ab:82:59:cf:40:fc:a2:aa:2b:92:6f:ce:
                    bf:11:33:2f:cc:43:63:7e:75:0d:c4:ec:6a:02:d1:
                    c4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AA:0F:A4:2C:A6:2E:C6:AD:62:24:93:E6:05:E2:99:98:F3:17:A0
            X509v3 Authority Key Identifier:
                keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:4e:bf:2e:83:68:f4:38:9e:c2:d7:d9:5c:2a:68:76:b9:8d:
         72:aa:72:7c:01:34:73:25:32:d3:00:cd:d8:78:21:47:b2:55:
         b8:fb:73:1b:98:bd:54:5a:0b:53:10:7d:03:0a:6f:40:6b:2f:
         15:59:da:3e:c8:03:61:21:ee:80:0e:33:e4:8f:69:96:7b:96:
         12:4a:6d:dd:93:b6:e9:66:b9:74:6b:3f:fa:d0:9e:32:83:4b:
         07:2e:18:5b:c3:8b:a7:ea:a3:7c:1a:85:de:9f:d1:fc:32:9e:
         25:8a:8d:fe:ad:9d:e4:ef:b5:c5:c9:19:b3:42:fe:e6:60:53:
         aa:18:59:51:37:a8:40:de:2c:de:47:21:ca:71:d2:e3:a4:cf:
         dc:b0:9e:55:c1:24:38:51:f3:c9:bf:8b:2c:af:3c:66:cf:71:
         36:48:90:56:16:84:90:34:29:06:53:25:9c:47:f1:55:47:1c:
         99:11:8b:f1:40:59:08:de:61:53:61:3e:59:1e:b3:54:f5:61:
         c8:83:6d:89:4a:c8:6a:b6:f2:b2:c2:70:62:ca:66:3a:39:d2:
         14:2d:f6:71:ff:6b:d0:27:7e:53:d7:1c:2f:d6:e2:c9:ed:1c:
         8b:5a:9f:19:b2:60:73:35:d1:6b:30:51:97:42:72:72:2a:9e:
         55:56:58:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:18:23 2026 by rpki-client