Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
File:                     B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json)
Hash identifier:          56GJr5HdC5mlZU1AjaJCLPDjxuCa8+gXRI0B7DdnEyg=
Subject key identifier:   50:85:04:6C:73:2C:33:5A:81:74:72:8E:59:20:1D:BE:39:E1:60:0C
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Certificate issuer:       /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial:       25A52891BC23513BCB6373491CBE4397AF8D0A7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
Manifest number:          0833
Signing time:             Sat 26 Sep 2026 20:51:11 +0000
Manifest this update:     Sat 26 Sep 2026 20:46:11 +0000
Manifest next update:     Sun 27 Sep 2026 22:28:11 +0000
Files and hashes:         1: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: oMfTdg/Rj2XRGxmXU1sElHSlgd2vFn+T0PIYfvXEBg0=)
                          2: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: 8+0jL3+NbfciLcZgupy5BXboLJIz0oZxaOC4vwv27Cg=)
                          3: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: 0SHIwVIwVyWAhBgnbacpjgq46FIsXuIaoz9VKCP/7mY=)
                          4: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: /tPPfFvPJE3axlLl1Fjq/BkPqBuOvwfzjmPSaqQFGVg=)
                          5: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: M/e9JYxNlAFFvx5pruu6e138GeVq2fFfQJvX9da0dDs=)
                          6: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: Sylf+6F0rs2iWRvKNrVjclZWIfF/tiqHfdrXOW0RiPo=)
                          7: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: DAD4f2kau77ihU2Wd7ODGZ3WqGMm4CzqF7JYI6sBDJs=)
                          8: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: flJTPZ46b4mt9qzWDdfIDdppJpcYKfDqIn9TjegEbok=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a5:28:91:bc:23:51:3b:cb:63:73:49:1c:be:43:97:af:8d:0a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
        Validity
            Not Before: Sep 26 20:46:11 2026 GMT
            Not After : Sep 27 22:28:11 2026 GMT
        Subject: CN=5085046C732C335A8174728E59201DBE39E1600C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:60:38:25:34:2d:44:b1:8a:d7:a1:16:92:
                    ac:26:4f:db:a5:c5:13:74:d5:bc:0a:d7:60:7f:f8:
                    0b:f9:a8:45:22:45:0f:7e:6b:69:af:a5:06:e5:d4:
                    f4:77:a2:3d:bf:9c:d7:04:20:aa:cd:69:de:4c:f0:
                    db:d7:12:70:a8:19:90:c9:bf:a5:34:3d:55:65:bf:
                    0b:4d:05:a7:e2:8f:80:21:e7:94:a4:db:a4:a0:50:
                    0c:1a:aa:71:3a:97:7b:35:1c:14:4f:62:17:46:75:
                    0e:34:0b:0e:91:57:48:dd:c3:eb:7a:eb:0d:27:2f:
                    79:c8:b0:3d:72:16:7d:6c:46:c2:da:5a:ea:b0:3e:
                    07:39:ab:ed:d0:ed:b7:4a:e5:2b:6d:f5:ab:ef:37:
                    c6:7d:c2:f6:70:e2:da:63:ef:46:5b:60:13:b5:a4:
                    a4:85:c5:2c:bf:98:ec:60:84:fa:5c:fc:b9:c6:3f:
                    76:50:a1:9e:4b:03:12:14:d6:33:22:d1:51:eb:c0:
                    b2:fe:e4:85:68:5b:ce:ad:71:04:29:f3:bd:f3:0d:
                    23:73:8a:42:04:bf:c7:20:92:31:2e:b8:34:5e:a9:
                    33:8b:b5:e9:86:3f:01:91:99:f4:fd:35:cc:de:93:
                    da:2a:92:5d:d9:47:59:19:11:0c:0b:27:a4:df:eb:
                    9b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:85:04:6C:73:2C:33:5A:81:74:72:8E:59:20:1D:BE:39:E1:60:0C
            X509v3 Authority Key Identifier:
                keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:68:fc:26:ec:50:3d:88:24:7f:e8:a7:07:68:69:43:61:8e:
         c1:ed:5a:2b:8a:1b:8b:06:44:5c:ab:17:d6:dd:58:1d:bd:d3:
         c7:ad:42:74:95:77:5a:f0:41:6d:ec:5e:e1:63:aa:86:03:93:
         ab:0e:4f:21:74:1b:ed:65:bc:bd:04:c4:3f:1c:d0:a3:67:fb:
         be:f5:d3:4e:49:b5:a3:63:31:a0:0d:08:72:96:87:2a:4e:fb:
         49:f8:e0:81:00:d7:dc:4f:ed:8b:f9:6c:18:49:51:0f:f5:47:
         8a:fc:dc:03:78:77:ab:9a:27:dd:71:88:04:09:7d:b7:aa:fd:
         4d:e7:d5:82:b9:b4:5b:3c:dd:fe:cb:77:3b:32:4c:5e:fa:90:
         a9:12:76:9f:4f:87:d6:1e:58:df:13:e1:93:4d:fe:62:b8:7e:
         c8:c6:1f:e1:17:54:16:a3:3a:6a:d2:55:fb:6e:d6:91:5d:46:
         57:d8:b8:84:4e:be:ee:e4:17:7c:d0:bb:65:f8:63:61:59:ba:
         7c:31:03:dc:e8:41:fe:c6:3f:76:ac:34:02:84:49:0f:00:23:
         c3:7b:3f:ff:20:58:28:be:5f:9c:94:fc:54:e7:f8:b5:02:49:
         3e:c6:6f:2b:5f:f4:20:ce:d1:4b:28:f1:1a:69:79:bf:6e:96:
         79:76:03:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:09:51 2026 by rpki-client