Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
File:                     hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json)
Hash identifier:          xd5skMz8oJg2dbZtDz14+SDMaEYeIfVNnFbmR63FYKs=
Subject key identifier:   03:AC:F4:4D:D5:C7:D3:3E:7A:A5:A5:35:21:32:2B:8A:EA:3F:9A:12
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Certificate issuer:       /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial:       0456
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
Manifest number:          03A8
Signing time:             Sun 15 Mar 2026 00:19:53 +0000
Manifest this update:     Sun 15 Mar 2026 00:19:52 +0000
Manifest next update:     Sun 22 Mar 2026 00:19:52 +0000
Files and hashes:         1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: qxpBeMLMNeDpl6SC7RbzJ5o55uf7uCpk1Hi/apeffu8=)
                          2: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: xClDM8EpPeO91j0Mezn/P780Xmby1QeCDq53lVbawmM=)
                          3: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: O2/KxKIdSE2v482JbxbnQ0getoqbnZqZ+/nYKo7sZyY=)
                          4: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: lTmSpanWfkonoLk8NmfV940KaHPkO1rnz77AY+6Xqc0=)
                          5: BE4B3228691411EFB573C120C4F9AE02.roa (hash: ovaDzOhz8t6euzDNkjZEtSnXx9uEV3qfaxhhzdo9Nh8=)
                          6: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: Sy5GnEGGq49Ut4C8AZxeQpVbXW8n/TI4EHxkVNOwMUM=)
                          7: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: PuC0DdgiggYtIjLvoalRRhkL/oLZu3l1qbEXfv11uZQ=)
                          8: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: 3uU6kQ8f6IzetYcsltzYNLy8hPqbwPnaYrl6t4o4ReU=)
                          9: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: BF86pvfpbRBo9qXutEzgqO61bS2nTEWr+T+kabrPp1I=)
                          10: B35D540E68F611EFB785D145C4F9AE02.roa (hash: 6jCTzKFpZAM5sRcwoj/RVhwR1AvH7Y/xHmW9G5IE69c=)
                          11: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: grW6xPxdsNkObgmvC9oU5U7FXXHibN8xdWW4iVbsRa4=)
                          12: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: wtq9PupYRV4XEewrdMqA8/4bNl2edm+HOBW3n2PpfNo=)
                          13: 3B4551B4CAA811F09DDC8D69C4F9AE02.roa (hash: hDuVof7d3QEQIcHs4zgmq/ai6KUFB43GrplnDI2UHX4=)
                          14: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: 4S3t2dvowIG/EeUUH9BW/CIG4gP34ZZohoWk2j8rwOk=)
                          15: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: t+cHfFMyQ8NmvDexgT+4lzg2Q83rmvnX7nYHf4IBQdE=)
                          16: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: cxcPBGfE5CZoxeyWHWqPrl7qUEDb1w9Ivop3RXOuNy8=)
                          17: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: AhsLyZ6cSjsB6OxlhSMjPiIcrs1dzGaYxdwJxIKQAV0=)
                          18: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: brYkxZidojowoYQIqbU0aCNgQ49H7mQPg5jz4K3RIX0=)
                          19: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: TRErWmuqP/DsNILuB+Bsg/oOXJFxA8k+YEgBWxxZqis=)
                          20: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: EH518Dy6MrAFwmekT0SecOdweFL+FTqCksa8EB6seaE=)
                          21: EA792108690E11EF9396CC48C4F9AE02.roa (hash: cK4Lx01JCSZW4H3YCVnodtAx/ORf7B0e7vIxfgqX3uI=)
                          22: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: P/zfn2TnTP8oh0npf6LxHTRFCNPzez1h9qHSPByk2/0=)
