Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
File:                     hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json)
Hash identifier:          73Ru7OKZKlzrJsRAwmQruM7Wm6CPhM0oqPwHRbBA2Cc=
Subject key identifier:   71:B4:BE:DD:A1:E1:A8:22:9D:8F:D4:D2:41:CD:D1:1E:FA:CE:03:18
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Certificate issuer:       /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial:       049B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
Manifest number:          03ED
Signing time:             Wed 29 Jul 2026 01:24:56 +0000
Manifest this update:     Wed 29 Jul 2026 01:24:56 +0000
Manifest next update:     Wed 05 Aug 2026 01:24:56 +0000
Files and hashes:         1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: NZpDGcugwVHC1UU9OoErEL5LZY9aoWV7S5DUXbkapYg=)
                          2: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: O2/KxKIdSE2v482JbxbnQ0getoqbnZqZ+/nYKo7sZyY=)
                          3: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: cxcPBGfE5CZoxeyWHWqPrl7qUEDb1w9Ivop3RXOuNy8=)
                          4: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: BF86pvfpbRBo9qXutEzgqO61bS2nTEWr+T+kabrPp1I=)
                          5: 058B976ECA9811F0A295B360C4F9AE02.roa (hash: lCNez/KnH3/u+GXyUNFMwTEZ8K7MJDqkA0Go5e/dS58=)
                          6: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: PuC0DdgiggYtIjLvoalRRhkL/oLZu3l1qbEXfv11uZQ=)
                          7: 3B4551B4CAA811F09DDC8D69C4F9AE02.roa (hash: hDuVof7d3QEQIcHs4zgmq/ai6KUFB43GrplnDI2UHX4=)
                          8: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: CxVWM785DWNfTdffR2/Yw/2Hi2LQnhqbcgLOymKnnM8=)
                          9: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: brYkxZidojowoYQIqbU0aCNgQ49H7mQPg5jz4K3RIX0=)
                          10: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: 4S3t2dvowIG/EeUUH9BW/CIG4gP34ZZohoWk2j8rwOk=)
                          11: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: AhsLyZ6cSjsB6OxlhSMjPiIcrs1dzGaYxdwJxIKQAV0=)
                          12: B35D540E68F611EFB785D145C4F9AE02.roa (hash: 6jCTzKFpZAM5sRcwoj/RVhwR1AvH7Y/xHmW9G5IE69c=)
                          13: 218211CA68F911EF986C8281C4F9AE02.roa (hash: MwIf35XYCZODKT46sKZ+J1cz+B+fnbUAXj0j3RbLFN4=)
                          14: BE4B3228691411EFB573C120C4F9AE02.roa (hash: ovaDzOhz8t6euzDNkjZEtSnXx9uEV3qfaxhhzdo9Nh8=)
                          15: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: TRErWmuqP/DsNILuB+Bsg/oOXJFxA8k+YEgBWxxZqis=)
                          16: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: lTmSpanWfkonoLk8NmfV940KaHPkO1rnz77AY+6Xqc0=)
                          17: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: xClDM8EpPeO91j0Mezn/P780Xmby1QeCDq53lVbawmM=)
                          18: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: MOAi7s6/6G4J+pIDkTOufzZW6KS0P8wRn9IgpgfF+kk=)
                          19: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: t+cHfFMyQ8NmvDexgT+4lzg2Q83rmvnX7nYHf4IBQdE=)
                          20: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: ylWMSBGShl92T17Vr5K5bsotQdr2G9LiHvdhhYPVrsQ=)
                          21: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: grW6xPxdsNkObgmvC9oU5U7FXXHibN8xdWW4iVbsRa4=)
                          22: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: wtq9PupYRV4XEewrdMqA8/4bNl2edm+HOBW3n2PpfNo=)
                          23: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: 3uU6kQ8f6IzetYcsltzYNLy8hPqbwPnaYrl6t4o4ReU=)
                          24: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: P/zfn2TnTP8oh0npf6LxHTRFCNPzez1h9qHSPByk2/0=)
                          25: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: EH518Dy6MrAFwmekT0SecOdweFL+FTqCksa8EB6seaE=)
                          26: EA792108690E11EF9396CC48C4F9AE02.roa (hash: cK4Lx01JCSZW4H3YCVnodtAx/ORf7B0e7vIxfgqX3uI=)
                          27: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: H8VgsGVXvOR/DsZUOIG9OsZtDhG6b/7E83e/ckfyCFk=)
