Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
File:                     B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json)
Hash identifier:          sd3bmQf+kvokxPVgNUoIXwI1gJ0SXLvcx0iQ2itoFBw=
Subject key identifier:   E4:0B:FB:F7:B5:9F:56:F3:4F:50:88:BB:0A:42:96:A3:19:23:FA:89
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       56FF4E521B2D63E03A7C71008B4C65E419B65AB4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
Manifest number:          0755
Signing time:             Fri 17 Apr 2026 05:23:47 +0000
Manifest this update:     Fri 17 Apr 2026 05:18:47 +0000
Manifest next update:     Sat 18 Apr 2026 07:29:47 +0000
Files and hashes:         1: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: DF0B2w1ci15U2MWgi9NHF/RrZ7F8ylilgRl/5FkgJoA=)
                          2: 3230332e372e3139372e302f32342d3234203d3e20313334303930.roa (hash: yVZN8uUTOOhqgDafcuJzyObo6OYnTkFGrZV6T9wM9pM=)
                          3: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: TyUQXYW/Z9X7LSxau+0o+4cjIXJiQzcIYmIWKatiFMc=)
                          4: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: Fe1UVCyCNYuLeK/2YClSqpX8AFGVDlpgAyiB6HZMqgE=)
                          5: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: /tu1GLPgmx3L59lA9DS67uY00dm6i5Wm3Y/TLJzZPPI=)
                          6: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: cMpLhkqyIF2gCW4TWbAhv9vBj4l8sHaKao47tXdQW4s=)
                          7: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: Wnz7iyh9clZuDDpLGVNNBZJ0JgoGPtAKZ8B2Ynr6Xgc=)
                          8: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ciSHjom7uhsnTUry3euH0kEf+ood81S/2eHdQ8CkHns=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ff:4e:52:1b:2d:63:e0:3a:7c:71:00:8b:4c:65:e4:19:b6:5a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: Apr 17 05:18:47 2026 GMT
            Not After : Apr 18 07:29:47 2026 GMT
        Subject: CN=E40BFBF7B59F56F34F5088BB0A4296A31923FA89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e9:6c:3f:76:b5:a9:26:59:8e:c7:a6:42:db:
                    77:b1:b1:fc:74:35:d1:3d:5b:1e:26:bf:34:c7:d6:
                    7e:79:a1:a2:1b:ce:1e:e0:4b:1e:ce:11:fb:9f:48:
                    e7:29:79:c2:f3:34:8f:52:72:e6:d2:ae:ca:da:9e:
                    4e:c1:93:19:01:66:cb:c7:3e:63:b4:d1:e1:39:dd:
                    ed:4d:44:c3:99:3b:a8:ad:11:1b:ed:37:36:03:93:
                    ee:2d:55:a8:b7:fd:14:e4:e0:1c:83:a4:8a:8b:68:
                    2e:0d:5b:87:15:b5:1e:d7:d4:3a:80:81:71:8a:de:
                    ac:05:aa:1c:2f:e3:3e:65:d3:62:98:1a:e8:1f:a0:
                    a3:45:c1:68:ef:be:d3:f9:33:4c:e7:b5:c5:1f:5a:
                    d5:8a:f5:fc:30:10:0c:94:d5:21:ef:77:0c:ab:b0:
                    e5:46:8d:b5:dd:e6:02:aa:9e:3c:0b:ae:91:87:f5:
                    3b:64:a6:c6:31:23:54:19:cc:0b:27:2a:2d:66:50:
                    d8:9d:0c:9e:c2:65:6b:e4:f1:dd:ee:dd:c1:a3:9b:
                    d6:03:c2:22:27:31:9a:28:b8:95:e2:5a:85:75:33:
                    15:a5:f7:5f:59:c5:9d:c0:e0:04:69:f8:ce:32:e5:
                    02:26:5f:11:fa:58:c2:58:68:97:4d:5b:7d:84:9b:
                    19:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0B:FB:F7:B5:9F:56:F3:4F:50:88:BB:0A:42:96:A3:19:23:FA:89
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b4:39:2e:b9:16:9c:5d:18:45:c5:70:84:31:44:e1:ae:de:
         96:af:90:c0:c7:a2:29:fe:89:df:5b:0b:97:63:4d:c9:05:99:
         bf:e9:74:0b:76:8a:dc:63:58:95:48:4c:dc:05:68:3d:a2:3f:
         b8:01:82:14:64:9b:01:09:9b:e2:c3:c8:d2:21:5f:33:5e:a3:
         15:3b:75:e3:69:a7:bc:bc:5f:e4:77:c9:03:7c:a0:3c:ce:48:
         79:ce:f5:fd:95:42:c2:49:82:d5:39:4c:95:42:88:45:4b:31:
         16:60:83:22:49:10:ae:3c:6d:40:b4:a9:81:d5:f1:10:09:16:
         27:bc:64:42:e5:55:00:8f:37:ea:6b:d8:2a:2d:db:b5:e2:ba:
         bb:d6:17:f3:01:18:87:56:3d:5f:52:c3:41:27:f6:16:eb:81:
         d9:36:d9:04:92:82:ab:88:6c:28:cb:5d:37:15:dd:09:ca:78:
         29:90:0b:af:56:7b:44:c6:0f:6f:b0:e2:b2:ec:9d:63:be:2c:
         0a:56:d7:d2:0c:14:fd:32:23:20:02:f3:b8:e9:2d:7c:66:c6:
         5c:d4:0a:8d:9c:5c:7c:d9:de:7a:b8:33:c5:62:a3:13:28:22:
         72:82:94:81:f1:a1:69:88:d6:b2:14:c6:02:fd:e2:08:11:d1:
         bb:e4:57:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:21 2026 by rpki-client