Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
File:                     B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json)
Hash identifier:          ISX3RWhv2kUbHeCuEY01SbX5sb39Yfv4EurHSPmmw44=
Subject key identifier:   B5:E9:37:EB:E1:18:0A:49:86:2F:7B:CE:16:AF:C1:30:E6:94:F5:18
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       1F1B0F7490EBC5BBAFB1CD9FD7515EFFD719E5D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
Manifest number:          0830
Signing time:             Mon 21 Sep 2026 06:10:32 +0000
Manifest this update:     Mon 21 Sep 2026 06:05:32 +0000
Manifest next update:     Tue 22 Sep 2026 07:54:32 +0000
Files and hashes:         1: 3230332e372e3139372e302f32342d3234203d3e2039343439.roa (hash: vAwqdvaW6yc2XtCDVw1UZNeo44zGvcl9i5o3oiFTQWo=)
                          2: 3230332e372e3139372e302f32342d3234203d3e20313334303930.roa (hash: a7JbZMr92zzHbEOXrpI0N91OQAaQL4UiyFM6BOscqZE=)
                          3: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ouqx4LxaBgGUkmuXMINywcsMwqU0N6ifWFXfDupPMm0=)
                          4: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: Yif9zAcaCiGPMsa6nFpzg5c6EtmMp4yn18LmSsTMSYg=)
                          5: 3230332e372e3139362e302f32342d3234203d3e2037353436.roa (hash: V95Z++X1BN0ujeiUpldiRsUT1wl/Vx8TaPKCLXBi9zI=)
                          6: 3230332e372e3139362e302f32342d3234203d3e20313334303930.roa (hash: /LpdqHnCJJlwCcOi3CqIbxGlAHdFFT95xe2Q0VqmA3E=)
                          7: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: rzinuF8M1yOollf04EvErWnWH6T2XoPt2D2UOC4d8Tk=)
                          8: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: fkFkv4x2RJF8ikeWNYi3IpWqQO/j13TZnucB+1TubjI=)
                          9: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: aNPv9QWVtH9n+gnLXuZ6dzxPw4I7fQPByYNoN2wj0vw=)
                          10: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: HzcHz8eSNlNpfwj3lml+BhpnhEmXFZw9Q7KozVmmTuI=)
                          11: 3230332e372e3139372e302f32342d3234203d3e2037353436.roa (hash: 63Xbycua4Mi8GYHYLibG9AGPdZZeGwzqJEcmfJT9ybE=)
                          12: 3230332e372e3139362e302f32332d3233203d3e20313334303930.roa (hash: qaOra+xDLyRhqdf//j4nvjjhMuhgOEsIZ5B8fiKTKxU=)
                          13: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: fDoR67VqgO4UC2WoFr3onY00uK4pxdsfonbFV6yqmUw=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 07:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1b:0f:74:90:eb:c5:bb:af:b1:cd:9f:d7:51:5e:ff:d7:19:e5:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: Sep 21 06:05:32 2026 GMT
            Not After : Sep 22 07:54:32 2026 GMT
        Subject: CN=B5E937EBE1180A49862F7BCE16AFC130E694F518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:12:01:98:7a:17:5a:28:67:36:3a:28:c2:
                    76:0c:f9:a6:30:a3:b6:15:6f:56:9a:1c:99:74:b3:
                    53:cd:10:a4:98:52:69:70:9c:41:0c:12:83:39:90:
                    d9:a2:d3:60:b7:c9:a6:d2:0f:1a:38:c1:4e:c9:2e:
                    b6:a7:87:74:05:54:14:f9:ad:48:ef:83:db:20:8f:
                    ec:cb:e5:71:15:aa:4b:dd:ef:25:ee:52:ab:ac:5e:
                    dc:e4:ca:85:4e:a7:eb:eb:33:be:fa:c5:dd:42:25:
                    48:39:a8:8a:43:b7:2e:fe:1c:b1:45:7c:06:03:4a:
                    df:b0:de:0a:08:96:e2:d2:f6:57:9a:fa:40:d1:dd:
                    40:f0:d6:f0:25:83:c4:a9:9c:31:43:8f:ef:83:9a:
                    c9:59:53:bb:db:5a:73:2d:8a:0e:79:8a:ac:1f:50:
                    25:b3:9a:31:fb:a3:c5:b5:4c:b2:3f:ce:8a:0a:43:
                    a2:87:29:da:0a:2e:5e:2b:db:08:0d:c8:a9:44:99:
                    d7:b5:ad:ed:80:d4:28:8b:8d:b8:f0:10:6d:e5:0f:
                    62:89:f0:b2:f6:bc:48:81:e3:29:58:08:45:87:0c:
                    45:63:8d:77:d3:5c:9c:5f:1e:87:bc:d3:8e:28:d1:
                    93:8a:91:e2:dd:62:07:85:73:70:59:c1:d0:12:2c:
                    06:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E9:37:EB:E1:18:0A:49:86:2F:7B:CE:16:AF:C1:30:E6:94:F5:18
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:50:12:1e:2f:07:d9:13:d6:9c:72:f8:69:d0:4f:e2:19:31:
         43:b5:47:7c:0c:3f:ac:dd:f3:ad:1b:2f:c0:aa:b0:45:cf:e8:
         4b:e9:ab:ab:3d:38:e6:36:98:00:de:28:d6:5e:8a:69:62:aa:
         29:68:b1:d0:19:6e:82:42:d8:ec:5b:a1:08:8f:64:ea:2b:6d:
         ee:60:f4:86:c7:1a:16:78:43:f8:28:aa:01:32:29:33:fe:da:
         79:a7:73:42:70:94:4b:c8:b1:c9:c9:c0:db:83:de:11:a0:15:
         ec:60:02:39:f3:1d:4e:fb:bd:56:df:86:0a:79:6f:c3:6c:8c:
         5b:5f:14:22:a8:c9:5d:a7:8d:ee:30:f9:42:2f:df:68:ec:2b:
         e5:02:61:0c:db:5d:a5:cd:ea:3d:53:a3:6b:0c:e7:30:b2:7c:
         12:bb:85:da:06:2f:e4:40:41:5e:52:32:eb:c5:b8:b7:85:64:
         cd:17:5a:35:13:e8:9a:a3:56:eb:30:d2:31:49:84:b2:a9:75:
         73:2c:6e:ea:22:52:53:3a:c5:88:3a:53:c6:8e:f8:47:d7:86:
         89:6f:d4:40:4b:c9:b3:ee:54:db:5e:42:83:73:14:4c:7d:45:
         ea:93:a1:07:4a:19:4b:3d:d7:c9:22:52:16:50:cd:82:8c:35:
         7c:0b:1e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:08:26 2026 by rpki-client