Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
File:                     4B1987D5160068092602529871C93EA320045A75.mft (raw, json)
Hash identifier:          OgmUbQ+G3Kc9T+Y2HY6D9AAkuLkhVrGYP7Z/xuRb6zI=
Subject key identifier:   D6:6B:99:FA:92:18:88:7D:B6:A0:A4:38:02:55:8B:8B:C2:4A:F1:FA
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Certificate issuer:       /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial:       3AB9667E5017C5F18F6B3ACBA3EACC6E1164DDE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
Manifest number:          041C
Signing time:             Sun 19 Apr 2026 06:00:03 +0000
Manifest this update:     Sun 19 Apr 2026 05:55:03 +0000
Manifest next update:     Mon 20 Apr 2026 08:15:03 +0000
Files and hashes:         1: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=)
                          2: 4B1987D5160068092602529871C93EA320045A75.crl (hash: yogZaorm2LqGXyMjlmBqLXsSv3GpsiEcCejtuRJBQno=)
                          3: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=)
                          4: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 08:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b9:66:7e:50:17:c5:f1:8f:6b:3a:cb:a3:ea:cc:6e:11:64:dd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75
        Validity
            Not Before: Apr 19 05:55:03 2026 GMT
            Not After : Apr 20 08:15:03 2026 GMT
        Subject: CN=D66B99FA9218887DB6A0A43802558B8BC24AF1FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b4:92:18:8a:d1:66:57:ba:04:92:90:c2:9d:
                    c7:d8:c2:77:a1:b0:2e:6b:7c:3b:2b:2b:3f:99:16:
                    0b:c4:6c:f0:91:61:ac:a4:30:20:87:29:39:44:3e:
                    e3:40:e2:5f:de:dd:3e:6e:2e:1e:4c:3f:2c:40:b4:
                    ac:2c:3b:c3:7b:a5:ae:40:08:b0:f7:60:69:55:d5:
                    31:bd:d0:fa:a8:8f:9c:37:e6:4f:36:99:60:a6:27:
                    f7:34:06:1e:4a:15:08:c1:06:d8:8e:0b:75:f2:d9:
                    47:8e:b6:db:68:af:a3:5a:a7:cd:42:fc:f9:07:ac:
                    89:97:0d:76:f2:cb:f1:da:30:63:7e:84:8d:01:db:
                    db:77:02:8b:09:b6:d0:48:72:b8:72:f1:9b:11:e4:
                    39:3b:78:64:33:58:32:80:ce:ee:c4:7a:3a:88:c2:
                    08:46:b9:32:45:40:ad:96:56:db:db:40:41:44:fe:
                    99:33:24:15:8d:a5:b2:c3:5e:d6:82:3e:e4:10:e6:
                    ed:e6:5c:47:c1:86:30:19:3c:1a:36:69:99:93:43:
                    89:e5:d3:b8:ef:8e:e5:c4:a3:96:6a:71:b5:84:96:
                    2b:7f:eb:eb:92:ca:dc:87:e8:e1:8e:d2:50:af:46:
                    8c:18:33:fd:c3:c1:a9:84:dd:1e:95:eb:6d:70:7a:
                    06:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6B:99:FA:92:18:88:7D:B6:A0:A4:38:02:55:8B:8B:C2:4A:F1:FA
            X509v3 Authority Key Identifier:
                keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f6:b4:15:de:30:4c:22:a8:d8:33:8d:6d:3a:e6:5e:5e:40:
         54:d8:f2:81:fa:72:a9:c2:5c:66:22:b7:a0:fb:ae:04:56:5e:
         05:36:73:f3:9d:5b:6f:ff:dc:9c:7c:04:e6:d8:7b:ae:69:03:
         1d:d3:09:ff:15:0d:8d:fb:e2:cd:e6:90:b2:e2:0c:5b:ce:9e:
         aa:77:58:22:96:cd:eb:0d:37:ea:27:3a:a2:5d:e9:a5:fc:a1:
         26:e6:cb:77:bc:de:16:b5:12:52:d6:ce:9d:4e:95:55:01:62:
         ab:3f:39:47:14:30:7c:cc:0d:09:5d:78:39:6d:d3:7f:d8:3d:
         81:2c:47:6a:ad:2c:22:f4:3a:f8:c5:38:88:a6:f0:9d:cf:9e:
         6b:3a:cf:df:1a:7e:fd:d8:af:4f:cf:2b:e2:3c:c6:c3:39:5d:
         9e:3a:76:6e:d0:25:6e:a5:a5:52:de:0b:8c:30:fc:ab:3c:f1:
         ee:bc:69:ee:09:bb:86:37:af:2c:0c:f1:87:b7:0d:dc:63:3b:
         1c:ea:47:a3:b3:91:11:01:8d:81:9e:36:f0:4e:e1:53:53:c2:
         30:84:a9:c5:88:bd:b1:ae:b2:f5:e2:68:d0:dc:fa:f2:a7:f1:
         a7:74:71:aa:b9:a0:d0:e5:7c:94:0a:54:63:2f:ea:c4:2f:ec:
         c0:a3:f1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:07 2026 by rpki-client