                          28: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: Sy5GnEGGq49Ut4C8AZxeQpVbXW8n/TI4EHxkVNOwMUM=)
                          29: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: Ev/s13A6k/DcIm1OffodSAjmHH7SzOfcmso4hb44RXg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1179 (0x49b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
        Validity
            Not Before: Jul 29 01:24:56 2026 GMT
            Not After : Aug  5 01:24:56 2026 GMT
        Subject: CN=6a695668-a5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2e:12:68:ca:6b:19:50:ef:3d:be:86:ab:e4:
                    f4:b3:3f:79:fd:61:3f:17:e9:ae:77:40:c8:71:f5:
                    d8:ef:32:66:38:12:4b:1c:8b:3b:a3:94:a0:34:ba:
                    89:5e:51:af:d9:bb:a7:fb:8e:9e:e7:50:8c:07:cc:
                    74:2c:5c:7f:e7:e3:c5:bb:63:64:8e:0b:f4:7b:a9:
                    53:b8:5c:c9:5a:d9:bc:bc:51:09:94:b3:e2:ff:46:
                    96:47:e8:ca:2f:9a:84:f0:58:ec:6a:c9:99:a9:84:
                    cf:f8:2e:a7:7d:96:c1:76:a4:57:93:1d:f5:e3:4c:
                    eb:8e:35:80:46:8a:fa:46:fa:f0:12:4d:0f:6a:14:
                    6c:92:27:69:3f:e3:5a:8f:fa:38:eb:88:78:b6:52:
                    4e:12:23:fc:c8:95:33:fa:5b:b1:b0:df:1c:0a:d9:
                    3b:06:e6:4a:dd:10:b5:2e:e1:47:7d:55:02:0e:98:
                    34:a5:c6:d6:51:21:8b:65:33:e2:d6:58:f7:3d:4f:
                    0c:d5:31:b7:03:34:12:98:13:07:7b:68:bd:1a:a4:
                    c7:1a:2c:73:8a:91:1b:b7:8f:81:1d:cd:10:e0:73:
                    f8:27:22:ec:16:0b:57:8d:bb:16:23:5d:16:24:eb:
                    c9:1c:a7:69:55:ac:05:26:30:12:76:9b:8c:51:2a:
                    90:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B4:BE:DD:A1:E1:A8:22:9D:8F:D4:D2:41:CD:D1:1E:FA:CE:03:18
            X509v3 Authority Key Identifier:
                keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:63:0c:a9:89:17:f4:2b:5c:a7:6a:b8:0e:72:83:61:3b:72:
         10:fd:60:d4:42:9c:d5:01:f2:b5:98:be:79:b5:34:65:c9:2d:
         6b:d1:18:f6:a7:44:53:92:9d:ab:6b:c7:37:c5:95:2e:27:f1:
         b7:2d:c5:33:3a:65:e6:f0:11:03:df:3c:81:e8:da:ba:b8:ee:
         bd:fc:ae:be:c3:61:d4:a9:2c:7f:85:b2:92:98:05:a3:f7:09:
         11:5c:b6:9a:03:1e:14:78:16:06:35:51:85:02:41:56:94:8c:
         a1:5b:0f:2d:47:3d:c0:35:f1:4f:d5:05:f5:2b:de:37:d5:41:
         13:a0:1d:ad:62:71:27:8b:97:3a:1f:ac:12:e6:62:4c:2f:8d:
         97:6d:74:b8:d3:04:7a:40:90:b7:b7:d5:0a:3e:46:99:81:67:
         22:76:c2:73:60:3b:5f:ee:35:3b:ed:32:2e:9d:ab:4c:9c:a7:
         f6:6c:91:93:bd:76:8a:97:c6:5e:94:5d:0a:b2:b6:b1:58:78:
         08:71:82:24:d8:e9:8c:95:a7:3c:17:67:76:14:c9:f4:02:12:
         c6:df:f3:21:35:80:bf:5b:eb:5e:70:73:36:da:5f:a8:94:97:
         6d:2c:f3:2c:b6:d1:8a:f3:57:f1:6a:c2:35:46:27:24:fb:ef:
         df:cd:ca:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG
NUMyMDE1NzAwHhcNMjYwNzI5MDEyNDU2WhcNMjYwODA1MDEyNDU2WjAYMRYwFAYD
VQQDEw02YTY5NTY2OC1hNWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5C4SaMprGVDvPb6Gq+T0sz95/WE/F+mud0DIcfXY7zJmOBJLHIs7o5SgNLqJ
XlGv2bun+46e51CMB8x0LFx/5+PFu2Nkjgv0e6lTuFzJWtm8vFEJlLPi/0aWR+jK
L5qE8FjsasmZqYTP+C6nfZbBdqRXkx3140zrjjWARor6RvrwEk0PahRskidpP+Na
j/o464h4tlJOEiP8yJUz+luxsN8cCtk7BuZK3RC1LuFHfVUCDpg0pcbWUSGLZTPi
1lj3PU8M1TG3AzQSmBMHe2i9GqTHGixzipEbt4+BHc0Q4HP4JyLsFgtXjbsWI10W
JOvJHKdpVawFJjASdpuMUSqQ6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHG0vt2h
4aginY/U0kHN0R76zgMYMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC
OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDQyQS8yMEYyQ0IwMEVCOUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklT
anQ5UG1iTENxQkgxd2dGWEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC2MMqYkX9Ctcp2q4DnKDYTtyEP1g1EKc1QHytZi+ebU0Zckta9EY9qdEU5Kd
q2vHN8WVLifxty3FMzpl5vARA988gejaurjuvfyuvsNh1Kksf4WykpgFo/cJEVy2
mgMeFHgWBjVRhQJBVpSMoVsPLUc9wDXxT9UF9SveN9VBE6AdrWJxJ4uXOh+sEuZi
TC+Nl210uNMEekCQt7fVCj5GmYFnInbCc2A7X+41O+0yLp2rTJyn9myRk712ipfG
XpRdCrK2sVh4CHGCJNjpjJWnPBdndhTJ9AISxt/zITWAv1vrXnBzNtpfqJSXbSzz
LLbRivNX8WrCNUYnJPvv383K+w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:09:55 2026 by rpki-client