Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
File:                     6156BECA0310C700B8B4AF43C472D722BF6E1694.mft (raw, json)
Hash identifier:          Z0AYkKH1hWt7Jdv7kTsFbd/17R2OL/gS+kWx5ci6dkM=
Subject key identifier:   0B:9D:3B:1B:92:E8:E3:38:DE:D7:78:2E:AD:9B:88:60:AF:6F:45:B9
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       68CD04022B89E67C491CC1F2DDD04232E8FA5A9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
Manifest number:          0126
Signing time:             Tue 28 Jul 2026 12:16:09 +0000
Manifest this update:     Tue 28 Jul 2026 12:11:09 +0000
Manifest next update:     Wed 29 Jul 2026 12:41:09 +0000
Files and hashes:         1: 31342e3133372e3234352e302f32342d3234203d3e20323132323338.roa (hash: 3DR5Mq5Dq+OGflccKKBt7tnJCKKddlnZArFDGUuSP1A=)
                          2: 31342e3133372e3233352e302f32342d3234203d3e2032343937.roa (hash: xiDHQXoIWA8MOUrkmgbSzN5Mhepp0970Rjnbf4Zzuhg=)
                          3: 31342e3133372e3235312e302f32342d3234203d3e20313531333331.roa (hash: S9GI9sVCkq9wzqJZ7Rt/aeisq+yePeHFUkyMs1RHv1U=)
                          4: 3136332e3132382e37332e302f32342d3234203d3e2032393134.roa (hash: KAONfjVOhG9CL5aIWtK3bGyZ1b5X++zd5hbZp02x8Kg=)
                          5: 31342e3133372e3233312e302f32342d3234203d3e2032393134.roa (hash: PpRcSjtAKs2R1pu5poFSiNQwNsC/xjWWe5ESWb47Kd0=)
                          6: 31342e3133372e3234312e302f32342d3234203d3e20333935303437.roa (hash: 7X8yo3EvrRjWQmLXG+K1RXremtB7ZkugzSsSFMvrE70=)
                          7: 31342e3133372e3232382e302f32342d3234203d3e20313333313830.roa (hash: WisKHyoH3uW5Za8b1LPHcc73ZzN3gjSSuBpFTwGyFIY=)
                          8: 31342e3133372e3232392e302f32342d3234203d3e203336303032.roa (hash: JMZ+Bq7j68uMbPjAiXaw60H1hXS1crHiJGcyDLyFC6E=)
                          9: 31342e3133372e3234342e302f32342d3234203d3e20323036333030.roa (hash: ToisP1fj11LUhg1JlgTigHpXaXqoxjHfLkVI26c4ezs=)
                          10: 31342e3133372e3234312e302f32342d3234203d3e20323134363639.roa (hash: pGpR2hXLE/ZFnTL6OcQOQZCsGcmbuBdo4b8eNEzernI=)
                          11: 31342e3133372e3235332e302f32342d3234203d3e20313533393239.roa (hash: LfUIgUYiQxTJwSybYNLnkYvAWP+55CgFrfvjTRFRLBs=)
                          12: 31342e3133372e3233382e302f32332d3234203d3e20343031333339.roa (hash: lEa5u9jVuE0kfsOeKBb6dkAG6kFUOtWuI3xb6MF0a0o=)
                          13: 31342e3133372e3233372e302f32342d3234203d3e203336353330.roa (hash: AJBCKZOVEpzDEkYgYlBz4c8nWo3zV5DvIFuxVtU0ePI=)
                          14: 31342e3133372e3233362e302f32342d3234203d3e2032393134.roa (hash: z8CsJBW3P6RL4EZN4+vUdXKREHJctsxjJCSFajhxeTY=)
