Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File:                     30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier:          KxeeH+U6P6LmpvZYF+u5/bCAz3ab+Cy+07F3nL3/emo=
Subject key identifier:   7C:BF:96:F7:2C:EC:9C:EC:7B:94:68:F7:E7:BA:5E:0A:BA:D2:5A:6E
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       48D4E665AFAEB176D7579858E6BF87DD7ED40A7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number:          071A
Signing time:             Sun 01 Mar 2026 06:55:24 +0000
Manifest this update:     Sun 01 Mar 2026 06:50:24 +0000
Manifest next update:     Mon 02 Mar 2026 09:35:24 +0000
Files and hashes:         1: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: 2guqc3il/Df3q/hiPOyhywzhF3bNWW294jv3FUSAbQM=)
                          2: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: 7xp6Qecc5/OOhL0p9AX/cfT6YnZhKTIxBQ5OCdlFvaU=)
                          3: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: XyeizyzDAEa+PgusHyeyKCPfJkLp66Z7RmMj2SCBjwM=)
                          4: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: 4M3Gj7VtwtPss7dq7bEuNaNtbKXrLCHIYjSN8LGXjK0=)
                          5: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: qktH9CmoSMi4zY7SUgxfdRgLAlOa3yTYkuOYxTloRPw=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 09:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d4:e6:65:af:ae:b1:76:d7:57:98:58:e6:bf:87:dd:7e:d4:0a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: Mar  1 06:50:24 2026 GMT
            Not After : Mar  2 09:35:24 2026 GMT
        Subject: CN=7CBF96F72CEC9CEC7B9468F7E7BA5E0ABAD25A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5e:0f:cb:b9:a5:c7:9c:84:a6:b8:7d:84:27:
                    2c:9b:2e:7e:92:a3:bb:4d:fa:37:96:03:a0:2a:88:
                    0e:87:5a:a4:9e:20:a8:01:b7:d0:cb:55:9f:9c:02:
                    85:12:f9:c1:e2:b1:d7:d1:8d:d8:45:cc:25:af:14:
                    bc:7a:35:ff:cf:57:61:0d:73:27:1a:8f:34:37:8c:
                    a2:80:ad:34:33:bd:0f:c0:2c:24:34:87:4b:fe:23:
                    f0:b0:75:6e:ef:55:18:3e:01:cd:0f:71:b2:7e:c4:
                    8b:a5:62:2f:5a:9f:a5:25:9e:73:8d:c2:64:26:fe:
                    d4:51:fb:f0:12:76:7f:9a:53:c8:dd:e2:b8:fa:75:
                    75:71:a8:1f:38:d8:84:a3:c3:04:8f:5c:ea:2a:62:
                    6f:97:b3:fa:98:c8:07:43:d8:a8:60:92:9c:d3:86:
                    d4:d7:48:b5:ec:b7:a6:a4:18:39:dc:11:b8:a2:db:
                    d0:09:3e:83:af:1b:c4:a3:72:02:a6:3b:a5:3c:48:
                    d9:d9:be:a8:80:18:08:80:5a:78:3e:ae:a4:47:3c:
                    2e:99:a5:2b:11:46:95:b9:1f:15:8e:cc:84:3a:19:
                    97:6a:ad:69:9f:bf:d0:d1:99:7d:7f:fd:d6:48:c7:
                    00:bf:2d:bc:a7:70:09:ac:f4:82:77:af:6b:be:4d:
                    ea:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BF:96:F7:2C:EC:9C:EC:7B:94:68:F7:E7:BA:5E:0A:BA:D2:5A:6E
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0b:14:16:08:4d:b4:32:23:af:5a:0a:48:5e:ec:3b:ed:61:
         7e:c5:53:eb:74:ae:a9:82:2a:41:5d:78:66:8b:44:03:f2:4c:
         0e:64:03:dd:52:e7:9b:55:4c:68:71:69:eb:12:5f:60:77:77:
         f2:76:ee:a0:3b:49:34:d4:4a:ab:5a:db:7b:ed:bd:9b:a3:11:
         77:4a:38:2b:17:b4:63:e2:90:2d:15:f0:91:0a:77:c8:1d:36:
         45:c9:b2:4f:2a:da:48:69:92:c6:12:1c:68:b4:2d:d4:f8:30:
         78:60:13:9f:3d:4b:0c:ab:74:aa:74:64:e2:d1:18:90:07:2f:
         a8:ad:83:25:92:7b:e8:40:9c:10:34:8e:9e:37:ec:87:af:ba:
         75:0e:3f:4d:53:a5:26:8e:3f:bc:b3:b1:44:7e:fb:ba:67:be:
         bd:3d:bf:8c:aa:99:82:52:3c:22:be:f8:30:8e:65:c1:23:67:
         78:07:95:d8:04:de:dc:30:47:73:e7:76:cf:da:fc:2b:aa:71:
         7b:9d:76:47:b9:e3:87:a9:2b:34:07:0d:40:f0:64:5c:a5:65:
         51:6f:02:f1:7f:e6:86:c1:d8:76:44:7f:8c:0a:0d:14:de:20:
         9e:a0:4a:20:71:bf:fe:2d:79:c4:7b:97:3b:82:15:13:5f:07:
         1b:52:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:29:33 2026 by rpki-client