Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
File:                     hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json)
Hash identifier:          DCyt0S08pFF3uEsBAgt5DorBedMCaIFMg/dqczLNXqc=
Subject key identifier:   43:EB:EA:12:27:B0:4B:6B:F7:F6:B7:1C:3C:D4:CC:C6:AE:9E:88:4D
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       0909
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
Manifest number:          0756
Signing time:             Sat 18 Apr 2026 22:37:36 +0000
Manifest this update:     Sat 18 Apr 2026 22:37:35 +0000
Manifest next update:     Sat 25 Apr 2026 22:37:35 +0000
Files and hashes:         1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: NQe/hBslJG9Z5wKU9R7zvGaxoErGtVw3AyZ2U++64dA=)
                          2: 9517317CDFD811F0B8B3FAFD526F56BC.roa (hash: qb5R9Q7jOpq5Y6i3cJApZKmbM4WU3zRSziZ9WVbhWNM=)
                          3: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: mnKgy+h6TuBy/xRc+mZm6/IdgUed2+EnCJcqFdbyrso=)
                          4: 5CAA8A02C05F11F08562CC0CC4F9AE02.roa (hash: aSrQY3U/P84RsKFHcVW17Pl1yzLmkmD0Vpz6zbzIlEQ=)
                          5: 9BCC2FB0B3CB11F0A084D480C4F9AE02.roa (hash: yhi2Tkw0GGKeFUshsC9P2AdxggVs4mgh5LXy2qIJrfA=)
                          6: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: rbn5lAjWWtq0NJobJ3gQQ+/3GQGL5IrkjkxyophftGs=)
                          7: DA3891D484AB11F0BEE30678C4F9AE02.roa (hash: hRtDrDOItVox8dkwIBAnEM25pBusJjpf+paHoWCM54Q=)
                          8: 73D33FA24A8611F08884C659C4F9AE02.roa (hash: vP8lL4o3HuYHEtxmFVFrIPK3xiCpCNcYIvaXF6iQ6qc=)
                          9: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: oyi/kQyIW3CvJ4H0JJtWIBcjnVZNJGfZ4Mbjh2PplVM=)
                          10: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: SgI2LW74kV0HQQTLrtIEoXIGYbkjmMqMemLHKhWIzOk=)
                          11: 72DF94424A8611F08884C659C4F9AE02.roa (hash: vo0Z9lnn3ID47G8AGl41mzrUJ1r+LNl3V8kwSFSFJD0=)
                          12: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: qDcBGVVVpPB654fgT8L85CmaaISkTMyW0pq/EwFVO0w=)
                          13: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: Xqx8HHoJhqAER1yz+YoDsI+zwuTovJWo6Q8AN+yb3U0=)
                          14: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: SD9HAhoMyYt/Kg9k2LvDKKTO49KmFUeoFVI9heOQH+g=)
                          15: 757D79F84A8611F08884C659C4F9AE02.roa (hash: dP3lIgCP3vs1WOQFtOzcxup1ukptUZIrUzaEmi5dq2w=)
                          16: 74BA16C04A8611F08884C659C4F9AE02.roa (hash: dfyBO68PAQBqMnaLR2chufMyxD14C0gNqFDFvWt4lAg=)
                          17: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: lN+Yig4ktb2IRRkSds0TAyhAANJ0TrEtkfnkXcROlAM=)
                          18: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: 5mm9RZOY9SR//ZDv9GwPO4rps/lE7cjfjdPoJ/hSfGE=)
                          19: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: RVRZgV4fJVpoPwGdDiHdzAu6+X6qPhTTWxeMaspLkF8=)
                          20: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: hLvjOF7+IaHJxhzwAhTV9HZUuPgkzZpZhxhguMpLLqo=)
                          21: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: 9t/VDzLY0kYyQdQHa8i8PkxCdBsK2MmTWlRkjJjGQ1w=)
                          22: 9C8302D0B3CB11F0A084D480C4F9AE02.roa (hash: afqLSqK+g44LudiUvgfKC16tZ8/+h2VJBHZlNpKW/eQ=)
