Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
File:                     72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json)
Hash identifier:          OYAlMYgLwjwOMEvByR7ap5+l1ZQvb+6x95OQmgf+guo=
Subject key identifier:   3A:65:F7:04:67:2E:E0:D3:A1:5C:2C:73:EF:F9:56:80:B7:EE:02:A1
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       147B7C4A84E87BFE8FFFE2D67CEE37DCD05D8BDB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
Manifest number:          04AF
Signing time:             Tue 12 May 2026 10:30:06 +0000
Manifest this update:     Tue 12 May 2026 10:25:06 +0000
Manifest next update:     Wed 13 May 2026 13:10:06 +0000
Files and hashes:         1: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: 2mpmu6vx9yQmFWlMgj5he7AtoevUBry5AWcv0NOYKqQ=)
                          2: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=)
                          3: 3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa (hash: BOcBhnnvYV178kOTT3dELkNmbvpnN/z4847g0PI0+QA=)
                          4: 3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa (hash: /3IEW/L0xD5c+gjtCpGu3f4OnNilISvSgo/f0RfHoCg=)
                          5: 34332e3235352e38322e302f32342d3234203d3e20383334.roa (hash: icPb5M6Y/CPwkJET9vdKSzs0dBOYlGKaymEwUa2ujW8=)
                          6: 3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa (hash: jaYCwKUfN1ahphjmuCip8Xd6KyVekTXlh6eiv1lr6wE=)
                          7: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=)
                          8: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: XW5ROJXsHtfkngdlXEUs0YnhnPoR10fb35FCOeUkreg=)
                          9: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=)
                          10: 3130332e3233382e3133312e302f32342d3234203d3e20323134363639.roa (hash: VZ/w51p0XzsZ2KBo9k7nosvrYyc5C/8zhxaZuBRhqSI=)
                          11: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (hash: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7b:7c:4a:84:e8:7b:fe:8f:ff:e2:d6:7c:ee:37:dc:d0:5d:8b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: May 12 10:25:06 2026 GMT
            Not After : May 13 13:10:06 2026 GMT
        Subject: CN=3A65F704672EE0D3A15C2C73EFF95680B7EE02A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:23:08:f3:20:df:7e:68:6d:59:d9:cd:a9:
                    67:db:09:4e:b2:fa:d7:39:99:5e:c5:70:92:cc:43:
                    1f:0b:37:a5:af:2c:3e:18:41:5a:7e:fb:c0:73:7c:
                    55:61:31:2d:b6:45:6b:e9:72:d6:f1:8b:9d:13:92:
                    ef:56:ee:a3:f4:aa:98:4a:56:fc:38:bc:ca:c6:4a:
                    f0:bb:23:f2:5f:6d:53:54:e1:80:d2:5f:f9:b5:2a:
                    bb:20:d8:9a:6c:70:4a:b7:66:43:e4:fb:c2:06:56:
                    04:ee:dc:80:9a:27:2d:98:2c:48:46:bd:6f:22:48:
                    16:d6:9e:19:5f:31:bd:9e:5e:55:1d:24:64:ce:23:
                    99:1a:48:66:f2:70:93:3d:b2:06:c2:32:a3:5b:00:
                    1a:e4:2b:b0:32:ba:f6:9b:c1:8f:5f:3b:b8:6a:d6:
                    b9:e4:52:38:84:ec:15:c3:63:7f:cb:37:07:78:3c:
                    50:18:94:10:db:54:cb:4c:9b:4b:96:0c:4e:e2:b4:
                    6f:8d:91:fb:eb:04:11:bd:c1:37:95:e5:b7:ab:f9:
                    d0:ad:5c:c6:f8:f3:99:c5:8d:2c:c3:be:7d:f6:87:
                    89:95:56:f6:da:00:c4:9e:9d:56:0f:fc:87:84:a7:
                    8e:f8:e5:56:1a:39:0e:9d:55:82:49:c5:4d:82:17:
                    a0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:65:F7:04:67:2E:E0:D3:A1:5C:2C:73:EF:F9:56:80:B7:EE:02:A1
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:44:dc:70:91:28:87:90:6b:be:22:82:9d:b1:0b:ef:12:2a:
         15:a4:cf:75:87:e2:e6:f5:01:2e:3b:3e:fc:c2:fc:3d:67:bc:
         87:e6:7f:d9:e0:95:67:7f:24:bc:9b:f4:f3:cc:84:59:32:90:
         2b:eb:94:a3:2c:c2:ad:dd:f3:de:2d:0b:2b:99:a6:0f:62:96:
         af:db:10:7d:68:60:00:6c:1d:ef:ec:0a:c4:46:4f:c5:bb:1a:
         65:c1:ed:5f:ea:2a:19:8c:14:c0:0c:de:f7:71:8f:cc:0e:e1:
         d5:a1:64:65:ff:02:3c:b4:1a:99:67:e5:01:c9:12:57:7e:a0:
         62:b8:72:32:61:e9:1d:a6:b0:03:e7:21:1a:0f:49:37:7f:52:
         c3:f5:9f:40:af:1a:8c:9c:5e:cb:4a:8b:49:67:a3:f2:c7:5a:
         56:f5:c1:c3:c2:53:d4:8c:8e:80:7a:2a:e7:85:3b:cf:ed:15:
         9f:71:5e:ae:03:ba:ad:26:b9:bf:d9:17:6a:c7:d4:61:3f:14:
         ea:33:50:f7:f0:dd:34:c4:19:af:94:48:4a:17:98:90:1d:c3:
         af:69:03:69:db:ac:c0:38:5f:d5:93:d6:08:c0:1a:b0:d6:cd:
         e4:35:fe:e2:ab:dd:0f:0d:6a:97:cd:8e:31:47:d8:a9:22:1c:
         2e:04:5a:d0
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUFHt8SoToe/6P/+LWfO433NBdi9swDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4
NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI2MDUxMjEwMjUwNloX
DTI2MDUxMzEzMTAwNlowMzExMC8GA1UEAxMoM0E2NUY3MDQ2NzJFRTBEM0ExNUMy
QzczRUZGOTU2ODBCN0VFMDJBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL/eIwjzIN9+aG1Z2c2pZ9sJTrL61zmZXsVwksxDHws3pa8sPhhBWn77wHN8
VWExLbZFa+ly1vGLnROS71buo/SqmEpW/Di8ysZK8Lsj8l9tU1ThgNJf+bUquyDY
mmxwSrdmQ+T7wgZWBO7cgJonLZgsSEa9byJIFtaeGV8xvZ5eVR0kZM4jmRpIZvJw
kz2yBsIyo1sAGuQrsDK69pvBj187uGrWueRSOITsFcNjf8s3B3g8UBiUENtUy0yb
S5YMTuK0b42R++sEEb3BN5Xlt6v50K1cxvjzmcWNLMO+ffaHiZVW9toAxJ6dVg/8
h4SnjvjlVho5Dp1VgknFTYIXoKECAwEAAaOCAhswggIXMB0GA1UdDgQWBBQ6ZfcE
Zy7g06FcLHPv+VaAt+4CoTAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64
ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4
QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2
dkhRY0JmTm1ITGV0cU91QUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEz
MTAwMDAvMC83MkVDMEQ4QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAw
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAgkTccJEoh5BrviKCnbEL7xIqFaTPdYfi5vUBLjs+/ML8PWe8
h+Z/2eCVZ38kvJv088yEWTKQK+uUoyzCrd3z3i0LK5mmD2KWr9sQfWhgAGwd7+wK
xEZPxbsaZcHtX+oqGYwUwAze93GPzA7h1aFkZf8CPLQamWflAckSV36gYrhyMmHp
HaawA+chGg9JN39Sw/WfQK8ajJxey0qLSWej8sdaVvXBw8JT1IyOgHoq54U7z+0V
n3FergO6rSa5v9kXasfUYT8U6jNQ9/DdNMQZr5RISheYkB3Dr2kDaduswDhf1ZPW
CMAasNbN5DX+4qvdDw1ql82OMUfYqSIcLgRa0A==
-----END CERTIFICATE-----
Generated at Wed May 13 01:46:35 2026 by rpki-client