Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File:                     30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier:          jC4sSQIfYJJUkYudPYV6j1NswtOueQDaN/U5kWysfLI=
Subject key identifier:   B3:DF:40:C1:77:24:86:D2:AD:BD:8A:3A:B4:BC:80:97:06:AC:47:07
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       68224E4538F87DE2000DF87268B36E57122A709A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number:          07A9
Signing time:             Sat 13 Jun 2026 09:09:20 +0000
Manifest this update:     Sat 13 Jun 2026 09:04:20 +0000
Manifest next update:     Sun 14 Jun 2026 12:29:20 +0000
Files and hashes:         1: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: 2guqc3il/Df3q/hiPOyhywzhF3bNWW294jv3FUSAbQM=)
                          2: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: qktH9CmoSMi4zY7SUgxfdRgLAlOa3yTYkuOYxTloRPw=)
                          3: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: 7xp6Qecc5/OOhL0p9AX/cfT6YnZhKTIxBQ5OCdlFvaU=)
                          4: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: geohQ2h2/+XKCA7oSE/5mU5g8LYPI6YaPB7wjjAo1OE=)
                          5: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: 4M3Gj7VtwtPss7dq7bEuNaNtbKXrLCHIYjSN8LGXjK0=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:22:4e:45:38:f8:7d:e2:00:0d:f8:72:68:b3:6e:57:12:2a:70:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: Jun 13 09:04:20 2026 GMT
            Not After : Jun 14 12:29:20 2026 GMT
        Subject: CN=B3DF40C1772486D2ADBD8A3AB4BC809706AC4707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b8:c6:90:95:9c:3d:9c:88:7c:4a:c4:09:26:
                    ad:1e:f1:c0:5e:bc:5f:60:03:24:9c:0d:3f:f9:89:
                    ec:fb:be:39:5a:bf:d9:df:86:3c:a5:6c:7b:7e:98:
                    d7:b4:11:4d:3e:1f:f0:b3:b2:e2:ca:73:57:ff:46:
                    4d:e5:06:47:ec:e6:fe:c0:62:5a:81:22:69:d4:58:
                    07:15:25:75:69:d0:64:83:e2:a2:41:6e:75:6b:aa:
                    e1:6b:5e:61:84:75:9c:92:24:ae:24:c2:1b:7d:b5:
                    ed:72:64:ba:dd:fa:5e:61:15:fd:1f:5e:c6:9f:5b:
                    6a:6a:5f:4d:3b:08:54:9e:58:25:42:97:3b:ce:ec:
                    1c:b1:0c:34:57:7b:56:26:88:c3:95:23:58:8f:e5:
                    01:15:7b:ce:5d:45:2f:63:f7:b0:2e:1d:e1:8e:9b:
                    c5:75:c7:7e:5d:91:e7:c1:21:65:1b:7d:42:75:27:
                    98:87:48:71:d7:77:dc:57:50:80:46:1d:e2:98:e5:
                    61:fb:25:52:c9:df:42:30:81:94:4d:8b:75:8a:51:
                    7f:e6:13:75:60:0c:8f:b0:a7:fb:6d:ff:0e:ce:a1:
                    c2:59:e0:ee:2a:20:93:ef:50:5a:29:d5:76:08:37:
                    c6:00:aa:ca:df:1d:b9:c7:34:b0:47:b2:38:5a:ac:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DF:40:C1:77:24:86:D2:AD:BD:8A:3A:B4:BC:80:97:06:AC:47:07
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:83:df:0d:3c:ed:47:6d:0f:99:51:da:b4:1c:48:18:99:80:
         fd:84:89:44:5c:9c:fc:0f:f3:27:a8:b9:aa:50:e3:a8:3a:53:
         9a:5c:9c:c9:12:7b:bb:40:fc:eb:58:4f:80:98:86:f4:80:d8:
         fa:0d:04:37:65:2d:fd:80:a9:b8:e5:cd:d0:e8:8a:3a:41:60:
         f9:65:6d:b2:ad:92:18:f2:1e:0d:0f:0d:4d:8c:f8:7a:24:dc:
         2b:ba:a4:e4:09:93:2d:3e:9e:29:61:59:6d:62:14:e6:e9:ac:
         02:b5:ca:47:b3:da:ae:76:48:53:73:11:29:86:3d:11:c3:c4:
         55:43:d7:e2:6d:21:6e:c3:f4:95:90:2a:de:42:73:8f:e5:dc:
         09:9e:ee:10:fb:8b:9a:ea:6c:58:c9:a6:f3:aa:2c:c9:36:f5:
         70:55:25:f3:69:ad:e8:44:56:cd:48:1f:51:7c:32:89:66:38:
         68:0f:95:1c:fa:bb:5f:56:38:a7:9f:e6:bd:e8:89:04:c3:57:
         fd:6f:16:60:7e:f0:97:ae:e1:94:8f:8f:a0:d3:1b:68:98:a3:
         29:c1:1f:bd:5b:c7:2c:6e:5e:97:5b:0a:92:d8:bd:cb:e4:1f:
         91:83:a3:d2:8c:ea:61:d6:27:e2:fd:60:ac:03:d3:f2:43:05:
         b3:ff:c6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:26:20 2026 by rpki-client