Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
File:                     hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json)
Hash identifier:          BPwDVr/t2bQ/rdQtPWcUS4YZ4vMBomlp307d6wMA5kw=
Subject key identifier:   3C:6A:60:58:7C:89:C8:9D:0B:70:CD:FA:96:9F:F6:F4:99:63:BA:C2
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Certificate issuer:       /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial:       0486
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
Manifest number:          03D8
Signing time:             Wed 17 Jun 2026 00:49:07 +0000
Manifest this update:     Wed 17 Jun 2026 00:49:07 +0000
Manifest next update:     Wed 24 Jun 2026 00:49:07 +0000
Files and hashes:         1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: UQzSh8CHoh5rNOy9NoMKiTkbxMONI6wDHGRx32gKu3k=)
                          2: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: 4S3t2dvowIG/EeUUH9BW/CIG4gP34ZZohoWk2j8rwOk=)
                          3: 3B4551B4CAA811F09DDC8D69C4F9AE02.roa (hash: hDuVof7d3QEQIcHs4zgmq/ai6KUFB43GrplnDI2UHX4=)
                          4: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: AhsLyZ6cSjsB6OxlhSMjPiIcrs1dzGaYxdwJxIKQAV0=)
                          5: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: 3uU6kQ8f6IzetYcsltzYNLy8hPqbwPnaYrl6t4o4ReU=)
                          6: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: grW6xPxdsNkObgmvC9oU5U7FXXHibN8xdWW4iVbsRa4=)
                          7: EA792108690E11EF9396CC48C4F9AE02.roa (hash: cK4Lx01JCSZW4H3YCVnodtAx/ORf7B0e7vIxfgqX3uI=)
                          8: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: t+cHfFMyQ8NmvDexgT+4lzg2Q83rmvnX7nYHf4IBQdE=)
                          9: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: ylWMSBGShl92T17Vr5K5bsotQdr2G9LiHvdhhYPVrsQ=)
                          10: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: PuC0DdgiggYtIjLvoalRRhkL/oLZu3l1qbEXfv11uZQ=)
                          11: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: brYkxZidojowoYQIqbU0aCNgQ49H7mQPg5jz4K3RIX0=)
                          12: 058B976ECA9811F0A295B360C4F9AE02.roa (hash: lCNez/KnH3/u+GXyUNFMwTEZ8K7MJDqkA0Go5e/dS58=)
                          13: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: EH518Dy6MrAFwmekT0SecOdweFL+FTqCksa8EB6seaE=)
                          14: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: Ev/s13A6k/DcIm1OffodSAjmHH7SzOfcmso4hb44RXg=)
                          15: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: H8VgsGVXvOR/DsZUOIG9OsZtDhG6b/7E83e/ckfyCFk=)
                          16: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: BF86pvfpbRBo9qXutEzgqO61bS2nTEWr+T+kabrPp1I=)
                          17: 218211CA68F911EF986C8281C4F9AE02.roa (hash: MwIf35XYCZODKT46sKZ+J1cz+B+fnbUAXj0j3RbLFN4=)
                          18: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: TRErWmuqP/DsNILuB+Bsg/oOXJFxA8k+YEgBWxxZqis=)
                          19: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: wtq9PupYRV4XEewrdMqA8/4bNl2edm+HOBW3n2PpfNo=)
                          20: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: CxVWM785DWNfTdffR2/Yw/2Hi2LQnhqbcgLOymKnnM8=)
                          21: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: Sy5GnEGGq49Ut4C8AZxeQpVbXW8n/TI4EHxkVNOwMUM=)
                          22: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: P/zfn2TnTP8oh0npf6LxHTRFCNPzez1h9qHSPByk2/0=)
                          23: BE4B3228691411EFB573C120C4F9AE02.roa (hash: ovaDzOhz8t6euzDNkjZEtSnXx9uEV3qfaxhhzdo9Nh8=)
                          24: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: xClDM8EpPeO91j0Mezn/P780Xmby1QeCDq53lVbawmM=)
                          25: B35D540E68F611EFB785D145C4F9AE02.roa (hash: 6jCTzKFpZAM5sRcwoj/RVhwR1AvH7Y/xHmW9G5IE69c=)
                          26: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: cxcPBGfE5CZoxeyWHWqPrl7qUEDb1w9Ivop3RXOuNy8=)
                          27: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: lTmSpanWfkonoLk8NmfV940KaHPkO1rnz77AY+6Xqc0=)
