Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
File:                     4B1987D5160068092602529871C93EA320045A75.mft (raw, json)
Hash identifier:          kM50KDPy+g0H9Fi322SbgeIfJ4o03Bhx0P3TiX94bxI=
Subject key identifier:   6F:A7:13:F0:4D:7F:00:A9:AB:FE:AB:8D:06:4F:0B:7D:9B:A7:B2:7C
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Certificate issuer:       /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial:       120B09E46F809DB5ABD52CC6DF43E5A443FD2716
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
Manifest number:          0503
Signing time:             Sat 03 Oct 2026 22:32:03 +0000
Manifest this update:     Sat 03 Oct 2026 22:27:03 +0000
Manifest next update:     Sun 04 Oct 2026 22:40:03 +0000
Files and hashes:         1: 4B1987D5160068092602529871C93EA320045A75.crl (hash: U3JMwo+/2FO0ZHmXLmgiO0fnZaRM/i44d7Otxmeg/p8=)
                          2: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=)
                          3: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: Pl9O4/hrvE6XGRQRdZrkpmgI5or6MNwU7UHHLgiYTIk=)
                          4: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 22:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0b:09:e4:6f:80:9d:b5:ab:d5:2c:c6:df:43:e5:a4:43:fd:27:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75
        Validity
            Not Before: Oct  3 22:27:03 2026 GMT
            Not After : Oct  4 22:40:03 2026 GMT
        Subject: CN=6FA713F04D7F00A9ABFEAB8D064F0B7D9BA7B27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:d7:34:53:fd:3e:6c:39:22:56:58:a1:65:
                    c6:02:75:2b:c5:99:24:e4:fc:9e:06:b4:e7:d2:c8:
                    8d:dd:a7:6a:44:2e:3f:8d:14:49:23:bb:b6:f6:cf:
                    d3:c0:ba:b9:67:0f:92:ef:7f:16:41:d6:cf:86:ab:
                    66:7b:68:0a:ab:ad:f1:9c:30:ad:27:a3:df:1f:be:
                    01:57:3f:83:fb:81:20:7c:46:08:cc:da:ea:d0:3b:
                    d5:d0:b3:9b:9f:58:38:a3:f6:14:08:c3:20:f2:3a:
                    d9:90:38:14:d7:fd:b7:0d:f6:54:f9:ce:2e:23:f7:
                    7a:48:2f:0c:d6:3d:f0:72:95:b2:f0:8c:8f:8c:42:
                    5f:6d:30:07:90:72:96:c7:5f:e3:30:00:9a:06:8f:
                    26:3f:3d:e1:26:8d:ab:33:3e:4a:7b:42:70:43:13:
                    f5:d1:9f:7e:21:93:23:00:8f:17:06:6f:ee:47:b6:
                    76:a4:ee:40:24:44:4b:ea:8d:0c:49:fe:e7:79:41:
                    4d:3d:f3:21:54:5f:fa:bd:20:10:c2:7d:ff:9f:d5:
                    0f:81:fe:87:a2:22:85:68:6a:ed:f7:c1:2e:43:4a:
                    a9:40:bd:96:86:6b:79:20:31:f6:e0:7e:55:af:e7:
                    ed:c5:a8:7d:9d:d1:d2:ba:35:10:46:53:00:e5:c8:
                    3d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A7:13:F0:4D:7F:00:A9:AB:FE:AB:8D:06:4F:0B:7D:9B:A7:B2:7C
            X509v3 Authority Key Identifier:
                keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:1b:58:79:c7:22:60:2a:ab:0a:1b:4c:04:b5:25:a8:71:6c:
         93:64:be:8f:6d:c3:38:f4:4b:4d:4a:74:fa:0b:02:87:0d:24:
         09:45:d7:09:88:99:3d:09:86:e0:81:3b:1e:8f:36:11:7c:b7:
         7f:a8:45:a9:7b:7b:a8:23:5c:76:a5:10:35:f5:2c:cb:fd:ad:
         92:2e:ff:84:ad:80:8d:c0:57:a5:37:69:94:7b:14:ad:87:32:
         b6:cb:4c:16:57:a7:94:00:20:2e:ec:46:69:80:04:c4:7e:ff:
         a9:8d:0a:ed:bb:03:6a:da:8c:a3:3d:e6:41:4a:87:74:0e:2d:
         3f:48:cb:0e:b8:e6:7a:ec:76:bf:0b:c8:bd:d8:5d:42:ab:fe:
         e7:72:21:47:35:75:70:6a:48:e9:e1:9e:ac:12:92:c9:f2:dd:
         69:1c:b3:9a:4f:4c:bc:40:aa:61:f2:d2:7b:be:96:ad:8b:62:
         88:8c:05:69:ca:a2:9e:64:30:0e:a6:e8:0e:fd:77:5b:a2:cf:
         75:7e:28:67:a9:76:c1:7b:27:68:9c:86:b5:7e:0c:e8:48:5c:
         e5:6f:ce:c1:57:9e:20:e0:84:dd:2c:ae:4b:e9:f5:f1:af:dd:
         9d:d7:9f:c7:e8:e3:7c:14:4c:73:0d:fd:e1:ae:bb:69:ac:d9:
         c3:19:fa:03
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUEgsJ5G+AnbWr1SzG30PlpEP9JxYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2
MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI2MTAwMzIyMjcwM1oX
DTI2MTAwNDIyNDAwM1owMzExMC8GA1UEAxMoNkZBNzEzRjA0RDdGMDBBOUFCRkVB
QjhEMDY0RjBCN0Q5QkE3QjI3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL6L1zRT/T5sOSJWWKFlxgJ1K8WZJOT8nga059LIjd2nakQuP40USSO7tvbP
08C6uWcPku9/FkHWz4arZntoCqut8ZwwrSej3x++AVc/g/uBIHxGCMza6tA71dCz
m59YOKP2FAjDIPI62ZA4FNf9tw32VPnOLiP3ekgvDNY98HKVsvCMj4xCX20wB5By
lsdf4zAAmgaPJj894SaNqzM+SntCcEMT9dGffiGTIwCPFwZv7ke2dqTuQCRES+qN
DEn+53lBTT3zIVRf+r0gEMJ9/5/VD4H+h6IihWhq7ffBLkNKqUC9loZreSAx9uB+
Va/n7cWofZ3R0ro1EEZTAOXIPTECAwEAAaOCAhswggIXMB0GA1UdDgQWBBRvpxPw
TX8Aqav+q40GTwt9m6eyfDAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa
dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE
NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB
a21BbEtZY2NrLW95QUVXblUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz
MDAwMDAvNy80QjE5ODdENTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAPBtYecciYCqrChtMBLUlqHFsk2S+j23DOPRLTUp0+gsChw0k
CUXXCYiZPQmG4IE7Ho82EXy3f6hFqXt7qCNcdqUQNfUsy/2tki7/hK2AjcBXpTdp
lHsUrYcytstMFlenlAAgLuxGaYAExH7/qY0K7bsDatqMoz3mQUqHdA4tP0jLDrjm
eux2vwvIvdhdQqv+53IhRzV1cGpI6eGerBKSyfLdaRyzmk9MvECqYfLSe76WrYti
iIwFacqinmQwDqboDv13W6LPdX4oZ6l2wXsnaJyGtX4M6Ehc5W/OwVeeIOCE3Syu
S+n18a/dndefx+jjfBRMcw394a67aazZwxn6Aw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 10:48:27 2026 by rpki-client