Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
File:                     hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json)
Hash identifier:          QFpL5yRsuI/u7Fyire/XnFEW6nP0eQHcTqZ9U1jzBIM=
Subject key identifier:   4A:7F:1B:B3:2E:C3:21:B0:A9:2C:5A:18:04:24:D6:C5:5C:5D:D0:FC
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       097F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
Manifest number:          07B1
Signing time:             Fri 04 Sep 2026 22:18:47 +0000
Manifest this update:     Fri 04 Sep 2026 22:18:47 +0000
Manifest next update:     Fri 11 Sep 2026 22:18:47 +0000
Files and hashes:         1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: QOUTBgAPtTk8VSCAK4lSS9wh4wcZyqcezrG9Dfcl29Q=)
                          2: 9517317CDFD811F0B8B3FAFD526F56BC.roa (hash: qb5R9Q7jOpq5Y6i3cJApZKmbM4WU3zRSziZ9WVbhWNM=)
                          3: DC3B564C5B2411F18054A248B6833773.roa (hash: FRlTztebrzKN5gTiqkicNfd899UvBHsCJgIh/4JZ0Ss=)
                          4: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: jezkpeGjeNMy/RlYmBlt9Ho3DSfw1C75XL9w674SZ0o=)
                          5: 46F0DC7A661811F1A7C341049C47A888.roa (hash: AHaOK9qgjWwhnm1JN3/XhlicNxlQpEV5zDvwOjLvC0w=)
                          6: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: Xqx8HHoJhqAER1yz+YoDsI+zwuTovJWo6Q8AN+yb3U0=)
                          7: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: 9t/VDzLY0kYyQdQHa8i8PkxCdBsK2MmTWlRkjJjGQ1w=)
                          8: 811B1932742A11F0A5B14C0CC4F9AE02.roa (hash: bAEPL2q8Tb+nhb0Xqr6qEemFG56li2QdOYYhLqVq570=)
                          9: 4D73512C49EE11F1AA9A1823B9833773.roa (hash: NCEN0rJIp6F2P9KsjO95SUkZxtB8d9XTNbjmGEq2cXY=)
                          10: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: oyi/kQyIW3CvJ4H0JJtWIBcjnVZNJGfZ4Mbjh2PplVM=)
                          11: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: hLvjOF7+IaHJxhzwAhTV9HZUuPgkzZpZhxhguMpLLqo=)
                          12: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: 5mm9RZOY9SR//ZDv9GwPO4rps/lE7cjfjdPoJ/hSfGE=)
                          13: 2FB32D18656611F1BCA7175E9E47A888.roa (hash: 6JnZ2Rfkl+jpMosCCBlC1Q8UNFhoX1SLQq1/RqNVuVA=)
                          14: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: rbn5lAjWWtq0NJobJ3gQQ+/3GQGL5IrkjkxyophftGs=)
                          15: 3E1C881E841E11F1807C19845FA30FBC.roa (hash: Z3Drs1krPdarIfTl1vlof7LIzPwGyPRsMoJWefojANA=)
                          16: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: mnKgy+h6TuBy/xRc+mZm6/IdgUed2+EnCJcqFdbyrso=)
                          17: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: QhZqt/cqxOV2BObKWqDt9Jj+f6MiEWHCSIA5vvvZHUw=)
                          18: A39375EE62FA11F19A22F1FA7347A888.roa (hash: z48mclVW3Hic6NacC39C75BgFW2TMRtoADMji1POyXI=)
                          19: C93A0300695611F1B5B78DB37347A888.roa (hash: WO68xeZlgZ/rGRC3JJxN4rvFYlRy1+rlfvCU4tjLXK4=)
                          20: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: qDcBGVVVpPB654fgT8L85CmaaISkTMyW0pq/EwFVO0w=)
                          21: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: SD9HAhoMyYt/Kg9k2LvDKKTO49KmFUeoFVI9heOQH+g=)
                          22: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: DqMgTQ6HHHZ9ZRSuLgmKK6RQXDATVOlu1rKu42xpSz4=)
                          23: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: YlhY2W2JlojC0pWKWoYRw3i49GbKP4N5qzrUs8aOR04=)
                          24: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: RVRZgV4fJVpoPwGdDiHdzAu6+X6qPhTTWxeMaspLkF8=)
                          25: DA3891D484AB11F0BEE30678C4F9AE02.roa (hash: hRtDrDOItVox8dkwIBAnEM25pBusJjpf+paHoWCM54Q=)
                          26: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: SgI2LW74kV0HQQTLrtIEoXIGYbkjmMqMemLHKhWIzOk=)
                          27: CA585D04695611F1B5B78DB37347A888.roa (hash: EnIugJVDnkN0xw63vZjfnJBWwmyS/wsHXlu1ZIgBl2o=)
