Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
File:                     17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json)
Hash identifier:          EuCOfPdXXIP+d+v7kui0yzph7lld41nlxNnet2QkY1g=
Subject key identifier:   80:D9:ED:24:53:8B:57:A1:D3:92:85:D5:07:22:9D:2D:29:2B:63:D1
Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
Certificate issuer:       /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Certificate serial:       6958BBDD6AC0AF7F5251A6C6671C3871878D611F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
Manifest number:          020C
Signing time:             Mon 19 Oct 2026 00:34:27 +0000
Manifest this update:     Mon 19 Oct 2026 00:29:27 +0000
Manifest next update:     Tue 20 Oct 2026 02:06:27 +0000
Files and hashes:         1: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: 9FXIqtvqlI1b6k7H88FgG5bPVoeiPlgW3c8/gsoxMSo=)
                          2: AS9833.asa (hash: eF+RoiYlyVewG5EIfcht1IcC29IFU+2ytLm0lOE12DA=)
                          3: AS153346.asa (hash: rAU+nhqV6DoL50iYgf+3duDnIh+fo6Vc/7vgCwv8AHo=)
                          4: 323030313a6466343a353134633a3a2f34362d3436203d3e20313533333436.roa (hash: cfW8/BpGR5YLDJqf4B6srqIWH4dAdAcYNWndMbPZ4n4=)
                          5: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: IjBbBi7bT+TKWsMxUtALMiJcD8XDMkisRqBpr1xaN8U=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
                          rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 02:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:58:bb:dd:6a:c0:af:7f:52:51:a6:c6:67:1c:38:71:87:8d:61:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
        Validity
            Not Before: Oct 19 00:29:27 2026 GMT
            Not After : Oct 20 02:06:27 2026 GMT
        Subject: CN=80D9ED24538B57A1D39285D507229D2D292B63D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:a4:8a:49:09:0c:fc:84:91:c8:96:07:e0:
                    9f:6b:52:8e:9a:98:a5:c3:5a:4e:bd:3c:f6:06:69:
                    39:d2:dd:bd:f8:d7:e1:2a:b8:58:81:be:9f:7a:5e:
                    77:44:7b:a9:94:8b:55:fb:62:5f:0b:3d:1e:b3:9b:
                    40:b7:23:91:ac:e4:8b:22:1f:ff:cf:58:57:22:c3:
                    2b:40:90:6d:d5:4a:38:8b:00:28:b2:07:ab:5e:bb:
                    19:f3:28:29:ce:21:1e:e5:66:40:3f:5d:21:82:71:
                    fe:78:e5:4f:08:07:74:8a:a1:ec:02:8f:81:b2:5f:
                    5f:83:65:11:b3:a0:6f:3b:de:26:6a:a2:1f:72:18:
                    13:c1:f4:57:b0:74:0a:9a:07:13:ad:b7:a9:1c:35:
                    23:3b:a1:32:c2:d7:91:3c:49:d6:96:1b:83:2b:e0:
                    10:3f:68:dc:51:a2:47:4a:92:25:68:28:43:5c:47:
                    2e:7d:bf:7c:02:78:a6:06:32:ca:6c:2c:bf:f3:a8:
                    c3:fc:50:71:3c:48:db:1e:da:1a:e9:42:bb:0c:51:
                    00:cb:eb:73:f4:be:dd:ae:c1:ab:cc:11:84:85:6a:
                    19:26:15:f9:dd:b2:b2:69:45:7c:d5:fa:a8:94:8a:
                    f4:d5:5f:15:65:4a:67:a6:90:cd:da:22:27:f9:3e:
                    26:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D9:ED:24:53:8B:57:A1:D3:92:85:D5:07:22:9D:2D:29:2B:63:D1
            X509v3 Authority Key Identifier:
                keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:1f:e3:94:77:6c:5a:86:52:90:e3:7f:79:b7:54:84:ba:01:
         dd:69:8a:a5:1e:33:90:5d:a4:bb:0d:a6:a1:f2:30:97:b7:6f:
         75:e5:86:19:d9:b9:64:33:4b:0c:54:17:61:6f:20:83:98:07:
         80:12:eb:48:4e:63:bb:46:5d:53:eb:c5:12:0c:57:37:2c:f3:
         28:06:06:45:46:ef:f7:a0:a3:51:d0:3a:b7:2d:da:d8:c0:53:
         7f:56:0f:e0:2e:ba:c7:a4:56:0f:e0:e7:bc:6b:33:6e:3b:07:
         14:5d:2a:4a:08:e4:77:dc:58:ae:13:d5:3f:bf:85:70:4b:52:
         a6:00:d2:97:f7:c2:69:9a:4d:9c:f3:70:85:8d:4f:ee:99:1d:
         e7:ee:ca:f0:45:de:d2:d8:2f:b7:da:7d:cb:c8:4d:a5:5c:a4:
         d4:89:26:a0:69:f4:04:6e:67:ea:7f:38:76:b8:f0:66:47:86:
         5f:52:4e:6b:c4:d3:d0:6a:26:ad:98:49:6e:48:cf:83:17:53:
         ae:46:61:6a:18:72:35:7b:a3:c8:d6:20:22:4a:a7:87:a0:00:
         70:22:61:d0:75:c2:c9:d3:83:c4:b2:75:be:36:4c:68:23:25:
         88:5f:3e:0b:ae:90:04:7e:0a:03:cd:b5:2b:f5:37:bd:73:9f:
         90:78:5d:b5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUaVi73WrAr39SUabGZxw4cYeNYR8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEygxN0FBMzkyQzBD
RkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBMB4XDTI2MTAxOTAwMjkyN1oX
DTI2MTAyMDAyMDYyN1owMzExMC8GA1UEAxMoODBEOUVEMjQ1MzhCNTdBMUQzOTI4
NUQ1MDcyMjlEMkQyOTJCNjNEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMeYpIpJCQz8hJHIlgfgn2tSjpqYpcNaTr089gZpOdLdvfjX4Sq4WIG+n3pe
d0R7qZSLVftiXws9HrObQLcjkazkiyIf/89YVyLDK0CQbdVKOIsAKLIHq167GfMo
Kc4hHuVmQD9dIYJx/njlTwgHdIqh7AKPgbJfX4NlEbOgbzveJmqiH3IYE8H0V7B0
CpoHE623qRw1IzuhMsLXkTxJ1pYbgyvgED9o3FGiR0qSJWgoQ1xHLn2/fAJ4pgYy
ymwsv/Oow/xQcTxI2x7aGulCuwxRAMvrc/S+3a7Bq8wRhIVqGSYV+d2ysmlFfNX6
qJSK9NVfFWVKZ6aQzdoiJ/k+Jt0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBSA2e0k
U4tXodOShdUHIp0tKStj0TAfBgNVHSMEGDAWgBQXqjksDP91T2JJAG2JOG+HG5aT
+jAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMS8xN0FBMzky
QzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GNm81TEF6X2RV
OWlTUUJ0aVRodmh4dVdrX28uY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3
QjAwMDAvMS8xN0FBMzkyQzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZB
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEANB/jlHdsWoZSkON/ebdUhLoB3WmKpR4zkF2kuw2mofIwl7dv
deWGGdm5ZDNLDFQXYW8gg5gHgBLrSE5ju0ZdU+vFEgxXNyzzKAYGRUbv96CjUdA6
ty3a2MBTf1YP4C66x6RWD+DnvGszbjsHFF0qSgjkd9xYrhPVP7+FcEtSpgDSl/fC
aZpNnPNwhY1P7pkd5+7K8EXe0tgvt9p9y8hNpVyk1IkmoGn0BG5n6n84drjwZkeG
X1JOa8TT0GomrZhJbkjPgxdTrkZhahhyNXujyNYgIkqnh6AAcCJh0HXCydODxLJ1
vjZMaCMliF8+C66QBH4KA821K/U3vXOfkHhdtQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 18:29:00 2026 by rpki-client