Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
File:                     hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json)
Hash identifier:          XPfgu9i0RIMe2AHeDW49elZeCtbduFRrIIseIBSPRnA=
Subject key identifier:   A4:5E:89:EA:77:2F:3F:44:26:BB:90:C2:B8:FE:50:9B:E3:48:E1:CC
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       09B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
Manifest number:          07CC
Signing time:             Thu 22 Oct 2026 22:32:42 +0000
Manifest this update:     Thu 22 Oct 2026 22:32:41 +0000
Manifest next update:     Thu 29 Oct 2026 22:32:41 +0000
Files and hashes:         1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: iBIRnAnAYq8mzyQki1UAKvUZIqq9vkF+XlWE2b5mtF0=)
                          2: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: BLni4Yd/1+eVE2g8cq842019Ap4OliRK/7Yy17FI8hg=)
                          3: 811B1932742A11F0A5B14C0CC4F9AE02.roa (hash: VKLJAvPR/dJeNPU6ujFtgLIN4Jf3zca/l2RnoM6JKwU=)
                          4: 2FB32D18656611F1BCA7175E9E47A888.roa (hash: khr1muT8Sl3LtUdR7jUBmmwhTuzQABOuoyvVgE3pJEg=)
                          5: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: KqKf+v1xP+tdZnoxxwJKlPYp9JaK03zEbt6pm0igT4s=)
                          6: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: s6TGCCNMojg+eyCd+4yo25OhfEDNNwbNEyznpNQc+pk=)
                          7: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: fF+09FIKGiSq1eldAeFcdIXf3LLndV5yH+O0x8E/FcA=)
                          8: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: 2il00FZ739DZVGescfv8Cug49vMrwp9IblZJ0ZC/DoY=)
                          9: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: r3Qs/dln22xhZ3ZXAFMMdEZb+Tcrw42Kr0TOaF2uwn8=)
                          10: DA3891D484AB11F0BEE30678C4F9AE02.roa (hash: 6B35rfEKeNMxUR/KJBocQxmAcHhBBj7eKbxn9uCgQNE=)
                          11: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: 4xDZ2uTtYZ3zXiXzWetySxs/WR4zvBBQ+MNbpwd+/4E=)
                          12: DC3B564C5B2411F18054A248B6833773.roa (hash: 1AExd7o5z6C1L5zjfymt+MZfkm91TDsK1XNoI1b3j2U=)
                          13: A39375EE62FA11F19A22F1FA7347A888.roa (hash: 3hVdNm7JKQftwwkRaKd9ZO5EvqFkPNdWJkmVj/Ke5pI=)
                          14: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: SLCj9anN66mOHlI7TnJKqCN/QIRAStQO4Xz/z4ETHIw=)
                          15: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: Nj/yW/yhtD95HCCDoYGXWpERKmAgmVlbM13z90WaSdg=)
                          16: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: 5+RSo2XaJHGxC8aXqWqW+SBcd+c/AWpW5g4DvaDb8H0=)
                          17: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: Ltcec8YUrhHMlW0eJHKnBLOWsEySWjWoXSf22fFRz1Y=)
                          18: 4D73512C49EE11F1AA9A1823B9833773.roa (hash: e0/pverBa6Jpv6AdP9wiuQiGW38MBPBQ9M3kVrGMFq8=)
                          19: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: fh4USdqimlZSTAlz3RmBqZ+p5/Bn2203e/pYKP4GkQ4=)
                          20: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: xOVCUi4wDk4f67M33MXCeGdqVlkhSkGVDTufh41ZJmA=)
                          21: C93A0300695611F1B5B78DB37347A888.roa (hash: YWMHgKS5OKNo+PMP79qLgw4znuOdi05KbityFMjUgHc=)
                          22: 9517317CDFD811F0B8B3FAFD526F56BC.roa (hash: p5Ar/Y3yKWyl4wfili7WzV3//onZnjsth1pH0/EPtSU=)
                          23: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: R8J13N3HbBaZrpNfd0dDpPDxtE06NzUUaHlAuRV5t2c=)
                          24: 46F0DC7A661811F1A7C341049C47A888.roa (hash: ulJz/9NmQo8koao2ZSOGsyGUlgazq/Z41hXLJZR/I6A=)
                          25: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: ghzafIg/0kjxRhwEEzQAR/u8pQaszS9QO+uG2myrS00=)
                          26: 5CAA8A02C05F11F08562CC0CC4F9AE02.roa (hash: h/nMZBhd4REDO+6Yk5wps7TuEmVkRWI/NbQkF/1TlEo=)
                          27: DEC12D0AC3BC11F18F6E6B185511F970.roa (hash: I5Lpof5aa/ZhVzj8/z2U4fbpf9PtR/OGnP+cCJbzkiY=)
                          28: 3E1C881E841E11F1807C19845FA30FBC.roa (hash: GIxNd+4ChIthirLAAVDqfw1GeWI/p4K61wuc/lRCAgc=)
