Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
File:                     72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json)
Hash identifier:          lmPC3+WXVZGnxC/6A0wMsTFHJ5tbOnGV59IuQog5Tmk=
Subject key identifier:   CC:29:BD:4F:84:5C:52:F7:A0:0D:5C:5B:29:C0:4A:75:8B:36:35:2E
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       3BE5FC6E20BF381C98B0C584E7DDA8A321EB32B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
Manifest number:          050F
Signing time:             Thu 23 Jul 2026 15:11:09 +0000
Manifest this update:     Thu 23 Jul 2026 15:06:09 +0000
Manifest next update:     Fri 24 Jul 2026 16:27:09 +0000
Files and hashes:         1: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: iuuYxzriFJdzhC9tRvhuHmxHfhPYg8ibw47ATV/2WAY=)
                          2: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=)
                          3: 3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa (hash: BOcBhnnvYV178kOTT3dELkNmbvpnN/z4847g0PI0+QA=)
                          4: 3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa (hash: /3IEW/L0xD5c+gjtCpGu3f4OnNilISvSgo/f0RfHoCg=)
                          5: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: XW5ROJXsHtfkngdlXEUs0YnhnPoR10fb35FCOeUkreg=)
                          6: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (hash: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=)
                          7: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=)
                          8: 3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa (hash: jaYCwKUfN1ahphjmuCip8Xd6KyVekTXlh6eiv1lr6wE=)
                          9: 3130332e3233382e3133312e302f32342d3234203d3e20323134363639.roa (hash: VZ/w51p0XzsZ2KBo9k7nosvrYyc5C/8zhxaZuBRhqSI=)
                          10: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=)
                          11: 34332e3235352e38322e302f32342d3234203d3e20383334.roa (hash: icPb5M6Y/CPwkJET9vdKSzs0dBOYlGKaymEwUa2ujW8=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 16:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e5:fc:6e:20:bf:38:1c:98:b0:c5:84:e7:dd:a8:a3:21:eb:32:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Jul 23 15:06:09 2026 GMT
            Not After : Jul 24 16:27:09 2026 GMT
        Subject: CN=CC29BD4F845C52F7A00D5C5B29C04A758B36352E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:12:96:a1:71:45:6f:aa:07:96:00:99:01:
                    2e:68:be:e3:6f:bd:a4:be:6e:16:e8:53:e7:f1:77:
                    6d:14:23:76:b3:2d:4a:0c:8e:3f:7e:0d:65:09:6b:
                    44:dd:c7:c1:c7:19:ab:b1:5e:a5:d4:52:4c:f2:6e:
                    2b:84:eb:d0:0c:49:99:84:ea:8f:8a:f8:e1:0e:48:
                    9e:bb:f0:8f:8e:9b:64:1c:fc:de:b8:3e:8a:25:87:
                    8c:22:dc:ec:9d:db:cd:89:42:5e:1e:e9:0d:1d:35:
                    91:92:f0:1a:62:79:24:5a:a6:e5:e7:7e:41:99:51:
                    27:08:9f:12:2f:de:cd:35:69:89:7e:e6:55:a1:97:
                    9d:fe:69:dd:f3:bc:8e:8c:eb:b5:43:ba:d1:09:aa:
                    b4:04:41:33:99:d2:dd:aa:7e:14:95:2c:b9:17:3f:
                    ff:8b:67:57:69:34:49:78:9a:b0:5a:47:0d:25:72:
                    a4:d8:0e:ec:b2:f4:a9:81:e8:0e:b0:71:03:8d:a5:
                    78:8e:1e:fd:78:96:5d:c6:69:21:44:84:6c:b5:e9:
                    e5:2d:3a:de:bd:12:f9:6f:b5:8b:d4:a5:f3:8f:d2:
                    3e:7b:b6:78:ab:ea:de:6a:4a:78:b2:c1:3e:c7:b4:
                    d8:f5:73:65:ca:27:3a:49:56:ca:07:61:41:fb:0f:
                    d5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:29:BD:4F:84:5C:52:F7:A0:0D:5C:5B:29:C0:4A:75:8B:36:35:2E
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c6:94:f9:12:68:d5:b1:a2:c8:ec:8d:89:2b:af:a2:f8:cf:
         00:dc:66:e0:06:e1:bf:1f:f9:a2:a3:0e:54:bd:7a:ae:d4:21:
         ea:ff:01:5e:ce:9f:83:ef:b5:10:43:4c:bc:64:3e:93:c1:14:
         0a:79:50:4d:e1:ad:3b:f8:fb:b9:ec:8e:95:82:77:3f:0b:e9:
         64:9b:37:ec:cc:eb:53:d0:5f:e8:7a:56:9a:cd:68:b7:cb:b0:
         d6:44:7e:b3:e2:17:db:c5:7d:1c:35:f4:15:b9:55:b0:7b:c4:
         06:bb:4f:50:4d:90:bd:ad:d4:2d:b7:bc:66:f4:d2:3c:e3:ab:
         d6:4d:f3:c6:33:b9:d6:e1:ff:06:8c:e6:bf:86:56:b9:95:90:
         de:e9:fa:5e:6e:e0:39:d3:e6:5b:5b:ce:cd:d3:ff:4e:a3:b9:
         65:9d:2b:7a:79:38:a0:3b:9b:23:15:44:44:c7:67:ca:5f:90:
         53:b2:4c:b2:90:26:e6:13:5e:ca:9c:c0:06:3c:d4:b1:92:5a:
         72:8b:11:2c:91:9f:73:5f:98:91:53:8d:e2:61:dc:c5:fc:c9:
         49:89:e4:d7:41:99:14:f3:a5:6f:69:85:9b:91:60:59:94:a7:
         0d:00:28:f7:c8:84:b0:b3:bd:8c:9e:63:09:52:9d:00:85:29:
         30:db:fe:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:20:18 2026 by rpki-client