                          23: 1BE87EF0F54511F0AFC43705646F56BC.roa (hash: uds0/X1pk0xXW6c9nGAdHPkZUIT2pPHS7QCepyhgoUE=)
                          24: 811B1932742A11F0A5B14C0CC4F9AE02.roa (hash: bAEPL2q8Tb+nhb0Xqr6qEemFG56li2QdOYYhLqVq570=)
                          25: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: jezkpeGjeNMy/RlYmBlt9Ho3DSfw1C75XL9w674SZ0o=)
                          26: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: ifEuqDJURT1h49oIMKTKdEoDhIIUMNLkK8drzNX0KMA=)
                          27: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: YlhY2W2JlojC0pWKWoYRw3i49GbKP4N5qzrUs8aOR04=)
                          28: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: DqMgTQ6HHHZ9ZRSuLgmKK6RQXDATVOlu1rKu42xpSz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 22:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2313 (0x909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: Apr 18 22:37:35 2026 GMT
            Not After : Apr 25 22:37:35 2026 GMT
        Subject: CN=69e407b0-672c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:ee:0f:81:73:6a:e1:92:ca:3c:c0:f6:c2:
                    f9:34:a0:5c:3a:15:94:ac:7e:63:6b:1f:99:bc:77:
                    50:3c:ce:91:ef:95:2e:4d:00:08:e7:07:0b:7c:a9:
                    83:fb:3a:01:aa:18:f7:80:af:9e:20:92:41:ce:ee:
                    c5:3a:cd:d9:79:2a:2a:ec:f4:67:84:2b:84:59:1e:
                    09:39:ba:35:de:69:fc:53:26:39:4a:85:95:6a:cf:
                    be:25:ee:04:a5:8c:9c:ef:e6:91:f9:a7:98:1c:8f:
                    3b:75:16:d7:3e:7c:39:78:b5:0a:31:dc:2e:94:7e:
                    1b:9d:1e:75:87:50:39:61:dc:9b:c7:1e:86:0a:ca:
                    4b:65:76:11:d9:49:92:05:dd:3f:ad:38:b3:e3:0c:
                    e7:c5:19:33:89:c7:d4:d0:01:9a:33:70:16:bd:4f:
                    a0:59:86:ef:c1:18:fa:99:ab:db:81:2c:54:33:87:
                    9b:9f:ed:3c:27:1e:36:27:1f:c0:ef:c3:ea:19:8b:
                    78:0b:8c:b8:4e:f9:86:3b:79:f4:46:b2:c7:13:2f:
                    d8:c6:b3:a9:79:cc:0b:9b:7d:81:5c:3f:e5:a2:ee:
                    c5:09:de:de:7c:03:3e:f7:f6:42:e9:23:23:1b:4a:
                    9e:8c:5c:18:74:d7:95:f1:c5:f1:3a:bd:e1:b8:4a:
                    c2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EB:EA:12:27:B0:4B:6B:F7:F6:B7:1C:3C:D4:CC:C6:AE:9E:88:4D
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c9:8b:f6:a4:ec:1b:38:17:1a:fd:fd:d2:24:51:c9:f0:64:
         a3:c6:fd:2b:39:ea:7c:86:67:7a:00:03:20:36:e4:fb:f8:50:
         38:24:c4:a5:a9:87:3b:65:f2:3a:6e:0a:95:23:46:cf:90:91:
         72:cf:bd:e9:25:b7:7a:ca:d3:15:b5:d5:21:6c:c7:74:2b:35:
         b6:b8:c0:93:da:af:23:04:da:4f:25:f8:db:49:79:30:fb:80:
         f1:b5:4f:35:eb:99:3f:82:83:da:ec:77:d0:bd:a0:63:57:12:
         83:a9:51:24:20:1c:55:8c:ad:32:7e:13:bd:89:4d:1d:8a:a6:
         1b:24:69:3d:15:99:55:82:c3:39:eb:63:3b:a0:e9:a1:46:94:
         d2:4f:b8:38:dc:a6:78:73:71:d4:84:21:8f:12:54:37:89:d4:
         b8:01:a6:cb:f8:34:8a:7b:28:ab:d7:35:f1:2b:dd:26:6b:98:
         9f:9e:9b:2c:e5:cb:bd:73:9e:c2:0c:99:88:e9:b5:83:7e:66:
         07:18:b7:58:ea:2c:ae:ef:3a:c0:5b:d3:6e:70:cb:75:e8:55:
         c2:a3:2f:0b:81:27:d3:68:68:e9:c1:f4:7a:59:fc:b4:b6:05:
         0a:08:c2:2c:32:30:18:b6:6b:6f:34:72:c4:b4:12:12:e6:aa:
         a7:69:a2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:46:59 2026 by rpki-client