                          15: 31342e3133372e3235342e302f32342d3234203d3e20323135373237.roa (hash: bF6Bx2pmVSC3Tq3cXQP46kBzK/kI5sonFwFAoK8Rt8g=)
                          16: 31342e3133372e3234322e302f32342d3234203d3e20313531333839.roa (hash: 7Dp+N+7B5mUnhgbVQvMtAHWZr+N3eDrLgtC0cwn3gVA=)
                          17: 31342e3133372e3234372e302f32342d3234203d3e20393739.roa (hash: JijQtrikwQFPV3nBE7gVebd8f3AN5KxakYIvZCbezdY=)
                          18: 31342e3133372e3235352e302f32342d3234203d3e20393739.roa (hash: j8LP4cp95BH+HHoIlDc2OpyW11uVWk6kZd9TQ/G74CE=)
                          19: 31342e3133372e3233332e302f32342d3234203d3e2032393134.roa (hash: SulJzptK2JEPE0Thesfx0ENQS1MfkIJSrpjxYKm8Rxs=)
                          20: 31342e3133372e3232362e302f32342d3234203d3e20383334.roa (hash: Em7ODT/E5gco9M4erYw214RMFSmecrv0g4M2cAQa+FU=)
                          21: 6156BECA0310C700B8B4AF43C472D722BF6E1694.crl (hash: 9uKfPfvi4fwHff0J9J4YnpjKNBT7ysa9d3eqDlhCQiY=)
                          22: 31342e3133372e3234362e302f32342d3234203d3e20323132323338.roa (hash: F31fqLMkP/Jxx4dd64lJfhvumRckrvT7vCse229CSuo=)
                          23: 31342e3133372e3233342e302f32342d3234203d3e2032393134.roa (hash: gJr0pjVQyvQyp5UCE1BFzLOqqpm4UHNFKZwkbsNqY6Y=)
                          24: 31342e3133372e3235322e302f32342d3234203d3e20383334.roa (hash: lTp5QRkSNeHWY5q6ciZTEfZMx5E2y4dKa4cQ3sNS1TA=)
                          25: 31342e3133372e3234372e302f32342d3234203d3e20323036333030.roa (hash: TQesARHszsgZra+Bxv9haJLLdNxK20Hb5OLe+W3KW0k=)
                          26: 31342e3133372e3234332e302f32342d3234203d3e2032343937.roa (hash: HDzWHz1ms1Y6UE0/oITxc7EdtqaFeAtJT3+quR0si98=)
                          27: 31342e3133372e3234392e302f32342d3234203d3e203436353539.roa (hash: EUDKS7lOKdFS8VA9qWAvGbjHh9swO54hbM5yiQRQsFQ=)
                          28: 31342e3133372e3235312e302f32342d3234203d3e20323132323539.roa (hash: CxegjX7Xj2f6hMreza0ap+cuQuB5I7S4wlmloleMgNs=)
                          29: 31342e3133372e3233302e302f32342d3234203d3e20323035353438.roa (hash: IuDkKb/ruocFlXeivLIqOgDt73QV0mVpnwF5zq5XRk4=)
                          30: 31342e3133372e3234382e302f32342d3234203d3e20313532333234.roa (hash: /eoAWvgijbwXCg7RckJVYSoJ2a5AODsgxSj/uG7Zm+U=)
                          31: 31342e3133372e3233372e302f32342d3234203d3e20323132323539.roa (hash: 9dMrkyyv+scnba9Ey8ZtA7gnBBKcOufJRmHFQ8v9shw=)
                          32: 31342e3133372e3234302e302f32342d3234203d3e2032393134.roa (hash: 0Wfb3PiuGnfEMJFFbPCBQxAC43plOhJuJqqW4ElfBBk=)
                          33: 31342e3133372e3234392e302f32342d3234203d3e20313532333234.roa (hash: lQL+DqnDFTrAqJtMs1e2HE4S/p7KbFLA4Bj6Oc9slqg=)
