Manifest

$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
File:                     C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json)
Hash identifier:          iNgCLp20oILoEQQIH1XJnwJ1jqa/GOvn2MhZe3fvEPE=
Subject key identifier:   AC:D8:A8:97:20:29:B2:F2:39:6F:1A:07:07:78:EA:6A:A1:4D:30:11
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Certificate issuer:       /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial:       4E5293304F9F105642966DE2155094F1FAED44B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access:      rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
Manifest number:          0942
Signing time:             Wed 22 Jul 2026 06:25:08 +0000
Manifest this update:     Wed 22 Jul 2026 06:20:08 +0000
Manifest next update:     Thu 23 Jul 2026 07:02:08 +0000
Files and hashes:         1: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: Kd5d5D6As0bcRgXGfiEQ86zbyYy89MgFbc7n+nAmNF8=)
                          2: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (hash: q9QOFEKnYwQGXZMslwj1RepXzzxQcEglsKOUhEPQ968=)
                          3: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: PKxkb0fFJL2px6Zd+2cVfkJOkPVEixg1w/G9KFiqtyE=)
                          4: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: gjxetdU1gVkaep7WfcAWKMpD910g/DFpEB00M3o4vak=)
                          5: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: pXU5vn2wZaGhdkg63jo+HVbWd8AAV6cZg7n1bhb4dAs=)
                          6: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: 1GmPi8EbgESKAF4oC0096QwxrkSmckvtII3xczGV+c8=)
                          7: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: L5nXEZk8u99uDUdvi4n/OSkLKtMNAHr8KHN8EzMXIG8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:52:93:30:4f:9f:10:56:42:96:6d:e2:15:50:94:f1:fa:ed:44:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
        Validity
            Not Before: Jul 22 06:20:08 2026 GMT
            Not After : Jul 23 07:02:08 2026 GMT
        Subject: CN=ACD8A8972029B2F2396F1A070778EA6AA14D3011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bb:7c:00:d8:c3:ee:a0:db:87:af:6e:0e:82:
                    c6:35:a5:9c:16:2d:9d:f4:81:ce:b4:4e:ba:73:be:
                    ee:65:85:f5:1e:90:58:a3:99:93:fd:dd:33:ec:a7:
                    5c:ca:1e:b3:a9:1b:7a:a2:7e:1d:b9:4a:b5:0f:3a:
                    9b:7d:34:9f:17:f0:76:d6:cd:ee:28:2c:a6:2e:5b:
                    7a:db:1e:2d:38:e1:8a:8d:cf:91:88:25:89:f6:24:
                    e1:98:9c:db:0b:15:0e:79:b8:87:a3:ea:ac:e5:c3:
                    00:33:9a:2d:26:44:e5:b6:81:43:a5:8c:fc:5a:61:
                    3e:80:ac:e5:de:24:23:e0:38:fe:8e:61:0b:33:16:
                    d4:e4:cc:e3:c1:a1:ca:02:f7:e6:2f:c0:f6:3d:2d:
                    36:3a:f8:69:0c:ad:b1:83:2b:29:8e:7e:11:e2:ee:
                    8c:38:ed:3f:70:22:0b:d8:51:96:15:90:cf:bc:f5:
                    c8:7b:f5:ce:32:73:4f:22:de:f9:c4:86:59:5c:4e:
                    8e:e2:96:2d:43:37:14:03:29:c9:1a:9d:62:15:48:
                    39:e3:32:1b:08:bc:73:71:ce:c9:fc:07:f2:07:33:
                    7a:30:32:cb:d5:95:b9:17:b1:82:9f:c8:d8:4c:79:
                    40:b7:1f:dc:46:00:02:39:02:75:9d:9e:d7:f6:7b:
                    e3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D8:A8:97:20:29:B2:F2:39:6F:1A:07:07:78:EA:6A:A1:4D:30:11
            X509v3 Authority Key Identifier:
                keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c9:a1:b1:ee:04:f8:a1:f7:e4:99:4b:6b:86:04:b4:0f:a4:
         6c:a0:13:8a:f6:49:3a:f7:fc:b3:f8:82:99:53:1b:3b:78:f3:
         66:d7:9b:1b:b5:14:79:21:8d:36:b7:56:52:e1:db:4a:2a:ee:
         ef:82:fc:ae:e3:ba:bd:77:04:f8:99:ff:78:8b:c6:88:4c:9f:
         fa:58:62:8e:66:a5:b0:87:ad:84:60:d6:d1:93:aa:fb:81:de:
         b8:4f:22:25:75:17:49:e0:76:8d:ab:cd:54:ac:7a:c0:08:32:
         81:c1:60:ff:d5:f3:da:df:fe:5d:21:eb:64:5a:37:8e:fc:92:
         b8:ef:a4:2b:ec:23:fe:55:b8:2b:c9:7c:92:28:0a:06:4a:e1:
         95:d1:5b:86:3e:5e:48:d7:18:90:b2:95:1f:e2:56:fc:39:06:
         60:16:3c:f8:6e:be:58:63:ab:44:ac:70:b3:60:84:89:a7:11:
         a8:20:c3:8c:e6:26:93:35:ba:51:4c:7c:73:d6:bc:ee:db:99:
         c4:e9:48:72:3d:06:29:89:50:43:b4:da:75:1f:88:6e:77:c2:
         ea:a9:32:8f:c8:0b:a0:59:88:c8:d8:a1:d6:3d:b5:4c:0c:41:
         47:2a:69:ba:0b:14:8a:6f:e1:db:e5:b9:eb:60:8d:5d:07:9b:
         31:b1:cf:66
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUTlKTME+fEFZClm3iFVCU8frtRLgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3
REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI2MDcyMjA2MjAwOFoX
DTI2MDcyMzA3MDIwOFowMzExMC8GA1UEAxMoQUNEOEE4OTcyMDI5QjJGMjM5NkYx
QTA3MDc3OEVBNkFBMTREMzAxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOu7fADYw+6g24evbg6CxjWlnBYtnfSBzrROunO+7mWF9R6QWKOZk/3dM+yn
XMoes6kbeqJ+HblKtQ86m300nxfwdtbN7igspi5betseLTjhio3PkYglifYk4Zic
2wsVDnm4h6PqrOXDADOaLSZE5baBQ6WM/FphPoCs5d4kI+A4/o5hCzMW1OTM48Gh
ygL35i/A9j0tNjr4aQytsYMrKY5+EeLujDjtP3AiC9hRlhWQz7z1yHv1zjJzTyLe
+cSGWVxOjuKWLUM3FAMpyRqdYhVIOeMyGwi8c3HOyfwH8gczejAyy9WVuRexgp/I
2Ex5QLcf3EYAAjkCdZ2e1/Z74/sCAwEAAaOCAhEwggINMB0GA1UdDgQWBBSs2KiX
ICmy8jlvGgcHeOpqoU0wETAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM
4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp
LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF
MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw
MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv
QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL
enctdE1MUmQyRE9FLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz
eW5jOi8vcnBraS5yYW5kLmFwbmljLm5ldC9yZXBvL0E5MTg3MkVEMDAwMS8wL0Mw
OTA2QTE5QTdERTM0OUJGQTJCMzJCM0MzRUI0QzJEMTc3NjBDRTEubWZ0MBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw
BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCbyaGx7gT4offkmUtrhgS0D6RsoBOK9kk69/yz+IKZUxs7ePNm15sbtRR5IY02
t1ZS4dtKKu7vgvyu47q9dwT4mf94i8aITJ/6WGKOZqWwh62EYNbRk6r7gd64TyIl
dRdJ4HaNq81UrHrACDKBwWD/1fPa3/5dIetkWjeO/JK476Qr7CP+VbgryXySKAoG
SuGV0VuGPl5I1xiQspUf4lb8OQZgFjz4br5YY6tErHCzYISJpxGoIMOM5iaTNbpR
THxz1rzu25nE6UhyPQYpiVBDtNp1H4hud8LqqTKPyAugWYjI2KHWPbVMDEFHKmm6
CxSKb+Hb5bnrYI1dB5sxsc9m
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:11 2026 by rpki-client