Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File:                     30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier:          2qx/pE9O1vXTO2x0nPoSYHlTbjy1r+F/9GSBxmJdFOM=
Subject key identifier:   44:C1:6A:58:E6:BF:7A:03:9A:A8:64:B7:D6:8C:4C:2B:D5:E8:AC:AF
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       06670D47AA8AFF042D1DB90BB80C2E4B69419503
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number:          0839
Signing time:             Fri 25 Sep 2026 22:05:51 +0000
Manifest this update:     Fri 25 Sep 2026 22:00:51 +0000
Manifest next update:     Sun 27 Sep 2026 00:37:51 +0000
Files and hashes:         1: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: 2guqc3il/Df3q/hiPOyhywzhF3bNWW294jv3FUSAbQM=)
                          2: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: iW/Pe5Cqp3aiKoMmZoO7B7Qp0dEF2rMCnFsMeO07vy8=)
                          3: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: 7xp6Qecc5/OOhL0p9AX/cfT6YnZhKTIxBQ5OCdlFvaU=)
                          4: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: HSa+RTxZrOYrbT+IDg+t6WaS9zlbbo5KRg0q1NH2iC0=)
                          5: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: 4M3Gj7VtwtPss7dq7bEuNaNtbKXrLCHIYjSN8LGXjK0=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 00:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:67:0d:47:aa:8a:ff:04:2d:1d:b9:0b:b8:0c:2e:4b:69:41:95:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: Sep 25 22:00:51 2026 GMT
            Not After : Sep 27 00:37:51 2026 GMT
        Subject: CN=44C16A58E6BF7A039AA864B7D68C4C2BD5E8ACAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4f:bb:87:f6:89:e8:64:d3:ab:9b:89:ba:0b:
                    e9:80:19:cf:72:27:e0:bb:17:78:94:43:96:90:04:
                    43:f8:88:b1:55:1b:3d:0e:2f:96:ea:94:ca:de:f3:
                    c8:ef:eb:60:08:75:3d:bf:29:17:d0:6b:e7:3d:f3:
                    48:5a:24:2b:52:e7:cb:b6:9c:96:79:1c:38:3a:4c:
                    0c:02:97:7e:5c:6a:62:35:f7:37:db:60:a4:83:b5:
                    53:dd:e2:41:f6:5c:3a:19:ec:e1:6c:88:1d:2c:5f:
                    c6:73:cb:21:95:3f:b0:23:e5:20:c1:73:b1:ea:20:
                    95:ef:71:be:02:e3:83:4d:05:83:97:99:bf:71:30:
                    a8:25:c1:29:70:9c:7c:8e:3c:49:57:42:83:2e:b5:
                    fa:90:48:06:d7:6e:3d:53:c9:14:a6:a4:4d:4e:00:
                    ff:c2:f5:c6:d8:45:f6:b1:89:5f:5b:97:28:25:1b:
                    7d:b0:85:4d:da:6f:05:a4:34:35:d4:7e:2a:8e:68:
                    8f:ea:c2:2a:49:c7:c8:0d:95:b2:fe:c6:a1:2c:92:
                    e7:7c:be:bc:61:e8:84:75:6c:bb:dd:6a:29:24:1c:
                    84:aa:ff:7e:44:44:81:46:81:4f:27:da:4e:97:a4:
                    8d:42:cb:dc:fc:52:aa:d5:b7:45:c3:b1:ac:6f:51:
                    d6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C1:6A:58:E6:BF:7A:03:9A:A8:64:B7:D6:8C:4C:2B:D5:E8:AC:AF
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:74:89:13:93:88:3c:02:95:c8:4f:d2:89:66:20:cd:a9:09:
         3b:5e:5d:90:ae:f5:7b:79:aa:5d:e1:8d:90:14:09:17:5a:42:
         99:fb:a8:8c:28:c7:1c:5a:c0:39:97:1d:fb:c5:f5:23:f8:d4:
         85:cf:07:a4:5c:e9:2e:90:e0:57:93:c0:7b:b2:8a:a0:bd:e9:
         fd:ae:9b:71:ad:8d:68:a8:2e:a8:fb:93:4f:79:a9:dd:3d:99:
         d8:6a:7f:85:48:18:27:78:ef:8e:39:38:cd:89:88:6f:ee:08:
         a4:a8:7e:bb:9c:03:e5:57:09:38:e0:09:3d:1a:e5:34:f1:a9:
         d7:7a:d8:03:22:e0:6f:43:91:97:ad:ac:69:39:29:b5:d2:48:
         97:83:b2:ce:41:b3:74:23:ed:12:20:a2:5c:f8:da:ac:65:42:
         6d:a8:ed:8c:a0:e8:dd:30:32:3a:be:61:59:19:b2:09:19:37:
         75:bc:b0:76:c5:63:a1:cd:c3:a4:1c:4d:f4:91:b1:2f:6d:aa:
         bb:d4:9d:c8:9c:08:dc:4e:2e:8a:b8:e2:ac:fd:1f:e4:04:e9:
         d9:95:8c:30:bb:db:6d:03:89:ad:24:09:24:a0:21:1e:2a:10:
         8b:f0:c6:6e:9b:c6:88:50:82:aa:70:44:fc:80:a1:56:2b:7c:
         34:42:f4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:26:02 2026 by rpki-client