Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
File:                     B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json)
Hash identifier:          X6er8HvR3KM4mkBOfjLxB6WMTaFZj4yga/kv5uJrMFo=
Subject key identifier:   FB:2B:B4:10:37:84:7D:97:91:AF:7A:83:DB:37:AB:28:48:2D:F6:AD
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       72E7A3284DA97E4D57793ED3D4905587F81E653F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
Manifest number:          07DF
Signing time:             Thu 23 Jul 2026 16:34:02 +0000
Manifest this update:     Thu 23 Jul 2026 16:29:02 +0000
Manifest next update:     Fri 24 Jul 2026 20:11:02 +0000
Files and hashes:         1: 3230332e372e3139372e302f32342d3234203d3e2037353436.roa (hash: 63Xbycua4Mi8GYHYLibG9AGPdZZeGwzqJEcmfJT9ybE=)
                          2: 3230332e372e3139362e302f32332d3233203d3e20313334303930.roa (hash: qaOra+xDLyRhqdf//j4nvjjhMuhgOEsIZ5B8fiKTKxU=)
                          3: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: Fe1UVCyCNYuLeK/2YClSqpX8AFGVDlpgAyiB6HZMqgE=)
                          4: 3230332e372e3139362e302f32342d3234203d3e20313334303930.roa (hash: /LpdqHnCJJlwCcOi3CqIbxGlAHdFFT95xe2Q0VqmA3E=)
                          5: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ciSHjom7uhsnTUry3euH0kEf+ood81S/2eHdQ8CkHns=)
                          6: 3230332e372e3139372e302f32342d3234203d3e20313334303930.roa (hash: yVZN8uUTOOhqgDafcuJzyObo6OYnTkFGrZV6T9wM9pM=)
                          7: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: fkFkv4x2RJF8ikeWNYi3IpWqQO/j13TZnucB+1TubjI=)
                          8: 3230332e372e3139372e302f32342d3234203d3e2039343439.roa (hash: vAwqdvaW6yc2XtCDVw1UZNeo44zGvcl9i5o3oiFTQWo=)
                          9: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: /tu1GLPgmx3L59lA9DS67uY00dm6i5Wm3Y/TLJzZPPI=)
                          10: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: Wnz7iyh9clZuDDpLGVNNBZJ0JgoGPtAKZ8B2Ynr6Xgc=)
                          11: 3230332e372e3139362e302f32342d3234203d3e2037353436.roa (hash: V95Z++X1BN0ujeiUpldiRsUT1wl/Vx8TaPKCLXBi9zI=)
                          12: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: TyUQXYW/Z9X7LSxau+0o+4cjIXJiQzcIYmIWKatiFMc=)
                          13: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: K9XbIA+G+QXEuhfNb82jXc0qO9L/fdHPovzTopxjF1k=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 20:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e7:a3:28:4d:a9:7e:4d:57:79:3e:d3:d4:90:55:87:f8:1e:65:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: Jul 23 16:29:02 2026 GMT
            Not After : Jul 24 20:11:02 2026 GMT
        Subject: CN=FB2BB41037847D9791AF7A83DB37AB28482DF6AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4a:b4:70:fb:94:4e:c0:dc:2f:cf:41:5d:11:
                    5a:89:7b:17:b6:42:6d:3e:9d:7a:69:56:ba:4c:da:
                    bc:27:66:5e:2e:87:f9:32:9f:88:94:42:47:e2:23:
                    6b:12:37:3c:c0:53:ba:d4:96:dc:fd:85:c5:bd:e3:
                    12:bb:48:4c:84:cf:35:b7:42:85:92:28:13:1c:46:
                    78:49:9f:d6:12:cc:5c:a2:03:9d:54:5e:26:c7:13:
                    8a:5a:b1:3f:f5:52:d7:4e:bc:1a:ed:4c:e9:7b:dc:
                    fb:7f:7f:c2:b2:a2:58:18:13:d7:ed:d8:08:4d:26:
                    6a:5e:20:08:ff:43:16:d4:ef:33:1c:28:5a:06:c5:
                    99:64:b4:74:6e:a3:34:bc:0d:07:72:b5:a8:08:3c:
                    47:62:de:f2:9a:ce:1d:55:f3:75:db:c2:d6:0c:b5:
                    5b:0f:b8:5b:a7:05:ec:bb:04:2e:3c:37:2e:2f:d8:
                    5f:9e:04:51:96:06:e4:87:99:de:df:54:c9:3f:73:
                    31:c3:67:9e:82:d5:1c:75:bd:2a:12:68:64:78:d7:
                    57:ce:4e:6a:34:b8:ed:62:eb:d3:1b:0f:9e:95:30:
                    e2:e6:a5:1d:56:14:50:af:39:ce:c1:07:c8:63:29:
                    55:34:f4:c7:9f:29:78:74:b3:85:93:f1:59:44:85:
                    7b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2B:B4:10:37:84:7D:97:91:AF:7A:83:DB:37:AB:28:48:2D:F6:AD
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:39:92:97:7e:95:8f:da:19:16:41:75:1a:52:7a:6e:76:ef:
         ef:4b:29:32:c6:9e:47:68:39:0d:64:d1:a8:dd:56:ce:c6:b2:
         19:95:91:fb:a7:59:34:39:1e:81:25:26:f1:b2:2e:12:25:a4:
         51:d2:f6:37:01:7f:72:f4:68:a4:c7:2d:ed:87:5c:83:f4:b2:
         2c:12:3a:34:b5:86:bd:71:65:75:ff:8f:0f:ca:9d:ae:88:d5:
         47:e4:34:d8:98:91:79:67:76:58:13:2a:8a:b3:8a:f4:07:e5:
         a4:1a:78:b7:46:c6:42:e3:df:90:0b:bb:ed:e1:b3:81:50:10:
         85:42:69:1d:3d:9f:91:d0:bc:49:96:0d:98:f0:53:72:62:1d:
         4f:36:44:30:14:d1:6e:aa:6b:2e:5d:ae:f3:f1:f9:12:2d:ab:
         1e:d0:7e:39:d7:2c:5e:df:14:0d:94:40:7d:5e:06:76:51:49:
         b1:8c:33:94:e1:09:87:da:4b:fa:c0:4a:fd:71:13:2e:22:a2:
         fb:d0:b1:5e:a1:d7:ff:c2:6f:05:86:38:77:76:d2:e6:a9:4f:
         11:12:0b:e2:a3:43:cd:6d:3a:cd:6c:b9:fc:0f:e9:24:07:a8:
         b4:9c:ec:21:4b:ec:ae:34:a1:87:71:c1:e4:38:98:e3:f1:ad:
         b9:96:37:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:39 2026 by rpki-client