                          23: 218211CA68F911EF986C8281C4F9AE02.roa (hash: MwIf35XYCZODKT46sKZ+J1cz+B+fnbUAXj0j3RbLFN4=)
                          24: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: Ev/s13A6k/DcIm1OffodSAjmHH7SzOfcmso4hb44RXg=)
                          25: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: H8VgsGVXvOR/DsZUOIG9OsZtDhG6b/7E83e/ckfyCFk=)
                          26: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: MOAi7s6/6G4J+pIDkTOufzZW6KS0P8wRn9IgpgfF+kk=)
                          27: 058B976ECA9811F0A295B360C4F9AE02.roa (hash: lCNez/KnH3/u+GXyUNFMwTEZ8K7MJDqkA0Go5e/dS58=)
                          28: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: CxVWM785DWNfTdffR2/Yw/2Hi2LQnhqbcgLOymKnnM8=)
                          29: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: ylWMSBGShl92T17Vr5K5bsotQdr2G9LiHvdhhYPVrsQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Mar 2026 00:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1110 (0x456)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
        Validity
            Not Before: Mar 15 00:19:52 2026 GMT
            Not After : Mar 22 00:19:52 2026 GMT
        Subject: CN=69b5fb28-cd3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3a:5f:6e:ee:a0:29:38:63:45:56:d6:bf:09:
                    bb:58:b0:bd:f8:75:ad:94:04:b9:d1:a1:47:05:75:
                    8f:de:f8:32:cd:3d:90:27:d9:a0:02:cc:31:f8:75:
                    eb:21:9f:b8:53:ef:7d:00:50:5f:2e:bb:13:cd:f6:
                    83:9c:34:6f:65:0a:b4:02:d4:ab:72:ae:e0:27:07:
                    94:a2:0a:fa:06:f4:45:05:3a:97:4f:7c:6d:af:42:
                    77:f9:c1:6e:08:35:10:88:f9:12:6f:c9:18:de:82:
                    af:7f:a0:48:45:d7:f3:20:6c:21:7d:e8:47:7e:c6:
                    13:a8:ac:df:df:b6:c7:1e:bd:d5:e6:80:9b:f2:04:
                    1e:f5:3e:a3:6b:1e:07:f3:7f:53:49:17:d0:35:1b:
                    e8:eb:ac:b2:9d:86:da:77:50:9c:ae:46:7c:58:28:
                    0b:47:ba:13:71:16:dd:e4:c7:98:0c:b8:8d:2c:33:
                    58:6c:50:a8:e3:aa:7c:a5:98:0a:a1:28:79:8f:1d:
                    8c:47:c9:fd:b1:c0:06:0f:d1:0d:f4:39:e0:60:4a:
                    c8:ae:33:83:87:6b:38:4c:47:9f:4c:37:96:c0:03:
                    79:8d:55:b7:53:77:c7:d3:b2:40:78:4f:d1:95:58:
                    b4:a3:58:71:b1:18:34:04:b0:2a:cd:79:dd:f1:a0:
                    69:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AC:F4:4D:D5:C7:D3:3E:7A:A5:A5:35:21:32:2B:8A:EA:3F:9A:12
            X509v3 Authority Key Identifier:
                keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:19:79:6a:84:09:37:84:bb:66:30:b3:12:c4:ac:c3:15:57:
         19:94:0d:c3:73:98:5a:d0:c2:eb:78:f6:6f:ba:dc:df:d4:c1:
         5e:9c:01:83:d3:ed:69:f7:05:7e:67:7e:e7:0d:70:28:dc:16:
         46:68:ab:41:77:50:1f:f9:5d:96:56:db:13:d0:4d:63:3b:63:
         67:81:cd:8b:c3:50:58:43:49:ae:eb:eb:dc:4e:30:39:02:10:
         45:72:0d:58:72:f3:44:26:6e:20:1d:bc:1c:c0:48:35:61:23:
         3f:a7:58:0c:37:59:b1:e1:98:cd:87:ae:09:7e:b3:6e:d8:0f:
         b9:5a:fe:2d:7e:55:14:8c:4a:b8:b4:b8:8c:e0:18:92:74:28:
         fc:18:a4:02:16:10:75:61:a2:3d:4c:6c:81:14:b4:73:08:f8:
         bf:74:fc:ca:65:9b:bc:4e:66:95:28:ac:d0:ef:63:ff:2d:54:
         68:69:28:ff:3d:19:66:80:3e:44:78:e1:2c:a1:07:4c:ae:3f:
         90:c2:eb:b0:17:1b:09:8a:e3:28:b2:ff:e1:88:d7:22:bd:d3:
         c5:69:bb:e7:ee:0c:cc:2c:2e:00:52:11:4b:90:f9:4b:2f:c3:
         54:0b:ec:14:0d:c6:ac:45:32:e7:2e:1e:21:c0:ae:6a:11:60:
         47:65:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 04:40:01 2026 by rpki-client