Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
File:                     72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json)
Hash identifier:          MahMagbWpdh0pFtyIBy3lpg+iQjQQ4ghdEf6fXc6yho=
Subject key identifier:   97:E2:F8:66:34:B7:D7:F0:0E:6D:6D:D7:50:9F:EB:64:8C:4B:20:DE
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       1DF9E8B0F36CC9562C90667DF99E74A2FA4A3B5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
Manifest number:          05B0
Signing time:             Sat 14 Nov 2026 20:00:16 +0000
Manifest this update:     Sat 14 Nov 2026 19:55:16 +0000
Manifest next update:     Sun 15 Nov 2026 23:31:16 +0000
Files and hashes:         1: 3130332e3233382e3132382e302f32342d3234203d3e203136353039.roa (hash: d1XIE95syZP0v07zjAuCvJR2QmouxxiaARcQuCz9mh0=)
                          2: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: UeVTfn68R0LdGwhBHFcZ5BBp1siueZcbyg5aXpQZnmc=)
                          3: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: s3DYpi3ZP5fuudEtPqebQgdzl5Apx1Z7PvbDYooL71I=)
                          4: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (hash: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=)
                          5: 3130332e3233382e3133312e302f32342d3234203d3e20323134363639.roa (hash: VZ/w51p0XzsZ2KBo9k7nosvrYyc5C/8zhxaZuBRhqSI=)
                          6: 34332e3235352e38322e302f32342d3234203d3e20323130313130.roa (hash: PB0a+a2Gy49HBYeDS5tizGYeq0RhqGsRJr6JdjueuOg=)
                          7: 34332e3235352e38312e302f32342d3234203d3e20383334.roa (hash: nTO2Wp5t/vnjKSirqYrsazXOeWW5zUknKZBPOvMogcU=)
                          8: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: 7ng0Lz0v75i9UIOOgIh6OtvWrPo/NJYnzs1xeOHzW3c=)
                          9: 3130332e3233382e3132382e302f32342d3234203d3e203134363138.roa (hash: d3P3WC5yrcNvHuUnPZwXk8M9TJVuxaLvaw3XJhLzpjE=)
                          10: 3130332e3233382e3132382e302f32342d3234203d3e20343033303839.roa (hash: eXvGIHAjEFgcHwx3RykF2HHJzHyrZR4fITP4Cuatfbs=)
                          11: 3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa (hash: BOcBhnnvYV178kOTT3dELkNmbvpnN/z4847g0PI0+QA=)
                          12: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: mRp4vY4H0by9mj0sSASpANHm18slHi1+kwE1GgClbCA=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 23:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f9:e8:b0:f3:6c:c9:56:2c:90:66:7d:f9:9e:74:a2:fa:4a:3b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Nov 14 19:55:16 2026 GMT
            Not After : Nov 15 23:31:16 2026 GMT
        Subject: CN=97E2F86634B7D7F00E6D6DD7509FEB648C4B20DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:00:f9:46:7a:b2:0b:bd:05:70:83:91:61:
                    af:a0:06:cf:7e:3e:63:91:62:ed:99:5a:33:9f:1b:
                    64:a2:78:60:e3:32:87:43:54:fe:cd:99:73:6a:f8:
                    40:a4:d3:1f:1f:e3:85:39:80:28:f2:bc:8f:a1:13:
                    ee:b9:0b:15:82:90:f0:02:91:5f:af:c5:ba:41:5e:
                    fc:00:da:b3:40:c1:3f:fa:31:0d:fc:78:80:1d:9b:
                    c4:1a:fb:49:91:de:c6:f8:8d:d9:e7:bb:4a:7b:c1:
                    8b:6a:e9:be:38:84:d7:80:0b:6e:49:62:e7:90:1d:
                    02:c2:67:dd:30:71:49:69:96:bf:37:2e:6b:5e:8c:
                    e6:1f:b4:2d:9b:b1:97:21:a2:89:57:0d:00:1b:7b:
                    0a:80:ab:6a:fe:45:6f:1c:9e:45:93:96:14:3e:e1:
                    6a:9b:ce:89:5b:b1:f5:6f:7e:d2:87:f3:49:00:4a:
                    d2:f9:76:5d:ee:ab:01:42:21:3d:62:bf:d9:c9:c0:
                    00:63:e6:60:df:4a:93:93:36:99:55:c1:9b:61:a2:
                    a1:d6:ec:5d:a3:92:5b:ba:2d:28:8e:e3:95:ee:58:
                    e5:87:c9:a0:19:54:a2:8e:b3:65:90:d6:5f:9a:21:
                    f8:cf:b5:29:3d:27:b1:4b:d0:0e:e5:1b:f5:7d:fd:
                    74:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E2:F8:66:34:B7:D7:F0:0E:6D:6D:D7:50:9F:EB:64:8C:4B:20:DE
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:60:41:4c:70:6a:d9:0f:bd:60:af:0c:b4:0e:bc:26:20:64:
         f3:00:ad:0e:8d:52:73:f6:ba:45:7e:89:d5:08:e5:eb:ea:00:
         18:b4:97:30:73:ef:d2:0a:26:b5:ff:6f:58:cf:dc:a5:f4:7d:
         f3:50:f2:ef:85:a8:05:ea:40:e0:70:b5:8c:37:a8:22:06:49:
         69:52:66:8a:a3:59:9d:23:16:5a:f9:b6:1e:7c:1e:b8:09:dc:
         e5:63:bd:d8:6e:a8:31:0f:d0:ae:5e:de:8a:be:9d:64:9d:8c:
         9c:77:b6:2d:e3:2a:3e:ac:d6:90:3f:f0:81:5e:a5:f3:65:5b:
         95:72:63:a5:69:26:7b:ed:1d:85:f5:df:2a:2f:2c:13:e1:98:
         f0:90:89:8c:8b:3e:70:39:d2:20:73:ff:09:db:5c:14:f3:10:
         eb:59:aa:b3:e6:15:b3:cd:5e:1f:f5:9e:a9:60:03:da:d8:79:
         05:d7:90:89:e8:fc:6a:5c:8e:84:12:42:26:e4:ba:45:2a:27:
         59:20:85:e5:b0:7a:0b:e0:d5:18:c2:b5:04:70:50:52:1a:64:
         60:56:34:be:3f:f6:da:65:80:4a:da:c5:63:80:26:5c:58:0c:
         88:18:b7:e0:06:30:66:71:9c:9c:de:ec:f0:80:56:31:ea:4a:
         0b:d7:af:c8
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHfnosPNsyVYskGZ9+Z50ovpKO1owDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4
NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI2MTExNDE5NTUxNloX
DTI2MTExNTIzMzExNlowMzExMC8GA1UEAxMoOTdFMkY4NjYzNEI3RDdGMDBFNkQ2
REQ3NTA5RkVCNjQ4QzRCMjBERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALfLAPlGerILvQVwg5Fhr6AGz34+Y5Fi7ZlaM58bZKJ4YOMyh0NU/s2Zc2r4
QKTTHx/jhTmAKPK8j6ET7rkLFYKQ8AKRX6/FukFe/ADas0DBP/oxDfx4gB2bxBr7
SZHexviN2ee7SnvBi2rpvjiE14ALbkli55AdAsJn3TBxSWmWvzcua16M5h+0LZux
lyGiiVcNABt7CoCrav5FbxyeRZOWFD7hapvOiVux9W9+0ofzSQBK0vl2Xe6rAUIh
PWK/2cnAAGPmYN9Kk5M2mVXBm2GiodbsXaOSW7otKI7jle5Y5YfJoBlUoo6zZZDW
X5oh+M+1KT0nsUvQDuUb9X39dAMCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSX4vhm
NLfX8A5tbddQn+tkjEsg3jAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64
ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4
QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2
dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz
MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAcmBBTHBq2Q+9YK8MtA68JiBk8wCtDo1Sc/a6RX6J1Qjl6+oA
GLSXMHPv0gomtf9vWM/cpfR981Dy74WoBepA4HC1jDeoIgZJaVJmiqNZnSMWWvm2
HnweuAnc5WO92G6oMQ/Qrl7eir6dZJ2MnHe2LeMqPqzWkD/wgV6l82VblXJjpWkm
e+0dhfXfKi8sE+GY8JCJjIs+cDnSIHP/CdtcFPMQ61mqs+YVs81eH/WeqWAD2th5
BdeQiej8alyOhBJCJuS6RSonWSCF5bB6C+DVGMK1BHBQUhpkYFY0vj/22mWAStrF
Y4AmXFgMiBi34AYwZnGcnN7s8IBWMepKC9evyA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:40:13 2026 by rpki-client