                          28: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: O2/KxKIdSE2v482JbxbnQ0getoqbnZqZ+/nYKo7sZyY=)
                          29: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: MOAi7s6/6G4J+pIDkTOufzZW6KS0P8wRn9IgpgfF+kk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1158 (0x486)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
        Validity
            Not Before: Jun 17 00:49:07 2026 GMT
            Not After : Jun 24 00:49:07 2026 GMT
        Subject: CN=6a31ef03-5997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d7:91:a9:ef:7b:17:d7:24:f6:c2:3d:12:b6:
                    81:61:2b:ed:9d:d3:ad:3a:c2:58:05:c8:02:6c:19:
                    67:9d:c1:ca:b9:a4:02:59:5b:66:1b:76:dd:22:bf:
                    fc:03:24:d4:eb:69:6f:84:ec:5e:b6:b9:14:1e:f0:
                    06:4c:ea:8d:7b:bc:c6:aa:e1:4f:15:9b:8e:e9:d9:
                    9a:61:70:d0:e1:8f:a3:63:34:e7:0f:d2:27:d9:bc:
                    70:db:37:80:3f:d5:0c:fb:3c:ed:29:24:85:15:d0:
                    67:ce:ea:51:2d:be:a3:7a:97:07:b7:74:ea:79:7f:
                    6a:73:14:e0:da:b0:ad:8c:d1:7d:a5:20:65:43:99:
                    f9:4a:56:b2:0b:a9:8f:9c:d0:05:3f:fb:1d:15:0a:
                    a3:a6:2c:4e:21:fe:76:20:b7:cf:ec:e0:8e:ae:c0:
                    af:63:55:16:09:c2:94:f1:43:5a:62:f9:2f:a8:fb:
                    f4:a2:59:7a:3a:ad:11:f2:cc:20:81:2d:d4:fc:e2:
                    07:52:b0:1c:16:07:bd:f0:1c:7c:51:3c:36:aa:c2:
                    c0:db:ee:1e:a5:d3:34:69:14:4f:dc:2b:5f:81:c9:
                    a6:06:d9:b1:a1:e1:16:03:2a:a9:48:ca:b7:8f:5b:
                    7f:09:65:9e:1e:31:84:15:56:42:15:c6:05:1e:e0:
                    9f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6A:60:58:7C:89:C8:9D:0B:70:CD:FA:96:9F:F6:F4:99:63:BA:C2
            X509v3 Authority Key Identifier:
                keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:0e:69:e6:29:ad:4d:94:57:41:d5:dc:05:e2:c8:7e:b5:89:
         7f:db:2a:d0:e8:ae:df:60:ce:a2:5b:c3:ba:06:10:0e:5d:e8:
         92:36:0e:45:e5:b9:8c:d5:ad:2f:89:7f:77:ec:ed:29:32:67:
         b0:91:54:99:73:fd:0e:8d:2f:d5:35:88:9b:bd:0b:dd:e2:ad:
         4a:69:4b:28:b6:68:ae:ff:24:5d:07:51:47:3f:04:04:eb:60:
         c2:78:47:56:6c:3c:9f:e4:f1:76:ca:ad:08:d3:26:7a:c2:ca:
         61:67:93:e8:e7:e4:5c:2b:3f:53:b9:be:27:a0:ad:bc:5b:a8:
         59:20:57:ea:98:1c:f9:23:b4:67:71:9d:ad:8d:7d:1f:d5:a3:
         b4:26:60:b1:35:bd:88:0c:7b:72:94:13:6f:6c:47:ac:9d:90:
         57:69:89:a9:79:8c:b0:94:ac:b0:e8:5b:f5:62:26:53:be:88:
         5f:aa:0a:99:81:27:19:90:8c:45:5d:23:1a:49:7e:3f:1a:ff:
         d8:ee:7c:32:44:b2:bf:45:ad:2f:b4:1a:20:bb:7d:94:78:fb:
         9f:63:23:31:17:4a:76:45:23:43:17:5c:1b:ea:41:7a:c9:a8:
         41:16:bf:fe:61:f1:a4:c1:6e:d9:4a:36:d1:e0:f0:e2:b7:fc:
         47:6b:cb:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG
NUMyMDE1NzAwHhcNMjYwNjE3MDA0OTA3WhcNMjYwNjI0MDA0OTA3WjAYMRYwFAYD
VQQDEw02YTMxZWYwMy01OTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArdeRqe97F9ck9sI9EraBYSvtndOtOsJYBcgCbBlnncHKuaQCWVtmG3bdIr/8
AyTU62lvhOxetrkUHvAGTOqNe7zGquFPFZuO6dmaYXDQ4Y+jYzTnD9In2bxw2zeA
P9UM+zztKSSFFdBnzupRLb6jepcHt3TqeX9qcxTg2rCtjNF9pSBlQ5n5SlayC6mP
nNAFP/sdFQqjpixOIf52ILfP7OCOrsCvY1UWCcKU8UNaYvkvqPv0oll6Oq0R8swg
gS3U/OIHUrAcFge98Bx8UTw2qsLA2+4epdM0aRRP3CtfgcmmBtmxoeEWAyqpSMq3
j1t/CWWeHjGEFVZCFcYFHuCfHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxqYFh8
icidC3DN+paf9vSZY7rCMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC
OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDQyQS8yMEYyQ0IwMEVCOUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklT
anQ5UG1iTENxQkgxd2dGWEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOw5p5imtTZRXQdXcBeLIfrWJf9sq0Oiu32DOolvDugYQDl3okjYOReW5jNWt
L4l/d+ztKTJnsJFUmXP9Do0v1TWIm70L3eKtSmlLKLZorv8kXQdRRz8EBOtgwnhH
Vmw8n+TxdsqtCNMmesLKYWeT6OfkXCs/U7m+J6CtvFuoWSBX6pgc+SO0Z3GdrY19
H9WjtCZgsTW9iAx7cpQTb2xHrJ2QV2mJqXmMsJSssOhb9WImU76IX6oKmYEnGZCM
RV0jGkl+Pxr/2O58MkSyv0WtL7QaILt9lHj7n2MjMRdKdkUjQxdcG+pBesmoQRa/
/mHxpMFu2Uo20eDw4rf8R2vLWg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 19:17:43 2026 by rpki-client