Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
File:                     8630DB364752FB672480309F11531C73BFEDD599.mft (raw, json)
Hash identifier:          MWStdAgyChxmYdpUI/noHwjPemAnKfdzu/9zH5A/IBQ=
Subject key identifier:   65:30:7C:0D:81:8C:C1:72:CB:F3:03:32:14:C4:E5:AC:9D:F3:FF:9D
Authority key identifier: 86:30:DB:36:47:52:FB:67:24:80:30:9F:11:53:1C:73:BF:ED:D5:99
Certificate issuer:       /CN=A916FC1D0000/serialNumber=8630DB364752FB672480309F11531C73BFEDD599
Certificate serial:       1E5A83AD7E8B6866E20734CDE95BA8A2E432E02B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
Manifest number:          27
Signing time:             Sun 19 Oct 2025 18:21:28 +0000
Manifest this update:     Sun 19 Oct 2025 18:16:28 +0000
Manifest next update:     Mon 20 Oct 2025 21:23:28 +0000
Files and hashes:         1: AS154185.asa (hash: Vy6BbMuZH/3JZGDxVCcgZTpq0yEG2F+9Krfc1ZawZiA=)
                          2: 34392e3231332e36322e302f32342d3234203d3e20323133363035.roa (hash: O+O3ngvT2eRgjWysCEGH5MTbHUuNdWckcsQv0KzXeTs=)
                          3: 8630DB364752FB672480309F11531C73BFEDD599.crl (hash: UENvRxooBMLKBhCyL2AdjL+MXGVLZmhTmPoQg4bcsOo=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.crl
                          rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 21:23:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5a:83:ad:7e:8b:68:66:e2:07:34:cd:e9:5b:a8:a2:e4:32:e0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FC1D0000, serialNumber=8630DB364752FB672480309F11531C73BFEDD599
        Validity
            Not Before: Oct 19 18:16:28 2025 GMT
            Not After : Oct 20 21:23:28 2025 GMT
        Subject: CN=65307C0D818CC172CBF3033214C4E5AC9DF3FF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:95:e1:12:b1:f4:b9:4e:09:43:00:52:d5:50:
                    df:f4:e0:47:21:f6:e8:a4:a3:6c:bb:3c:2f:f9:7d:
                    8d:f1:28:67:98:ce:ef:1d:9d:a6:de:1d:d2:28:f0:
                    f6:9e:c4:df:36:6e:7f:47:5f:af:03:0a:80:36:3c:
                    e4:f9:dd:02:4f:05:7f:e1:1b:10:66:13:22:d6:0f:
                    01:9f:e3:dc:55:05:39:4c:f5:17:79:31:0a:c8:3e:
                    f8:66:ab:bc:10:93:9b:22:5e:5d:a8:a8:18:c5:0a:
                    59:b4:4d:03:2a:5a:00:22:13:45:fb:d8:ad:f4:b0:
                    3c:a8:4c:9a:4f:bd:9a:62:16:9d:bc:08:de:f6:cc:
                    9f:6e:43:06:74:aa:8d:ad:72:b3:80:2f:71:55:36:
                    e7:65:e6:b2:57:ac:8f:6d:f8:14:e1:c3:df:4c:7d:
                    3a:d8:18:da:0e:e9:1c:54:1f:89:81:c2:67:d6:c7:
                    81:c2:3b:94:c6:96:99:cd:9d:06:60:1b:d3:d3:b6:
                    2f:8f:86:02:91:7b:7d:1c:51:d7:39:f5:fb:67:db:
                    48:01:5a:4c:f0:5f:60:b2:53:ac:17:ad:c8:03:ad:
                    0e:83:c6:3d:b6:06:46:de:e6:2d:c7:e8:7f:38:29:
                    68:76:fc:aa:6b:eb:e3:ff:fa:56:57:1a:b3:13:fc:
                    d6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:30:7C:0D:81:8C:C1:72:CB:F3:03:32:14:C4:E5:AC:9D:F3:FF:9D
            X509v3 Authority Key Identifier:
                keyid:86:30:DB:36:47:52:FB:67:24:80:30:9F:11:53:1C:73:BF:ED:D5:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:bb:8b:b4:db:35:df:6c:93:6a:0f:0e:b5:71:9b:49:db:d7:
         42:a5:85:06:27:40:78:a8:6c:80:be:48:12:9f:53:4c:8d:d9:
         e5:8b:fb:d7:c7:eb:9c:bb:64:b9:6d:b9:78:ba:eb:f1:a0:c2:
         b6:15:fa:11:fe:13:b9:0a:a2:c4:b8:73:47:3e:4c:72:a4:27:
         6d:9c:31:d0:b1:22:2f:67:26:28:0c:42:99:4b:3e:64:68:ca:
         11:bb:f7:35:74:c2:f2:d3:3d:1d:d1:ba:2a:44:2d:c3:2c:49:
         f3:f8:4f:e6:69:85:d3:66:08:7f:19:37:c3:4e:1a:f9:b3:da:
         04:d1:d6:7e:57:e3:e0:4a:77:af:f7:79:a6:bd:ca:6e:d3:7a:
         df:df:5f:48:04:53:a6:76:79:0f:ce:92:a1:1a:49:3b:74:98:
         64:f1:7b:2a:33:ed:1e:fe:69:b1:52:8b:87:b4:c7:50:0a:9b:
         f8:96:5a:bb:52:66:42:49:71:9b:be:bc:dd:6e:91:51:3a:1c:
         57:4f:cc:78:83:22:5d:63:dc:6c:a3:eb:2d:8a:a2:a1:58:c7:
         61:86:34:9e:81:70:97:40:35:31:58:e3:5d:68:67:6c:22:48:
         de:db:34:9c:a4:96:29:b9:07:96:11:c4:56:d5:00:4e:c9:6f:
         99:77:d8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:35 2025 by rpki-client