Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
File:                     17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json)
Hash identifier:          CEIY3BEHeDdXpH5lJ6gVZ3YVmcwwS0KOGt1W3s8ALIw=
Subject key identifier:   F9:1D:71:2D:33:48:8A:0E:38:2F:39:78:D1:4B:91:2D:8A:F9:65:FE
Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
Certificate issuer:       /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Certificate serial:       57CB9C6D45B8561CD5CAD6126592B53330EE9581
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
Manifest number:          0194
Signing time:             Wed 29 Jul 2026 07:57:18 +0000
Manifest this update:     Wed 29 Jul 2026 07:52:18 +0000
Manifest next update:     Thu 30 Jul 2026 08:45:18 +0000
Files and hashes:         1: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: hWe3lXNq/jFw74QhIZ3wzpdu1yKGCGND5le2DX7+sEw=)
                          2: 323030313a6466343a353134383a3a2f34382d3438203d3e2039383333.roa (hash: zl/9BBoJJ3neyY8UfSuYMMT4qwgA84XRS4rr+sykVxA=)
                          3: 323030313a6466343a353134653a3a2f34382d3438203d3e20313533333436.roa (hash: 6d79MjPujLDyKtMpkk4jphJnh2+RAK01Ho2cDxHKrKM=)
                          4: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: 9FXIqtvqlI1b6k7H88FgG5bPVoeiPlgW3c8/gsoxMSo=)
                          5: 323030313a6466343a353134303a3a2f34342d3434203d3e20313533333436.roa (hash: 0cKeFRvMg4K7CjG6EjM23reqsbS6dbzuJZqiCsKqNyg=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
                          rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:cb:9c:6d:45:b8:56:1c:d5:ca:d6:12:65:92:b5:33:30:ee:95:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
        Validity
            Not Before: Jul 29 07:52:18 2026 GMT
            Not After : Jul 30 08:45:18 2026 GMT
        Subject: CN=F91D712D33488A0E382F3978D14B912D8AF965FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:59:01:7e:4a:44:11:ef:70:fd:db:a2:df:89:
                    92:ba:1f:42:63:a8:31:7a:80:04:62:87:26:4a:94:
                    cb:68:8f:98:a1:db:2b:66:e0:b9:73:9c:43:b8:e7:
                    46:5c:b5:0c:9d:8c:92:4e:d8:28:33:85:26:56:d4:
                    71:42:22:09:f3:dd:89:4b:22:cc:44:86:83:01:7e:
                    dd:78:17:bf:88:aa:15:bd:2b:df:55:a5:d2:fd:65:
                    ef:b1:87:04:11:57:45:9f:e6:47:80:b6:c5:f3:1f:
                    d8:f8:65:e6:77:5f:7b:2f:e8:a5:59:4b:a5:9c:17:
                    a8:1d:83:dc:8f:4f:76:25:ae:c2:7c:15:c9:a5:f6:
                    61:08:a9:09:0f:91:e6:47:b6:90:8b:7d:c2:ab:3b:
                    ea:eb:b0:28:3c:27:da:ed:22:56:dd:68:00:99:3d:
                    d9:f9:10:5e:02:d0:57:91:c3:fd:82:51:cf:db:23:
                    7b:b0:f5:3c:a6:f7:e6:90:88:76:09:bf:db:04:87:
                    d1:f5:5e:0f:3b:d9:4f:ba:a3:84:44:aa:68:63:ae:
                    b5:fb:fb:83:e4:c0:59:5d:00:85:2f:7e:7a:24:51:
                    cd:d3:31:e9:58:46:9d:60:f7:ad:16:98:e1:3d:6f:
                    67:5c:40:af:37:ef:8f:6a:b2:dd:de:0d:e8:63:45:
                    c4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1D:71:2D:33:48:8A:0E:38:2F:39:78:D1:4B:91:2D:8A:F9:65:FE
            X509v3 Authority Key Identifier:
                keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:3a:db:19:c2:ac:0c:a9:6b:58:7a:18:fa:b0:9a:c6:11:f5:
         56:bd:4b:61:f9:8d:25:97:76:78:3a:e4:7c:fb:b9:12:c9:00:
         10:05:6f:28:98:d9:a5:97:35:d6:e9:be:2f:ac:ee:b5:9f:26:
         10:0b:04:8d:e8:26:40:78:6f:ab:6e:94:d2:7c:7a:f7:dd:53:
         e4:a2:75:ad:88:c5:03:09:cc:6f:46:aa:45:22:4b:11:e7:7d:
         bf:a5:2e:83:ab:0f:fa:94:a6:38:0d:59:4d:31:ce:79:d1:2b:
         b9:ae:a4:3e:a4:8f:9e:69:2a:ec:68:34:1b:96:6d:93:e1:71:
         8b:1d:2d:b4:b0:e9:79:b0:86:5f:b7:78:0a:fb:99:59:c1:70:
         9e:69:84:76:34:8a:2a:cb:3d:49:99:65:95:38:2b:25:2e:e0:
         d6:c8:39:9e:d5:54:5a:38:4d:e0:cf:b4:66:e4:fc:2a:7c:0e:
         5e:18:6b:36:b5:11:34:7e:fd:ac:b1:36:b2:ac:8c:35:c0:44:
         2f:27:f1:72:c3:a7:17:f9:03:e3:0d:3f:1d:a2:1a:e1:3b:b3:
         b2:2c:6c:dd:f1:63:60:2b:6f:a0:b4:36:6e:ff:c5:5f:27:1f:
         9c:96:2e:63:ce:df:51:e6:cc:94:a2:9d:99:1a:03:85:e8:5c:
         08:05:1f:46
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUV8ucbUW4VhzVytYSZZK1MzDulYEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEygxN0FBMzkyQzBD
RkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBMB4XDTI2MDcyOTA3NTIxOFoX
DTI2MDczMDA4NDUxOFowMzExMC8GA1UEAxMoRjkxRDcxMkQzMzQ4OEEwRTM4MkYz
OTc4RDE0QjkxMkQ4QUY5NjVGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKZZAX5KRBHvcP3bot+JkrofQmOoMXqABGKHJkqUy2iPmKHbK2bguXOcQ7jn
Rly1DJ2Mkk7YKDOFJlbUcUIiCfPdiUsizESGgwF+3XgXv4iqFb0r31Wl0v1l77GH
BBFXRZ/mR4C2xfMf2Phl5ndfey/opVlLpZwXqB2D3I9PdiWuwnwVyaX2YQipCQ+R
5ke2kIt9wqs76uuwKDwn2u0iVt1oAJk92fkQXgLQV5HD/YJRz9sje7D1PKb35pCI
dgm/2wSH0fVeDzvZT7qjhESqaGOutfv7g+TAWV0AhS9+eiRRzdMx6VhGnWD3rRaY
4T1vZ1xArzfvj2qy3d4N6GNFxAMCAwEAAaOCAhswggIXMB0GA1UdDgQWBBT5HXEt
M0iKDjgvOXjRS5Etivll/jAfBgNVHSMEGDAWgBQXqjksDP91T2JJAG2JOG+HG5aT
+jAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMS8xN0FBMzky
QzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GNm81TEF6X2RV
OWlTUUJ0aVRodmh4dVdrX28uY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3
QjAwMDAvMS8xN0FBMzkyQzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZB
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAqzrbGcKsDKlrWHoY+rCaxhH1Vr1LYfmNJZd2eDrkfPu5EskA
EAVvKJjZpZc11um+L6zutZ8mEAsEjegmQHhvq26U0nx6991T5KJ1rYjFAwnMb0aq
RSJLEed9v6Uug6sP+pSmOA1ZTTHOedErua6kPqSPnmkq7Gg0G5Ztk+Fxix0ttLDp
ebCGX7d4CvuZWcFwnmmEdjSKKss9SZlllTgrJS7g1sg5ntVUWjhN4M+0ZuT8KnwO
XhhrNrURNH79rLE2sqyMNcBELyfxcsOnF/kD4w0/HaIa4Tuzsixs3fFjYCtvoLQ2
bv/FXycfnJYuY87fUebMlKKdmRoDhehcCAUfRg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:03:46 2026 by rpki-client