                          34: 31342e3133372e3232342e302f32332d3234203d3e203538333639.roa (hash: uLuWH5FT/y2Nmob1L1JVI0IlFRJMPb4F73JOB/6c6t8=)
                          35: 31342e3133372e3235302e302f32342d3234203d3e203432393630.roa (hash: FUU4WZKNT9Kz9jxR82UG2Jn5XTPAS6QB8n5eDpmGyj4=)
                          36: 31342e3133372e3234342e302f32342d3234203d3e20393739.roa (hash: XxSnlEyfQKr9NRssu31k9aGrR4z9NYLgqeNXLj993uI=)
                          37: 31342e3133372e3233322e302f32342d3234203d3e2032393134.roa (hash: Wasvds/imkRBJmTFuzR9RiXQLAinJza5Ur28B8RrWwk=)
                          38: 3136332e3132382e37322e302f32342d3234203d3e2032393134.roa (hash: C3UW2RgGPtXQV4cqK7crZlVdBL11Kob+aiGxDpOvr2M=)
                          39: 31342e3133372e3234382e302f32342d3234203d3e203436353539.roa (hash: DUEFtcCDqSyZYjkjXAjFmWzcDQxorqJ+1cT5BylqgZ0=)
                          40: 31342e3133372e3232372e302f32342d3234203d3e203330303538.roa (hash: do5lPBU/xHtgwvcuTP/yelXnfi8FtaNW5q6RV5AamWo=)
                          41: 31342e3133372e3235352e302f32342d3234203d3e20323036333030.roa (hash: zwQ4taIgFoWz22vDNlECLdrLwdVDnq2FKQnAMgTOYXU=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 12:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:cd:04:02:2b:89:e6:7c:49:1c:c1:f2:dd:d0:42:32:e8:fa:5a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Jul 28 12:11:09 2026 GMT
            Not After : Jul 29 12:41:09 2026 GMT
        Subject: CN=0B9D3B1B92E8E338DED7782EAD9B8860AF6F45B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:48:aa:82:16:e7:a1:4a:97:d5:41:12:5f:
                    f7:8d:49:b3:09:0c:c9:cf:06:47:7a:2c:87:8f:96:
                    e4:15:c8:d8:99:c4:7c:13:d0:d9:94:48:cf:93:68:
                    83:d1:2e:f1:0c:60:ee:4f:57:d7:1e:94:3e:95:cb:
                    ef:bd:a7:1f:95:0d:82:30:c2:18:ea:ad:b3:d9:b1:
                    b9:e1:9b:a9:81:5c:3f:3f:6f:6f:f4:34:71:35:58:
                    d1:1b:e8:db:a2:28:28:e3:9e:2d:31:56:7e:3f:f4:
                    03:78:fe:23:0a:37:c3:b3:0d:8d:d3:b7:89:b3:93:
                    6c:d9:10:1e:a7:71:3a:85:e8:98:8c:b7:e4:c5:93:
                    16:c3:1a:c3:29:91:59:6b:c9:1c:7c:f8:98:5f:0a:
                    fa:5c:a1:b5:8b:3e:58:b5:85:b1:7a:54:92:3f:e3:
                    48:54:2e:89:43:0a:d6:57:8e:ba:76:95:fc:91:d8:
                    08:f4:a2:85:6a:49:1d:b6:08:ec:d3:cb:e8:7e:1a:
                    3d:89:03:c6:47:41:64:a4:09:78:42:6d:b8:80:85:
                    06:e4:b3:88:62:e2:01:fc:02:be:63:f4:f2:2e:25:
                    5d:db:b5:63:fe:a3:78:c6:4e:06:58:14:30:e8:e3:
                    5e:0f:cc:46:d2:a0:91:1e:c3:95:d4:b7:51:d4:3f:
                    94:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9D:3B:1B:92:E8:E3:38:DE:D7:78:2E:AD:9B:88:60:AF:6F:45:B9
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:b5:00:a8:8c:7c:46:a6:0d:3b:f3:3f:60:e3:95:79:7d:61:
         f9:2f:2e:d7:48:88:dc:bb:ac:ab:8d:d4:ec:d2:ba:ed:40:52:
         3b:39:29:3d:75:3a:20:7c:00:78:50:9e:4f:d5:db:08:6e:fb:
         d9:7a:69:7a:c4:e7:c2:e0:17:8c:54:2e:d0:40:9c:84:c1:f6:
         c4:fe:3a:e7:51:d1:f9:5a:6b:c7:13:70:9d:6b:6a:20:a8:37:
         44:e7:78:91:f8:b3:c6:25:56:57:71:e5:68:a0:d9:b9:d1:a2:
         a7:48:49:41:b3:63:55:54:8f:1f:7f:bd:a7:26:c3:4a:26:a4:
         27:a8:d6:e3:9b:c4:63:6d:ae:5c:27:51:f0:aa:b7:40:78:a3:
         fc:7c:a6:64:eb:d7:08:d8:a4:21:1f:a1:bd:1d:29:1a:dc:55:
         f4:f7:e9:69:fb:2b:23:d8:a7:cf:20:78:65:e5:07:7c:62:28:
         66:2c:2c:ba:e8:8d:45:4a:9c:a8:a4:39:ec:89:cd:e6:56:75:
         06:8a:79:cf:20:5d:87:cf:bc:fe:cb:ce:52:de:39:4d:5a:4c:
         56:e4:55:dd:df:a9:c7:1e:2f:8e:18:bf:37:f3:cb:8f:92:99:
         01:d3:9e:3f:8e:eb:0f:50:66:0d:56:dd:ae:be:4a:f9:41:de:
         31:95:f2:d5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUaM0EAiuJ5nxJHMHy3dBCMuj6WpswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAz
MTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0MB4XDTI2MDcyODEyMTEwOVoX
DTI2MDcyOTEyNDEwOVowMzExMC8GA1UEAxMoMEI5RDNCMUI5MkU4RTMzOERFRDc3
ODJFQUQ5Qjg4NjBBRjZGNDVCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKttSKqCFuehSpfVQRJf941JswkMyc8GR3osh4+W5BXI2JnEfBPQ2ZRIz5No
g9Eu8Qxg7k9X1x6UPpXL772nH5UNgjDCGOqts9mxueGbqYFcPz9vb/Q0cTVY0Rvo
26IoKOOeLTFWfj/0A3j+Iwo3w7MNjdO3ibOTbNkQHqdxOoXomIy35MWTFsMawymR
WWvJHHz4mF8K+lyhtYs+WLWFsXpUkj/jSFQuiUMK1leOunaV/JHYCPSihWpJHbYI
7NPL6H4aPYkDxkdBZKQJeEJtuICFBuSziGLiAfwCvmP08i4lXdu1Y/6jeMZOBlgU
MOjjXg/MRtKgkR7DldS3UdQ/lBMCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQLnTsb
kujjON7XeC6tm4hgr29FuTAfBgNVHSMEGDAWgBRhVr7KAxDHALi0r0PEctciv24W
lDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1MzAwMDAvMC82MTU2QkVD
QTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ZVmEteWdNUXh3
QzR0SzlEeEhMWElyOXVGcFEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyQzI1
MzAwMDAvMC82MTU2QkVDQTAzMTBDNzAwQjhCNEFGNDNDNDcyRDcyMkJGNkUxNjk0
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAw7UAqIx8RqYNO/M/YOOVeX1h+S8u10iI3Lusq43U7NK67UBS
OzkpPXU6IHwAeFCeT9XbCG772XppesTnwuAXjFQu0ECchMH2xP4651HR+VprxxNw
nWtqIKg3ROd4kfizxiVWV3HlaKDZudGip0hJQbNjVVSPH3+9pybDSiakJ6jW45vE
Y22uXCdR8Kq3QHij/HymZOvXCNikIR+hvR0pGtxV9PfpafsrI9inzyB4ZeUHfGIo
ZiwsuuiNRUqcqKQ57InN5lZ1Bop5zyBdh8+8/svOUt45TVpMVuRV3d+pxx4vjhi/
N/PLj5KZAdOeP47rD1BmDVbdrr5K+UHeMZXy1Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:27 2026 by rpki-client