Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
File:                     17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json)
Hash identifier:          0OCHfolEZCv3mKGrFRxdfPwbKuSc4AeChSQBkGSPuRU=
Subject key identifier:   05:C0:B0:7A:CE:CC:6B:1E:35:DE:9E:A4:ED:19:FA:5E:86:8B:CC:8B
Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
Certificate issuer:       /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Certificate serial:       6BE6A92F4009E36BCD77C02CBAA3E6B089D2744E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
Manifest number:          0202
Signing time:             Sun 11 Oct 2026 10:29:10 +0000
Manifest this update:     Sun 11 Oct 2026 10:24:10 +0000
Manifest next update:     Mon 12 Oct 2026 13:08:10 +0000
Files and hashes:         1: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: 9FXIqtvqlI1b6k7H88FgG5bPVoeiPlgW3c8/gsoxMSo=)
                          2: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: sR4NQBf2alvho97E5d4Q8eIdgA31uaUvmHMPWAb5pa8=)
                          3: AS9833.asa (hash: eF+RoiYlyVewG5EIfcht1IcC29IFU+2ytLm0lOE12DA=)
                          4: 323030313a6466343a353134633a3a2f34362d3436203d3e20313533333436.roa (hash: cfW8/BpGR5YLDJqf4B6srqIWH4dAdAcYNWndMbPZ4n4=)
                          5: AS153346.asa (hash: rAU+nhqV6DoL50iYgf+3duDnIh+fo6Vc/7vgCwv8AHo=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
                          rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 13:08:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e6:a9:2f:40:09:e3:6b:cd:77:c0:2c:ba:a3:e6:b0:89:d2:74:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
        Validity
            Not Before: Oct 11 10:24:10 2026 GMT
            Not After : Oct 12 13:08:10 2026 GMT
        Subject: CN=05C0B07ACECC6B1E35DE9EA4ED19FA5E868BCC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:58:1f:37:32:49:5a:23:d6:04:7c:3c:fa:
                    be:07:d2:f0:ff:e6:97:bf:cb:ab:7a:43:29:57:40:
                    fd:0e:0c:f0:35:2c:0c:11:41:79:1d:93:38:b6:9e:
                    2d:04:24:7e:c5:ea:69:af:6f:97:7e:ee:53:d3:1c:
                    6b:e2:0f:b0:f9:d5:fe:e4:c4:39:40:90:ba:4d:2a:
                    df:88:a2:da:f1:ff:33:01:4c:e3:1b:4d:ed:e1:6a:
                    fc:42:7f:38:d4:1c:e5:b0:60:a7:98:bb:bd:f0:4e:
                    d0:c7:8f:02:8a:9d:fc:87:45:93:c9:55:67:36:af:
                    91:b9:ed:40:23:c3:63:ed:ea:dd:b5:cb:6c:98:88:
                    ca:e4:a7:ab:09:5e:de:05:3e:7f:04:c9:95:69:91:
                    ba:6e:0c:5f:48:3e:f7:b6:d8:08:25:94:6a:05:15:
                    dd:1c:29:92:e5:00:e1:20:70:6d:f1:46:31:71:64:
                    af:5c:33:a1:6b:ec:fb:05:7d:dc:41:be:25:93:95:
                    ed:f7:df:e4:49:7d:88:28:37:11:db:5e:7f:94:68:
                    b9:56:4d:3e:21:37:e0:a3:16:aa:11:19:15:69:10:
                    e9:5d:0f:af:71:83:4b:02:40:41:0c:19:68:f7:1f:
                    04:a5:e4:06:93:25:fd:b2:f1:b7:65:d5:4c:17:c0:
                    cf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C0:B0:7A:CE:CC:6B:1E:35:DE:9E:A4:ED:19:FA:5E:86:8B:CC:8B
            X509v3 Authority Key Identifier:
                keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:01:48:06:20:3c:2e:d4:99:69:d5:fb:f7:17:30:0b:7b:a5:
         7e:4a:b8:69:db:1e:a8:1b:36:55:b2:23:e2:70:c8:c9:b0:18:
         97:7f:8d:d6:f1:e1:fd:cf:37:36:8f:f9:47:31:0c:97:1f:86:
         fc:fd:be:19:ab:26:bf:86:23:ff:c5:64:82:bd:de:6d:08:6f:
         4d:a8:31:04:12:94:0e:00:ce:1b:cf:f0:6d:7a:be:e7:34:ea:
         c1:70:fb:3e:9b:98:28:ac:33:c0:27:9e:23:21:d0:c4:e1:60:
         cb:d3:c7:3c:34:71:0b:39:3f:2f:0c:08:9b:d5:cb:98:2e:85:
         c1:1e:44:1b:83:2e:35:3f:85:f1:c5:5c:bf:21:3d:ae:45:ca:
         3b:d7:5d:db:d1:11:a9:60:82:45:3d:9b:b1:b4:83:3c:37:aa:
         58:0a:f0:c9:2e:b8:17:39:1c:ca:19:98:a5:13:f1:05:a3:4c:
         aa:b4:d4:16:bd:8c:d7:5d:d2:47:27:e0:05:ed:37:fd:b6:cf:
         08:01:09:83:f1:07:4d:ed:84:3e:4d:9d:e7:74:0e:09:16:16:
         02:09:73:14:dd:2b:5b:24:1f:5d:dc:17:89:fe:48:72:f9:a8:
         69:7d:16:7b:eb:4e:1c:d8:65:fb:1c:c6:a5:60:ee:73:6b:7c:
         d3:bc:f5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:48:58 2026 by rpki-client