Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
File:                     4B1987D5160068092602529871C93EA320045A75.mft (raw, json)
Hash identifier:          bc6ZpUY3KK+RxEbtDSvZdsQkAwYFJWsiL+fl5zQNqbg=
Subject key identifier:   B9:B6:F0:0B:F5:24:86:F4:38:19:15:C6:A1:FE:01:28:9D:FB:3A:50
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Certificate issuer:       /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial:       2F16FC7706C10FFB785FD0C0026CBDEBA9488CC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
Manifest number:          04AA
Signing time:             Tue 28 Jul 2026 18:19:38 +0000
Manifest this update:     Tue 28 Jul 2026 18:14:38 +0000
Manifest next update:     Wed 29 Jul 2026 21:16:38 +0000
Files and hashes:         1: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=)
                          2: 4B1987D5160068092602529871C93EA320045A75.crl (hash: MJyF8JqmmXvcIFKv+tR4Clqx7ZTW7qndmghhYh9j2GQ=)
                          3: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=)
                          4: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:16:fc:77:06:c1:0f:fb:78:5f:d0:c0:02:6c:bd:eb:a9:48:8c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75
        Validity
            Not Before: Jul 28 18:14:38 2026 GMT
            Not After : Jul 29 21:16:38 2026 GMT
        Subject: CN=B9B6F00BF52486F4381915C6A1FE01289DFB3A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f1:a6:1b:b5:c8:e2:c9:13:78:4c:b8:9e:63:
                    5f:23:63:0c:31:99:1a:41:3c:60:89:a3:56:59:a1:
                    b8:1a:12:54:ec:e8:0d:73:13:5a:6e:17:b7:7a:51:
                    b9:b3:8f:79:ca:e6:2c:2c:4a:44:68:d3:38:32:c4:
                    1e:ad:60:9d:a4:63:30:59:c1:a5:a5:c3:da:c0:a1:
                    67:fc:ca:2e:0a:2b:33:c4:ad:b9:b9:36:a1:e6:d9:
                    06:01:54:99:f1:6e:f6:a3:ee:2e:d3:d8:5a:b0:ee:
                    88:e6:a7:cf:06:19:ec:99:5b:6f:95:06:80:2c:9f:
                    c4:31:98:d7:8a:b2:97:bd:e4:85:de:57:d3:1f:94:
                    15:c1:34:2a:6e:81:0d:04:6d:00:8a:d4:66:ac:a9:
                    6f:0f:cf:c0:95:f2:84:8d:15:23:82:b8:1b:c3:27:
                    8a:3d:9a:01:b6:a8:b8:b1:90:5e:41:5e:e0:24:7a:
                    a2:b2:a1:34:64:a2:bc:9d:35:4e:47:86:84:2d:f8:
                    22:a1:1f:74:02:04:26:a6:72:e4:2c:5a:29:eb:65:
                    1e:ca:38:26:8e:15:5f:bb:21:56:a2:f0:f6:a2:21:
                    1c:86:b8:d8:f5:63:9f:c6:86:62:5d:79:87:ec:7c:
                    5f:54:8d:54:86:6b:f5:ae:62:ff:da:20:ba:47:c1:
                    9a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B6:F0:0B:F5:24:86:F4:38:19:15:C6:A1:FE:01:28:9D:FB:3A:50
            X509v3 Authority Key Identifier:
                keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f4:c4:dc:86:a6:47:6e:bb:4b:de:3e:92:9c:6c:79:90:25:
         0e:6c:9f:6b:2c:1b:48:fe:a8:71:dd:70:11:54:06:2f:f2:7a:
         07:ca:44:84:46:2a:d0:d0:c1:9d:31:27:0a:34:f7:23:cc:56:
         98:cb:4b:87:98:ec:d3:cc:75:33:fa:3c:f5:23:40:e6:9e:a8:
         72:68:3e:aa:c3:1b:75:b3:99:85:f0:3a:5c:84:9a:26:b3:e4:
         50:39:c5:6a:39:8c:24:fc:bb:c7:a2:83:cb:a0:4f:9b:1a:d0:
         4e:eb:c9:5a:e0:f3:68:7d:1d:64:9b:69:dc:74:9d:33:3d:b7:
         72:e5:c7:ad:99:2c:48:51:f1:c9:d5:c4:f2:4b:97:58:90:e5:
         a4:c4:0c:3b:ef:90:f0:59:05:9c:49:87:5b:07:cc:fc:20:5f:
         df:7e:78:17:ee:a0:61:8d:25:27:05:ef:0e:a2:dc:d3:4d:e7:
         70:c1:72:40:25:85:90:53:ea:1f:80:b6:36:8a:74:48:a3:dd:
         c4:e5:91:36:cd:56:cc:1a:ae:e0:69:84:24:68:de:78:31:7f:
         80:3d:3a:1f:32:04:7c:7c:b4:a3:7f:66:09:13:fc:da:53:d5:
         4c:22:0a:cc:49:32:da:12:49:a6:1f:56:48:79:24:f0:06:57:
         2d:49:65:8f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIULxb8dwbBD/t4X9DAAmy966lIjMUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2
MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI2MDcyODE4MTQzOFoX
DTI2MDcyOTIxMTYzOFowMzExMC8GA1UEAxMoQjlCNkYwMEJGNTI0ODZGNDM4MTkx
NUM2QTFGRTAxMjg5REZCM0E1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJfxphu1yOLJE3hMuJ5jXyNjDDGZGkE8YImjVlmhuBoSVOzoDXMTWm4Xt3pR
ubOPecrmLCxKRGjTODLEHq1gnaRjMFnBpaXD2sChZ/zKLgorM8Stubk2oebZBgFU
mfFu9qPuLtPYWrDuiOanzwYZ7Jlbb5UGgCyfxDGY14qyl73khd5X0x+UFcE0Km6B
DQRtAIrUZqypbw/PwJXyhI0VI4K4G8Mnij2aAbaouLGQXkFe4CR6orKhNGSivJ01
TkeGhC34IqEfdAIEJqZy5CxaKetlHso4Jo4VX7shVqLw9qIhHIa42PVjn8aGYl15
h+x8X1SNVIZr9a5i/9ogukfBmisCAwEAAaOCAhswggIXMB0GA1UdDgQWBBS5tvAL
9SSG9DgZFcah/gEonfs6UDAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa
dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE
NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB
a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz
MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAd/TE3IamR267S94+kpxseZAlDmyfaywbSP6ocd1wEVQGL/J6
B8pEhEYq0NDBnTEnCjT3I8xWmMtLh5js08x1M/o89SNA5p6ocmg+qsMbdbOZhfA6
XISaJrPkUDnFajmMJPy7x6KDy6BPmxrQTuvJWuDzaH0dZJtp3HSdMz23cuXHrZks
SFHxydXE8kuXWJDlpMQMO++Q8FkFnEmHWwfM/CBf3354F+6gYY0lJwXvDqLc003n
cMFyQCWFkFPqH4C2Nop0SKPdxOWRNs1WzBqu4GmEJGjeeDF/gD06HzIEfHy0o39m
CRP82lPVTCIKzEky2hJJph9WSHkk8AZXLUlljw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:51 2026 by rpki-client