                          28: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: ifEuqDJURT1h49oIMKTKdEoDhIIUMNLkK8drzNX0KMA=)
                          29: 5CAA8A02C05F11F08562CC0CC4F9AE02.roa (hash: E74sscn7jBU1qbk4XN9ixBviKFSvXv7wKrb6AXIefuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2431 (0x97f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: Sep  4 22:18:47 2026 GMT
            Not After : Sep 11 22:18:47 2026 GMT
        Subject: CN=6a9b43c7-2cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:58:08:3f:29:4e:24:cd:4d:ac:f6:d4:e6:
                    5b:32:9e:2d:8d:8c:ad:bc:5d:fe:ed:de:0f:33:dc:
                    94:fd:b0:b8:51:84:b6:4d:e6:99:14:b5:24:cf:2f:
                    50:6b:00:c5:17:89:2e:57:07:c6:ad:74:f2:06:eb:
                    bd:c2:ed:b0:f6:36:6a:a0:89:bb:57:62:d2:b9:26:
                    35:a0:15:32:f9:7d:71:f4:38:99:b1:9e:2d:ff:fc:
                    57:b0:f6:a1:51:ae:10:1f:49:31:36:3d:4f:66:62:
                    66:1c:bb:c3:15:70:0e:a1:f3:6e:95:1a:e2:79:40:
                    56:52:cc:d4:bc:14:33:5f:74:38:9b:fc:d1:e0:f4:
                    fd:8d:fc:df:51:c8:36:86:e6:14:a6:cb:08:c0:1c:
                    57:1e:6f:d7:a2:82:e1:13:51:60:3a:18:c8:87:d1:
                    41:be:e3:3f:f6:fc:2b:95:dd:7c:94:0e:e5:7f:fd:
                    cd:2f:ad:6b:a7:6f:bd:d4:ab:19:9b:1a:30:a5:96:
                    e2:a3:6e:59:11:a3:21:7e:76:55:a8:58:71:51:3e:
                    50:29:ba:e0:c1:42:35:a0:47:54:f6:fa:84:44:4d:
                    9f:a2:21:df:b2:a6:66:6d:f7:5e:6e:fb:cf:61:e5:
                    3b:89:a0:ff:9d:22:c4:6b:28:12:70:22:fa:9f:58:
                    6a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7F:1B:B3:2E:C3:21:B0:A9:2C:5A:18:04:24:D6:C5:5C:5D:D0:FC
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:6a:15:1c:f4:68:bc:14:91:bc:f1:dd:2a:31:12:04:d9:d9:
         62:cd:3e:1b:e2:57:18:a0:64:3d:ed:c9:a4:67:0e:db:fb:ba:
         21:e3:88:e4:5a:54:94:ab:c4:76:b3:ca:c6:f5:ae:63:c3:4a:
         3b:7c:6b:72:0c:a9:01:41:8f:90:20:cf:8c:0b:0a:64:7f:87:
         82:c1:cb:37:0b:cf:c2:aa:76:45:57:bb:71:59:9c:65:57:7b:
         85:4a:ea:1d:f6:89:56:23:b3:28:44:a2:0a:62:1e:2c:d7:d1:
         30:66:1d:74:3f:16:92:9f:08:e0:64:49:c9:9e:6d:48:72:e3:
         f4:ac:27:d1:91:67:15:0b:e6:68:51:58:51:06:d4:b1:af:cd:
         38:27:eb:97:4c:ce:c2:2a:a6:c6:b8:98:34:01:29:e8:bc:8b:
         0d:43:d5:df:47:ca:4a:30:3b:89:dd:a4:ed:16:83:20:8c:39:
         7b:ab:20:2e:4b:7e:f0:b5:9f:6c:dd:53:73:aa:76:ec:1a:8f:
         62:da:9a:4d:82:8a:9d:79:ef:3f:24:e6:9e:25:0b:e7:53:f2:
         fb:fb:1e:1c:7c:1e:90:f1:4d:5b:a2:c2:50:83:3c:da:c7:e2:
         b0:2e:9b:6e:14:ef:5f:6c:9c:d7:e2:24:6e:cf:b2:8c:d2:2d:
         9c:56:72:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3
RDgwQjA5MzQwHhcNMjYwOTA0MjIxODQ3WhcNMjYwOTExMjIxODQ3WjAYMRYwFAYD
VQQDEw02YTliNDNjNy0yY2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApcpYCD8pTiTNTaz21OZbMp4tjYytvF3+7d4PM9yU/bC4UYS2TeaZFLUkzy9Q
awDFF4kuVwfGrXTyBuu9wu2w9jZqoIm7V2LSuSY1oBUy+X1x9DiZsZ4t//xXsPah
Ua4QH0kxNj1PZmJmHLvDFXAOofNulRrieUBWUszUvBQzX3Q4m/zR4PT9jfzfUcg2
huYUpssIwBxXHm/XooLhE1FgOhjIh9FBvuM/9vwrld18lA7lf/3NL61rp2+91KsZ
mxowpZbio25ZEaMhfnZVqFhxUT5QKbrgwUI1oEdU9vqERE2foiHfsqZmbfdebvvP
YeU7iaD/nSLEaygScCL6n1hqrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEp/G7Mu
wyGwqSxaGAQk1sVcXdD8MB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy
RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjQxMi9DMUVBMDMzQ0QyRUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25D
QWpuMVBkZ09zUmQ5Z0xDVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM2oVHPRovBSRvPHdKjESBNnZYs0+G+JXGKBkPe3JpGcO2/u6IeOI5FpUlKvE
drPKxvWuY8NKO3xrcgypAUGPkCDPjAsKZH+HgsHLNwvPwqp2RVe7cVmcZVd7hUrq
HfaJViOzKESiCmIeLNfRMGYddD8Wkp8I4GRJyZ5tSHLj9Kwn0ZFnFQvmaFFYUQbU
sa/NOCfrl0zOwiqmxriYNAEp6LyLDUPV30fKSjA7id2k7RaDIIw5e6sgLkt+8LWf
bN1Tc6p27BqPYtqaTYKKnXnvPyTmniUL51Py+/seHHwekPFNW6LCUIM82sfisC6b
bhTvX2yc1+Ikbs+yjNItnFZy+w==
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:21:37 2026 by rpki-client