Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File:                     30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier:          64KwKPFE+ZPYvv0wSRD5PpVuihTk582z8WbBZeU8oI0=
Subject key identifier:   B7:28:4E:56:35:8B:74:56:84:18:5B:10:20:AA:91:C1:A0:70:BF:F7
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       742A6129FB081023EDF5E6AC3355D20B055E2FB6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number:          07E2
Signing time:             Thu 23 Jul 2026 20:09:02 +0000
Manifest this update:     Thu 23 Jul 2026 20:04:02 +0000
Manifest next update:     Fri 24 Jul 2026 22:38:02 +0000
Files and hashes:         1: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: qktH9CmoSMi4zY7SUgxfdRgLAlOa3yTYkuOYxTloRPw=)
                          2: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: 2guqc3il/Df3q/hiPOyhywzhF3bNWW294jv3FUSAbQM=)
                          3: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: 4RyVk+rKIZxC/RvQm0BzjghfuRZomGSikf/LFvPs0Os=)
                          4: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: 7xp6Qecc5/OOhL0p9AX/cfT6YnZhKTIxBQ5OCdlFvaU=)
                          5: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: 4M3Gj7VtwtPss7dq7bEuNaNtbKXrLCHIYjSN8LGXjK0=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 22:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2a:61:29:fb:08:10:23:ed:f5:e6:ac:33:55:d2:0b:05:5e:2f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: Jul 23 20:04:02 2026 GMT
            Not After : Jul 24 22:38:02 2026 GMT
        Subject: CN=B7284E56358B745684185B1020AA91C1A070BFF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:35:10:0d:b6:60:84:1a:66:9f:83:e0:1f:
                    50:8d:85:cb:e7:51:6e:fb:b7:d1:92:55:4e:12:0f:
                    e8:6d:cf:cd:45:17:a5:13:b4:6e:bd:da:ad:5a:4e:
                    e8:83:bf:0a:f8:e8:fa:43:c3:a1:fb:a0:5e:10:bb:
                    37:80:ca:d5:a7:40:c4:9c:43:f3:62:df:eb:d3:57:
                    10:72:35:a8:50:9c:b5:7a:0f:88:75:2d:0e:8c:55:
                    67:ed:c3:09:b6:c8:53:1e:5c:c6:ec:6c:55:c7:42:
                    d3:f6:fa:33:fc:6e:87:7a:4b:36:f7:dc:59:ff:43:
                    ab:07:33:ea:3a:2c:ae:0a:bb:68:07:a9:ad:1c:71:
                    e1:2c:be:9c:09:fa:5b:8d:cd:17:37:7e:d6:6d:67:
                    b5:7f:a6:ca:da:59:91:0c:19:db:3d:11:f4:d7:74:
                    da:cf:a8:cb:82:06:eb:df:57:6b:75:44:f4:b9:96:
                    09:96:ea:b7:36:db:ca:d4:88:40:4f:7a:f4:8d:8b:
                    ec:16:5a:40:6e:32:c0:bc:0b:fb:d8:c7:32:89:65:
                    11:c1:18:46:71:58:aa:de:64:87:dd:d8:c0:36:de:
                    ab:0a:07:53:d1:93:29:08:57:6a:ab:7b:52:3c:ac:
                    1a:04:d6:5b:c5:4b:31:d6:07:25:7a:a0:66:4e:b1:
                    64:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:28:4E:56:35:8B:74:56:84:18:5B:10:20:AA:91:C1:A0:70:BF:F7
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a0:d7:75:f3:f6:ad:2e:54:e2:a1:30:21:a9:33:12:78:72:
         50:b7:04:b6:40:67:84:89:11:a0:66:09:ed:d5:f2:2c:1f:61:
         ce:13:99:64:00:85:29:f9:5d:b2:38:c7:f1:14:49:1f:24:6d:
         41:f6:27:e1:e4:40:ec:48:a0:fc:4f:7f:ff:8e:58:78:e9:48:
         b1:85:67:7f:84:49:ee:c4:91:61:1f:bf:a0:2c:4d:bd:df:9b:
         20:17:91:9d:73:33:9d:39:38:62:fd:0e:81:a6:72:39:27:8f:
         1d:a3:a6:5a:63:8d:72:d3:74:8e:8b:40:46:52:7f:c4:87:eb:
         e6:68:88:a5:d3:b8:98:5f:11:1f:ca:68:a2:8d:cd:73:e2:1a:
         8a:8c:cf:84:b3:5d:30:58:3b:87:51:be:4c:ea:6f:26:71:74:
         61:36:cc:64:ff:c0:ec:a4:84:79:db:50:c4:4a:9c:cf:2a:53:
         8e:fd:7a:d0:c3:ab:65:e3:a4:2a:fd:60:9a:39:0b:ea:fb:05:
         44:ce:f8:7d:1f:2d:65:da:6d:fe:ba:2f:25:af:90:76:ac:96:
         28:eb:aa:0d:ba:5f:93:c9:d9:55:ba:c9:01:4d:d1:80:69:ae:
         4a:98:67:74:3f:fb:5d:96:70:53:87:b4:9c:7c:d2:95:e7:81:
         31:c2:08:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:14:57 2026 by rpki-client