Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
File:                     4B1987D5160068092602529871C93EA320045A75.mft (raw, json)
Hash identifier:          CGKPf8YtF053jPEJsutVW7cfhAL/n9O3R3rzI89CAWs=
Subject key identifier:   5D:8C:4A:E8:E4:5B:21:CD:DB:9F:37:FC:DD:AA:3B:B9:94:BE:93:44
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Certificate issuer:       /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial:       2FA92C03BA265AD633E1BDE892C04E96117F0920
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
Manifest number:          046A
Signing time:             Sat 13 Jun 2026 09:04:19 +0000
Manifest this update:     Sat 13 Jun 2026 08:59:19 +0000
Manifest next update:     Sun 14 Jun 2026 09:34:19 +0000
Files and hashes:         1: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=)
                          2: 4B1987D5160068092602529871C93EA320045A75.crl (hash: 4nfOJLl1mUSMVmfJT+KbrfCMGSXrdVJLCRx7YC8KigE=)
                          3: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=)
                          4: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 09:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a9:2c:03:ba:26:5a:d6:33:e1:bd:e8:92:c0:4e:96:11:7f:09:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75
        Validity
            Not Before: Jun 13 08:59:19 2026 GMT
            Not After : Jun 14 09:34:19 2026 GMT
        Subject: CN=5D8C4AE8E45B21CDDB9F37FCDDAA3BB994BE9344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:eb:80:28:5d:8c:d9:86:7b:ec:c0:02:5e:
                    b6:93:94:50:36:55:53:9a:92:8a:86:9d:26:4a:ab:
                    25:eb:70:c6:8b:5e:b9:80:dd:b4:77:c8:5c:37:57:
                    8c:1c:45:5a:d3:d7:4e:cc:82:54:db:c2:5d:bc:b1:
                    a1:c1:39:72:a0:6e:30:ac:b4:e3:12:9e:6e:19:04:
                    01:e4:e2:74:6f:1d:96:f0:9c:a3:fe:0d:11:68:c0:
                    34:bc:11:2e:41:7d:cc:5f:ac:66:28:32:7a:1c:94:
                    aa:05:1f:27:62:df:3a:38:b1:4f:17:ff:9c:34:d7:
                    e0:c2:1b:05:aa:70:07:6c:38:0d:13:f0:26:49:97:
                    34:7b:77:5d:92:ab:01:f4:59:36:1b:79:99:ae:55:
                    9f:4b:73:1b:54:63:48:da:a9:23:f8:42:d8:d8:28:
                    53:6c:20:63:35:40:25:dd:a9:18:3e:a6:c9:5f:00:
                    ac:e2:2e:21:c4:10:5f:6c:f3:66:a5:6c:0d:df:82:
                    ec:df:07:21:c2:28:e6:be:9b:cb:cf:cc:8f:0c:53:
                    58:4b:0f:07:e2:64:93:3f:b6:b0:20:f2:53:e7:52:
                    26:fd:6e:09:c6:50:d9:48:93:42:3a:2c:cb:7c:88:
                    95:9a:33:94:23:0c:34:3e:d0:0f:b7:95:b3:81:c8:
                    73:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8C:4A:E8:E4:5B:21:CD:DB:9F:37:FC:DD:AA:3B:B9:94:BE:93:44
            X509v3 Authority Key Identifier:
                keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a4:7f:4a:90:33:58:80:f5:f4:3d:98:34:68:99:ae:c8:90:
         f4:10:2d:88:82:87:0a:64:ed:fe:9c:40:a7:dc:ec:61:60:01:
         61:1d:c1:05:e6:b5:aa:19:92:72:4a:5d:ce:aa:b4:22:bf:d6:
         4a:53:1b:46:87:8f:80:de:dd:cd:83:8a:8c:57:b8:bb:d1:62:
         a0:95:f7:84:75:bb:e0:22:0d:65:71:74:c5:58:a3:ed:f9:0a:
         be:16:40:25:59:2f:e5:04:d7:c3:8b:bd:be:ac:a4:1a:d2:0b:
         e7:bc:41:cb:db:3b:43:cb:51:d6:9e:93:f6:75:be:16:21:ac:
         8b:01:6c:41:ec:64:74:b7:18:3b:10:2d:2a:0f:c5:16:65:03:
         a3:05:33:09:eb:3e:a0:28:bc:68:27:d1:f9:e5:87:87:e6:12:
         9b:09:f4:2d:15:18:4c:51:b6:26:2d:f0:46:f3:e2:92:64:06:
         83:ee:1b:6b:6b:b9:c8:2a:38:11:5f:bf:da:55:7e:71:0d:89:
         a2:ff:8d:e0:b4:5e:ed:1d:38:05:bc:45:71:ef:a4:4e:e2:d4:
         95:79:4f:1e:a5:8d:68:90:43:4a:be:43:53:c8:ed:61:74:88:
         6a:19:1e:be:82:fe:2a:f5:49:22:c0:80:0e:40:20:3c:98:41:
         47:78:a5:79
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUL6ksA7omWtYz4b3oksBOlhF/CSAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2
MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI2MDYxMzA4NTkxOVoX
DTI2MDYxNDA5MzQxOVowMzExMC8GA1UEAxMoNUQ4QzRBRThFNDVCMjFDRERCOUYz
N0ZDRERBQTNCQjk5NEJFOTM0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKMH64AoXYzZhnvswAJetpOUUDZVU5qSioadJkqrJetwxoteuYDdtHfIXDdX
jBxFWtPXTsyCVNvCXbyxocE5cqBuMKy04xKebhkEAeTidG8dlvCco/4NEWjANLwR
LkF9zF+sZigyehyUqgUfJ2LfOjixTxf/nDTX4MIbBapwB2w4DRPwJkmXNHt3XZKr
AfRZNht5ma5Vn0tzG1RjSNqpI/hC2NgoU2wgYzVAJd2pGD6myV8ArOIuIcQQX2zz
ZqVsDd+C7N8HIcIo5r6by8/MjwxTWEsPB+Jkkz+2sCDyU+dSJv1uCcZQ2UiTQjos
y3yIlZozlCMMND7QD7eVs4HIc/0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBRdjEro
5FshzdufN/zdqju5lL6TRDAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa
dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE
NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB
a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz
MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAaKR/SpAzWID19D2YNGiZrsiQ9BAtiIKHCmTt/pxAp9zsYWAB
YR3BBea1qhmSckpdzqq0Ir/WSlMbRoePgN7dzYOKjFe4u9FioJX3hHW74CINZXF0
xVij7fkKvhZAJVkv5QTXw4u9vqykGtIL57xBy9s7Q8tR1p6T9nW+FiGsiwFsQexk
dLcYOxAtKg/FFmUDowUzCes+oCi8aCfR+eWHh+YSmwn0LRUYTFG2Ji3wRvPikmQG
g+4ba2u5yCo4EV+/2lV+cQ2Jov+N4LRe7R04BbxFce+kTuLUlXlPHqWNaJBDSr5D
U8jtYXSIahkevoL+KvVJIsCADkAgPJhBR3ileQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:32:13 2026 by rpki-client