Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
File:                     5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json)
Hash identifier:          YRXuGrrks+o79dw/pXEx7RohSbMnRCQEu1RzDuPedTI=
Subject key identifier:   60:F7:F6:B9:B3:1B:50:25:92:DE:52:ED:EE:08:C1:5D:EB:72:84:36
Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
Certificate issuer:       /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Certificate serial:       7A5A4BB81B1330DF4688B1D1CE006C38C8DDBE09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
Manifest number:          0363
Signing time:             Sun 20 Sep 2026 04:56:32 +0000
Manifest this update:     Sun 20 Sep 2026 04:51:32 +0000
Manifest next update:     Mon 21 Sep 2026 05:51:32 +0000
Files and hashes:         1: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: 7QCONFpvmyuNf5zvgrCNMc+J3LAExntNG5Qv6K3hEbs=)
                          2: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: kaULZDC6XCfi7x2p6IJ/ygWV6uSlBhFSJ4hHgh1euqM=)
                          3: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: Hgd5eLTx8zPg40IaiGyGenwPBsDa1fy76WiFsfGDsMQ=)
                          4: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: 2Zvg9Ws7IMObyn5Fjh5NXlxVrZw5Q8Td4l5rY/CM5ec=)
                          5: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: VcmsnRsgmQnBSJtXlXxQZTY4P3vXZvCafvFQMqv4vfA=)
                          6: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: XCFQR4hI12Tjgtit3SEE2XJc52bIvb2OFixoEnv1lfk=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
                          rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 05:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5a:4b:b8:1b:13:30:df:46:88:b1:d1:ce:00:6c:38:c8:dd:be:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
        Validity
            Not Before: Sep 20 04:51:32 2026 GMT
            Not After : Sep 21 05:51:32 2026 GMT
        Subject: CN=60F7F6B9B31B502592DE52EDEE08C15DEB728436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:09:b4:0c:3b:51:f0:0e:c4:8c:71:12:a0:
                    7d:ce:65:16:cf:b5:6b:ae:d0:98:9c:bd:a1:50:f3:
                    66:39:ba:3d:a6:96:2c:1a:81:2e:6f:d3:31:59:59:
                    a1:df:84:80:e9:bd:ee:48:b9:7d:2a:26:f4:45:97:
                    70:90:29:25:83:c9:9a:5e:90:ca:3c:6d:f8:48:8c:
                    5e:16:33:5d:20:dc:63:45:9f:c6:6b:5f:c3:7d:12:
                    b1:c5:29:88:4a:62:39:b6:d3:35:57:6c:50:0d:09:
                    56:cc:4a:3e:8e:e3:85:e2:82:59:7e:06:1c:a7:03:
                    53:95:da:bc:50:82:0c:9d:f0:b5:25:cc:c8:ce:75:
                    5e:44:38:72:61:d1:72:d8:38:78:09:cc:65:a2:01:
                    c9:2d:e4:ae:e5:2b:e9:7b:3b:3f:d4:ba:a9:58:77:
                    11:69:c8:4f:18:03:66:fd:f9:de:7e:a6:0f:a0:e9:
                    dc:72:12:b9:54:5f:01:47:54:dd:36:ba:e4:d2:40:
                    97:bf:45:15:6e:5d:ea:74:99:ab:ea:33:dd:28:7c:
                    1e:3f:d8:39:84:d7:c0:2d:8d:49:ad:54:d8:bf:c3:
                    4c:f0:5e:3f:4d:36:9a:11:f1:43:5a:91:1a:c3:70:
                    73:17:a3:69:68:a5:8d:cd:3a:77:0f:ed:f0:84:32:
                    6b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F7:F6:B9:B3:1B:50:25:92:DE:52:ED:EE:08:C1:5D:EB:72:84:36
            X509v3 Authority Key Identifier:
                keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:bc:04:a0:39:1d:13:6d:f6:9f:79:d1:22:f5:1d:0c:82:07:
         e7:98:5a:f9:07:f7:63:ca:de:77:df:6f:a3:27:51:d2:7b:4e:
         94:7f:71:70:82:85:76:da:c0:51:2e:76:2a:48:57:48:d6:81:
         8c:ce:8e:ae:b6:65:5c:c4:c8:2b:37:77:ae:0a:b5:51:68:50:
         c4:d2:38:e6:9b:24:fe:83:3c:5c:af:e4:f9:10:b2:85:2c:2e:
         a9:da:a6:74:d0:bf:d9:4d:af:0a:41:32:2c:21:7c:2b:4d:d2:
         85:48:bf:f7:5e:1d:c3:2f:f3:08:37:f5:b1:df:ec:6c:32:ab:
         b4:64:e8:ea:53:22:9b:e0:83:77:43:a2:78:8d:e3:ac:e6:5d:
         25:d9:20:77:8c:2e:5d:ce:9b:4f:60:bc:4a:2b:73:46:f3:1a:
         2b:b9:e9:c6:ac:f1:d7:0c:50:37:af:93:57:eb:ff:8e:4e:1b:
         a0:06:f9:c2:00:9c:44:f6:0f:d6:be:7a:f4:cd:2e:a6:a1:c8:
         41:2a:d9:c1:56:91:33:c0:45:5e:92:ef:7e:f5:86:88:fc:ce:
         4a:58:37:d8:35:fa:f7:b0:43:7f:f6:5f:8b:58:89:48:47:56:
         a8:75:6d:c2:1c:1b:61:47:7f:bf:b0:43:56:b7:d6:60:5c:c9:
         9b:42:82:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:51:39 2026 by rpki-client