Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
File:                     B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json)
Hash identifier:          LYJU7TlM+fzDWtzRgHWzknVm9ttFh1OpS/XJEki+mU8=
Subject key identifier:   0A:8A:95:85:90:25:9C:3F:56:8B:19:7C:CF:82:FA:33:13:57:B7:F7
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Certificate issuer:       /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial:       24755DD426CEBB10CAE2AA42010628E929817F11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
Manifest number:          0661
Signing time:             Mon 20 Oct 2025 15:27:08 +0000
Manifest this update:     Mon 20 Oct 2025 15:22:08 +0000
Manifest next update:     Tue 21 Oct 2025 15:49:08 +0000
Files and hashes:         1: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: Y8US0Ocdq6iuACcuu6blfuO/mWF61f4U7kbk1PWrIBw=)
                          2: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=)
                          3: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: aiTwY7exOIWYXIKbSyXz+xb7jVL186qs815q9Rt7CIg=)
                          4: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: R2y3gS2ktsYMItg3APAuFfgub1w3Q348SlpUTBAs2uI=)
                          5: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=)
                          6: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=)
                          7: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=)
                          8: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: ZoLzi5Xd5utb1AI63IXWGz+aVO82OnCDuPInrqLocDM=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 15:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:75:5d:d4:26:ce:bb:10:ca:e2:aa:42:01:06:28:e9:29:81:7f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
        Validity
            Not Before: Oct 20 15:22:08 2025 GMT
            Not After : Oct 21 15:49:08 2025 GMT
        Subject: CN=0A8A958590259C3F568B197CCF82FA331357B7F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:72:58:3d:cc:b3:16:2b:48:8c:59:7f:ad:
                    fa:09:df:c1:bb:5c:e0:d6:a9:f9:90:00:6c:33:f3:
                    4a:20:02:01:89:ed:af:52:52:3c:d4:34:28:a1:f0:
                    c4:de:a3:72:a8:65:95:7a:ba:81:93:a0:9d:60:ab:
                    d7:cb:2a:e3:b3:5e:74:48:81:7a:5d:e7:55:ad:48:
                    79:fa:b7:61:37:cd:bf:ea:0b:d5:d2:dc:99:0c:21:
                    51:1e:7c:7f:d9:c4:a3:ae:23:26:01:44:3c:ca:2e:
                    53:b2:df:2b:21:02:a7:66:f5:29:cc:4b:6f:1b:89:
                    ca:37:3a:bc:ad:a7:38:a0:f3:76:73:e4:d1:88:0f:
                    28:c3:00:51:20:e9:7a:88:fb:d9:f3:85:75:cb:3a:
                    15:de:ae:a5:e6:4a:58:7d:22:29:ec:fa:31:95:e0:
                    2d:09:79:58:64:d2:06:d8:25:64:eb:04:bc:91:a8:
                    57:90:a8:74:60:39:02:be:e9:75:62:24:ec:a7:f0:
                    43:75:d4:d9:c8:53:7c:ff:bb:fe:ad:4a:31:56:e4:
                    fd:cb:d4:1e:a0:9c:cb:ea:46:18:c1:df:64:58:49:
                    5d:2a:8f:68:99:f7:2f:59:50:c5:48:61:b9:10:a1:
                    40:d1:0a:2c:f3:95:6b:13:82:21:df:7f:c2:29:32:
                    f5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8A:95:85:90:25:9C:3F:56:8B:19:7C:CF:82:FA:33:13:57:B7:F7
            X509v3 Authority Key Identifier:
                keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0a:37:51:bd:2c:43:11:39:7c:01:86:c0:53:c2:0a:55:10:
         5a:53:78:65:af:f2:d3:e7:80:ea:be:35:c4:aa:2d:6e:c5:2b:
         18:c7:d2:8c:c0:dc:80:58:00:2e:bd:30:44:9b:65:07:86:2c:
         b2:81:a3:68:f4:82:90:ef:28:0d:d3:52:18:45:80:01:53:90:
         b9:91:0e:1e:aa:be:f6:ff:6c:36:ce:8c:ef:b7:f5:41:96:18:
         00:be:63:2c:07:4c:fe:7d:4c:9d:dd:b1:59:58:e9:7c:2e:a0:
         6d:ee:bc:6b:e1:54:a0:19:20:65:33:a8:86:1f:4d:13:b3:0b:
         fc:59:6b:ab:ff:48:15:8e:b8:b0:f0:e0:5e:b7:12:ae:b5:74:
         58:d6:fb:fb:01:17:13:0c:ab:a6:e1:f8:66:5a:55:3c:56:80:
         fd:1c:04:fc:06:6c:03:f2:6c:2a:88:ff:b6:44:7c:d4:9d:42:
         3c:39:c2:65:56:3e:69:a2:c0:b0:00:0f:e5:93:b7:7f:d2:24:
         82:a9:dd:69:22:13:6c:fb:bf:35:83:3e:73:3d:8c:9d:c7:10:
         c5:28:5a:07:25:25:80:90:d4:fd:34:59:5a:80:41:36:8f:28:
         84:df:5f:d6:2a:7d:e9:7d:04:46:19:f7:ab:14:da:7c:db:49:
         50:fb:bd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:45:02 2025 by rpki-client