Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
File:                     hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json)
Hash identifier:          Lw2X4Om3s/IwkyB9GhnROkgqq1+KMDQeTkSsTt+VXt0=
Subject key identifier:   48:A3:E1:2E:D1:BE:DD:F9:D2:E0:8A:F4:51:84:DF:43:03:02:98:EE
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       0967
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
Manifest number:          0799
Signing time:             Mon 20 Jul 2026 23:17:39 +0000
Manifest this update:     Mon 20 Jul 2026 23:17:38 +0000
Manifest next update:     Mon 27 Jul 2026 23:17:38 +0000
Files and hashes:         1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: i9vQzhAqGdWk2LM057JwnM0g+23RasSPUERx5QkSgNE=)
                          2: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: 5mm9RZOY9SR//ZDv9GwPO4rps/lE7cjfjdPoJ/hSfGE=)
                          3: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: jezkpeGjeNMy/RlYmBlt9Ho3DSfw1C75XL9w674SZ0o=)
                          4: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: qDcBGVVVpPB654fgT8L85CmaaISkTMyW0pq/EwFVO0w=)
                          5: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: QhZqt/cqxOV2BObKWqDt9Jj+f6MiEWHCSIA5vvvZHUw=)
                          6: 5CAA8A02C05F11F08562CC0CC4F9AE02.roa (hash: E74sscn7jBU1qbk4XN9ixBviKFSvXv7wKrb6AXIefuo=)
                          7: 9517317CDFD811F0B8B3FAFD526F56BC.roa (hash: qb5R9Q7jOpq5Y6i3cJApZKmbM4WU3zRSziZ9WVbhWNM=)
                          8: DC3B564C5B2411F18054A248B6833773.roa (hash: FRlTztebrzKN5gTiqkicNfd899UvBHsCJgIh/4JZ0Ss=)
                          9: CA585D04695611F1B5B78DB37347A888.roa (hash: EnIugJVDnkN0xw63vZjfnJBWwmyS/wsHXlu1ZIgBl2o=)
                          10: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: mnKgy+h6TuBy/xRc+mZm6/IdgUed2+EnCJcqFdbyrso=)
                          11: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: hLvjOF7+IaHJxhzwAhTV9HZUuPgkzZpZhxhguMpLLqo=)
                          12: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: rbn5lAjWWtq0NJobJ3gQQ+/3GQGL5IrkjkxyophftGs=)
                          13: A39375EE62FA11F19A22F1FA7347A888.roa (hash: z48mclVW3Hic6NacC39C75BgFW2TMRtoADMji1POyXI=)
                          14: DA3891D484AB11F0BEE30678C4F9AE02.roa (hash: hRtDrDOItVox8dkwIBAnEM25pBusJjpf+paHoWCM54Q=)
                          15: 2FB32D18656611F1BCA7175E9E47A888.roa (hash: 6JnZ2Rfkl+jpMosCCBlC1Q8UNFhoX1SLQq1/RqNVuVA=)
                          16: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: Xqx8HHoJhqAER1yz+YoDsI+zwuTovJWo6Q8AN+yb3U0=)
                          17: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: SD9HAhoMyYt/Kg9k2LvDKKTO49KmFUeoFVI9heOQH+g=)
                          18: C93A0300695611F1B5B78DB37347A888.roa (hash: WO68xeZlgZ/rGRC3JJxN4rvFYlRy1+rlfvCU4tjLXK4=)
                          19: 3E1C881E841E11F1807C19845FA30FBC.roa (hash: Z3Drs1krPdarIfTl1vlof7LIzPwGyPRsMoJWefojANA=)
                          20: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: SgI2LW74kV0HQQTLrtIEoXIGYbkjmMqMemLHKhWIzOk=)
                          21: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: YlhY2W2JlojC0pWKWoYRw3i49GbKP4N5qzrUs8aOR04=)
                          22: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: 9t/VDzLY0kYyQdQHa8i8PkxCdBsK2MmTWlRkjJjGQ1w=)