                          29: CA585D04695611F1B5B78DB37347A888.roa (hash: 2w+4FRPq9PLl3sJ8KEWwhZgoS0HJeWcUkVXycyWZGm0=)
                          30: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: UBDYmezwlsMtTxcxj6emBEmwSeVIYAsuyeL7PbcTCHU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 22:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2488 (0x9b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: Oct 22 22:32:41 2026 GMT
            Not After : Oct 29 22:32:41 2026 GMT
        Subject: CN=6ada8f0a-a894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:95:06:14:61:11:a9:ca:14:13:c2:b4:b9:eb:
                    4f:d3:04:60:7d:92:60:e5:48:30:8e:2b:5a:b0:ab:
                    d0:6f:62:99:4f:f6:8b:16:0a:d7:63:0f:62:8d:e9:
                    87:91:11:e7:51:1f:31:2f:1b:b3:ea:6a:ab:8d:1c:
                    5c:31:38:8b:24:6c:02:e3:4d:31:d3:85:6c:9e:ab:
                    f8:fc:90:ab:b8:3c:b1:97:6e:e7:7b:d5:f0:de:e5:
                    23:05:31:bd:f4:2c:3c:0c:d5:b9:f2:42:eb:d6:49:
                    08:0b:5f:e9:0c:16:ad:be:84:f3:ce:0c:50:71:34:
                    9b:03:b8:e1:83:a3:c5:cf:98:cb:c4:bc:fc:d4:79:
                    9b:a0:de:f8:c0:91:07:dc:55:33:ce:47:0f:85:61:
                    9d:d3:1a:07:9c:c6:01:29:2b:41:f5:87:09:da:c6:
                    c4:c9:20:25:8b:e8:41:07:8b:74:40:61:40:38:d7:
                    3b:2e:42:5b:c3:3b:13:bd:1f:8a:5d:ee:df:99:16:
                    33:2b:9b:96:0f:36:70:a7:05:ce:95:0b:ed:ff:25:
                    7c:0e:68:ed:f2:c0:fd:ab:20:63:b2:fe:40:6f:be:
                    e7:38:1f:87:71:3a:ab:4a:bb:6d:4c:a4:d5:41:ad:
                    8f:61:00:e8:2e:d2:1a:36:86:8c:d1:17:23:3f:8d:
                    91:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5E:89:EA:77:2F:3F:44:26:BB:90:C2:B8:FE:50:9B:E3:48:E1:CC
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:93:ed:30:b8:46:db:14:d9:8b:c6:4c:48:76:e1:ba:d4:5c:
         bb:b5:36:3a:ad:b5:17:63:44:67:33:82:d8:5e:da:cd:5b:b9:
         3e:a8:d5:11:a7:e2:c3:ae:6c:a1:1c:bf:47:ea:ab:01:05:9b:
         64:7d:a9:79:bc:bf:dc:df:fe:6c:fe:96:12:ea:42:e1:d1:fe:
         aa:9a:2c:30:57:90:a3:14:b5:83:61:02:13:68:22:86:7b:d2:
         42:6f:1e:f3:2e:b1:11:fb:d2:db:7c:79:b5:c4:07:ee:ee:88:
         a8:73:b9:b8:2b:db:4d:d6:81:c3:a6:0d:cf:09:af:e2:9b:b4:
         56:cf:97:07:0f:a1:d4:fd:48:f4:b5:d6:04:a9:96:a6:32:c7:
         13:c9:f4:7c:5d:d7:a1:6d:88:5b:9d:a6:5d:00:06:b9:d7:f6:
         ae:88:09:96:63:d7:2e:db:0a:13:18:4b:38:20:9b:c1:17:9e:
         59:33:44:98:78:9a:4a:6b:db:b4:63:f1:1d:0b:d2:ba:d0:7e:
         06:5d:4f:86:9d:ed:b3:8a:cc:97:6d:ce:69:14:a9:ed:6c:6d:
         41:82:64:28:b3:4c:37:67:00:c7:62:03:8b:a7:60:ca:e7:d2:
         0e:e6:1a:db:7e:70:ba:6c:70:33:8f:f9:43:08:a5:90:26:82:
         03:e8:03:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3
RDgwQjA5MzQwHhcNMjYxMDIyMjIzMjQxWhcNMjYxMDI5MjIzMjQxWjAYMRYwFAYD
VQQDEw02YWRhOGYwYS1hODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8JUGFGERqcoUE8K0uetP0wRgfZJg5UgwjitasKvQb2KZT/aLFgrXYw9ijemH
kRHnUR8xLxuz6mqrjRxcMTiLJGwC400x04Vsnqv4/JCruDyxl27ne9Xw3uUjBTG9
9Cw8DNW58kLr1kkIC1/pDBatvoTzzgxQcTSbA7jhg6PFz5jLxLz81HmboN74wJEH
3FUzzkcPhWGd0xoHnMYBKStB9YcJ2sbEySAli+hBB4t0QGFAONc7LkJbwzsTvR+K
Xe7fmRYzK5uWDzZwpwXOlQvt/yV8Dmjt8sD9qyBjsv5Ab77nOB+HcTqrSrttTKTV
Qa2PYQDoLtIaNoaM0RcjP42RuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKReiep3
Lz9EJruQwrj+UJvjSOHMMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy
RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjQxMi9DMUVBMDMzQ0QyRUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25D
QWpuMVBkZ09zUmQ5Z0xDVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEJPtMLhG2xTZi8ZMSHbhutRcu7U2Oq21F2NEZzOC2F7azVu5PqjVEafiw65s
oRy/R+qrAQWbZH2peby/3N/+bP6WEupC4dH+qposMFeQoxS1g2ECE2gihnvSQm8e
8y6xEfvS23x5tcQH7u6IqHO5uCvbTdaBw6YNzwmv4pu0Vs+XBw+h1P1I9LXWBKmW
pjLHE8n0fF3XoW2IW52mXQAGudf2rogJlmPXLtsKExhLOCCbwReeWTNEmHiaSmvb
tGPxHQvSutB+Bl1Php3ts4rMl23OaRSp7WxtQYJkKLNMN2cAx2IDi6dgyufSDuYa
235wumxwM4/5QwilkCaCA+gDbg==
-----END CERTIFICATE-----
Generated at Sat Oct 24 17:44:47 2026 by rpki-client