Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
File:                     5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft (raw, json)
Hash identifier:          DS3fU1ah75Bv/Aji3qvQywpSfEtyHSxxyXUGEJmx6C0=
Subject key identifier:   BD:1F:D5:58:57:77:10:B9:FA:0F:43:C8:7C:77:D0:DD:AE:23:89:E5
Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B
Certificate issuer:       /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
Certificate serial:       56D34C23A3CBA2130D44305E7E5EF6D4B8357566
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
Manifest number:          0297
Signing time:             Sun 19 Apr 2026 00:43:35 +0000
Manifest this update:     Sun 19 Apr 2026 00:38:35 +0000
Manifest next update:     Mon 20 Apr 2026 01:04:35 +0000
Files and hashes:         1: 34332e3235322e32302e302f32342d3234203d3e203136353039.roa (hash: 2pHYFNhpresl2Qe+bmQCdeuqTmZNLu6JpjLmSUgR1DM=)
                          2: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (hash: Hgd5eLTx8zPg40IaiGyGenwPBsDa1fy76WiFsfGDsMQ=)
                          3: 5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl (hash: zIfc0+tP/sWafdYu8XLX099sz207IuztrrQcpaa3vvk=)
                          4: 34332e3235322e32302e302f32342d3234203d3e203134363138.roa (hash: POeaLZ7jyGbDhNwka17vD8hm5iiL/jnjTj3d8a5jHPw=)
                          5: 34332e3235322e32332e302f32342d3234203d3e203239383032.roa (hash: 7QCONFpvmyuNf5zvgrCNMc+J3LAExntNG5Qv6K3hEbs=)
                          6: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (hash: kaULZDC6XCfi7x2p6IJ/ygWV6uSlBhFSJ4hHgh1euqM=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl
                          rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 01:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d3:4c:23:a3:cb:a2:13:0d:44:30:5e:7e:5e:f6:d4:b8:35:75:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B
        Validity
            Not Before: Apr 19 00:38:35 2026 GMT
            Not After : Apr 20 01:04:35 2026 GMT
        Subject: CN=BD1FD558577710B9FA0F43C87C77D0DDAE2389E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:45:eb:d5:5a:00:e2:03:47:61:56:07:b2:0f:
                    f1:c9:e7:aa:6a:0d:ff:e9:59:4e:17:68:61:01:ec:
                    95:43:38:a2:b2:12:06:45:cd:59:8c:c5:49:62:a7:
                    47:a3:b5:8b:cb:6d:78:92:96:15:72:20:3a:2d:d4:
                    79:56:7c:9a:75:3b:0a:ed:9f:8e:d5:77:0b:55:7f:
                    a4:f5:ab:74:36:dc:96:ba:7d:e7:be:41:2a:d5:fe:
                    38:ae:27:06:92:c9:99:8f:0a:92:73:c2:51:20:42:
                    24:81:b3:8f:b3:14:fb:50:29:14:e4:7d:57:a3:df:
                    96:74:5f:49:09:99:5c:8b:a4:eb:ad:a8:7e:24:b7:
                    00:f7:47:6b:31:58:3f:77:30:6d:b4:5c:db:fe:33:
                    d2:07:87:5f:1d:f6:94:4b:bf:d6:46:67:1b:e5:1d:
                    c1:e0:5e:09:60:62:9f:0d:ca:5f:a1:fa:ac:ef:0a:
                    1c:cf:e0:af:dd:91:02:8d:b6:56:9a:58:b3:c1:b1:
                    fe:f6:2b:e7:fc:2d:3d:51:24:c7:4e:dc:11:a7:e8:
                    f5:96:15:72:ec:92:d1:54:75:03:42:10:b5:e9:34:
                    5c:8d:e7:a0:89:ec:26:e9:6c:d9:eb:80:bb:c7:3f:
                    86:5e:78:3d:d0:cb:10:26:17:f9:5b:43:dc:dd:6d:
                    01:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1F:D5:58:57:77:10:B9:FA:0F:43:C8:7C:77:D0:DD:AE:23:89:E5
            X509v3 Authority Key Identifier:
                keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8d:7a:68:8b:1b:d2:e8:c0:44:91:45:55:b9:97:50:03:12:
         d0:18:22:d0:ad:73:ac:73:b0:63:46:0d:f2:4d:cc:ba:36:38:
         9c:49:91:21:21:02:e9:1b:e5:19:7c:e4:23:90:c4:a7:a0:67:
         7b:9f:65:1f:99:3a:81:63:ab:47:51:52:c1:e1:aa:1a:38:56:
         c5:85:f3:73:05:d1:36:da:06:62:5f:b2:8d:a8:a5:92:2e:52:
         64:96:29:e7:95:cc:a7:19:c8:4a:a9:85:8c:a1:d4:ea:db:82:
         3f:a1:59:6f:be:70:a0:42:9a:db:9c:69:64:b9:17:94:28:09:
         de:75:12:23:ad:30:85:4d:36:bd:6d:4a:6f:85:88:77:17:a2:
         c5:5d:4e:95:9f:2c:63:1a:3e:65:b7:b3:3f:49:2b:48:89:94:
         9e:01:73:a4:5b:04:ad:cd:7d:4a:6c:8d:f3:ba:e3:1d:eb:81:
         15:b8:7f:8b:e7:4e:43:9a:7f:b5:5c:a0:66:b2:ac:34:c5:00:
         98:43:7f:cb:b3:21:cf:0c:67:41:37:28:b3:7e:3b:1d:ac:0c:
         8f:a8:c6:84:b9:46:0e:ac:9c:26:81:51:42:92:49:dd:57:5a:
         03:99:df:a6:ef:d7:e2:9d:ec:f4:5b:de:6c:a5:f6:e8:ed:87:
         fc:0e:04:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:09:56 2026 by rpki-client