                          23: 811B1932742A11F0A5B14C0CC4F9AE02.roa (hash: bAEPL2q8Tb+nhb0Xqr6qEemFG56li2QdOYYhLqVq570=)
                          24: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: RVRZgV4fJVpoPwGdDiHdzAu6+X6qPhTTWxeMaspLkF8=)
                          25: 4D73512C49EE11F1AA9A1823B9833773.roa (hash: NCEN0rJIp6F2P9KsjO95SUkZxtB8d9XTNbjmGEq2cXY=)
                          26: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: DqMgTQ6HHHZ9ZRSuLgmKK6RQXDATVOlu1rKu42xpSz4=)
                          27: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: oyi/kQyIW3CvJ4H0JJtWIBcjnVZNJGfZ4Mbjh2PplVM=)
                          28: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: ifEuqDJURT1h49oIMKTKdEoDhIIUMNLkK8drzNX0KMA=)
                          29: 46F0DC7A661811F1A7C341049C47A888.roa (hash: AHaOK9qgjWwhnm1JN3/XhlicNxlQpEV5zDvwOjLvC0w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 23:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2407 (0x967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: Jul 20 23:17:38 2026 GMT
            Not After : Jul 27 23:17:38 2026 GMT
        Subject: CN=6a5eac93-037c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:04:bc:ef:37:e2:09:28:30:b6:4c:28:3f:
                    1f:ab:d8:a9:95:9a:e6:90:b5:de:93:77:13:26:05:
                    da:ff:a6:d3:af:71:23:2c:48:99:a3:8f:8b:56:72:
                    bc:60:2b:86:2c:a9:36:89:3a:20:bb:9d:3e:ef:ff:
                    49:5b:f1:27:63:13:1f:72:9d:38:59:c2:42:72:77:
                    20:0d:a8:80:95:e2:39:9e:44:2f:81:e4:c1:7f:30:
                    4d:85:80:f4:de:77:5f:45:98:91:84:74:98:cc:b1:
                    8c:dd:42:bc:f3:92:d0:39:36:95:84:f8:b1:b7:a3:
                    77:e8:61:e3:f7:f4:09:d1:cd:d5:f5:77:71:95:f6:
                    36:31:d0:06:31:b3:a2:6f:df:cc:40:e4:80:c0:8b:
                    15:c5:19:89:64:47:b7:db:65:88:6b:36:79:c6:81:
                    75:ce:14:9e:ee:4e:4f:7e:5d:bb:99:58:f1:cb:30:
                    dd:c6:f4:e8:31:fc:a4:ea:3b:60:f4:bf:44:96:69:
                    c2:4a:ac:9d:60:07:12:a1:19:c8:9f:d7:79:84:82:
                    e4:47:17:3c:44:bb:46:67:80:98:86:8a:00:1a:42:
                    e0:6a:81:bc:0d:36:f4:cc:8d:0a:1e:70:0e:ec:87:
                    86:c2:ec:65:b6:69:5d:42:ba:ea:ac:90:a1:b3:df:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A3:E1:2E:D1:BE:DD:F9:D2:E0:8A:F4:51:84:DF:43:03:02:98:EE
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:89:86:dc:b5:63:ea:a8:1e:21:7e:3e:03:36:66:45:ca:7d:
         7e:b3:8b:7a:0f:3e:bc:f2:63:78:23:50:5c:5a:0d:05:92:36:
         6a:98:4d:6c:ea:67:1a:d2:81:f0:65:7b:d2:75:4c:a3:36:0c:
         2f:88:a4:37:2c:8f:c8:e6:55:22:2f:26:fe:c5:5e:dd:68:9d:
         c4:fb:fa:6a:0b:5a:6c:5e:84:73:05:8a:4e:04:fb:c8:5a:db:
         21:ca:dc:0a:c6:3b:b6:df:78:e5:be:e4:85:ee:5d:19:33:1e:
         4c:96:f7:49:8f:2e:1a:9d:c2:64:f1:c2:b2:ed:7e:eb:a5:61:
         b0:72:c0:c9:a8:8d:5c:0e:f8:a5:73:fd:e5:d6:b6:a7:62:23:
         a0:d4:13:2c:e7:51:6c:83:08:e0:47:97:b4:60:11:b5:63:97:
         24:cd:24:76:77:b3:c8:3a:74:3e:4d:4c:28:40:b6:e8:91:fe:
         b8:02:12:43:5c:4f:af:ba:72:07:aa:fd:e0:33:dc:58:b6:08:
         18:39:4b:4e:88:02:5e:42:2c:e5:86:5c:67:6c:5b:ad:fc:36:
         75:43:39:a6:d0:17:3e:d2:ee:7d:09:2f:03:25:36:e2:e3:bd:
         22:e1:5d:d1:ac:53:0e:db:8f:33:bd:33:97:e9:65:b8:d0:3d:
         fa:59:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:55:54 2026 by rpki-client