Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
File:                     17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json)
Hash identifier:          CAk75BNRs4Xq/YG8OUdA1Gm0YAOtMo8yt+p2FtJb0Hg=
Subject key identifier:   4C:5D:2C:E9:13:3B:1B:AE:01:A4:79:58:7B:38:CE:91:B0:E4:D6:4E
Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
Certificate issuer:       /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Certificate serial:       3D5EE6F0440B2804773E2263A933787BC60B7B87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
Manifest number:          0102
Signing time:             Thu 19 Feb 2026 04:43:23 +0000
Manifest this update:     Thu 19 Feb 2026 04:38:23 +0000
Manifest next update:     Fri 20 Feb 2026 07:04:23 +0000
Files and hashes:         1: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: LxuRCfL1RmLIfVpg0Y2mxy5g2JmE7dIHOLDbylokGyc=)
                          2: 323030313a6466343a353134303a3a2f34342d3434203d3e20313533333436.roa (hash: 0cKeFRvMg4K7CjG6EjM23reqsbS6dbzuJZqiCsKqNyg=)
                          3: 323030313a6466343a353134653a3a2f34382d3438203d3e20313533333436.roa (hash: 6d79MjPujLDyKtMpkk4jphJnh2+RAK01Ho2cDxHKrKM=)
                          4: 323030313a6466343a353134383a3a2f34382d3438203d3e2039383333.roa (hash: zl/9BBoJJ3neyY8UfSuYMMT4qwgA84XRS4rr+sykVxA=)
                          5: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: HOBlUUzXIgqWknT1VOL1nB3qMa6Fu6vRC1OMoEBjewg=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
                          rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Feb 2026 07:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5e:e6:f0:44:0b:28:04:77:3e:22:63:a9:33:78:7b:c6:0b:7b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
        Validity
            Not Before: Feb 19 04:38:23 2026 GMT
            Not After : Feb 20 07:04:23 2026 GMT
        Subject: CN=4C5D2CE9133B1BAE01A479587B38CE91B0E4D64E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:e2:e0:92:d4:ca:2e:02:26:23:a3:80:50:
                    51:c7:0a:11:1e:a5:41:f5:6f:f5:6a:71:62:ad:d0:
                    48:5a:aa:58:43:63:52:e6:b9:29:a1:58:40:4f:b7:
                    13:08:ef:67:e2:e5:08:93:6d:24:8d:51:e8:89:fb:
                    65:10:47:1f:85:1b:46:76:0d:85:3b:21:eb:fe:b5:
                    f7:25:bc:42:4c:15:8f:74:fb:a9:24:1d:21:3b:08:
                    0a:3f:09:fd:db:7a:32:2d:5d:51:58:1d:47:21:84:
                    67:f7:e9:09:f0:aa:f5:47:6d:d7:98:b2:cf:f5:6d:
                    b6:51:ad:58:ed:c5:30:9c:e4:22:42:8b:48:c1:fc:
                    38:a0:20:73:56:00:d1:89:2e:f9:fe:67:2d:46:e5:
                    c3:54:84:90:a4:53:ad:bf:98:1f:d1:2f:c1:28:51:
                    27:cc:3f:9c:fd:fc:d5:d2:88:8d:e6:ea:fe:6f:41:
                    c3:b8:f5:d6:3a:4e:15:d1:eb:b8:7c:4a:8a:86:c7:
                    37:c3:b4:e1:21:56:9c:16:de:06:cc:8c:00:eb:c4:
                    1b:45:6d:1d:71:e5:d6:23:52:94:76:65:f5:a7:2a:
                    47:19:94:cd:d8:dc:da:d5:d8:6d:16:86:d1:ad:7c:
                    b7:67:ef:45:fe:32:a2:93:4f:47:06:bf:bc:03:0b:
                    a8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5D:2C:E9:13:3B:1B:AE:01:A4:79:58:7B:38:CE:91:B0:E4:D6:4E
            X509v3 Authority Key Identifier:
                keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:91:11:6d:fe:a1:16:c2:eb:a4:47:11:eb:f8:a9:8c:4f:f3:
         f8:7a:ce:f5:4f:3d:82:06:81:cd:6e:db:f5:fe:02:d7:80:18:
         e9:cc:fa:46:6a:e2:00:7e:4c:95:10:31:df:79:41:b9:a9:b6:
         f1:a1:09:dc:94:df:6d:92:35:52:c7:60:1b:ad:cc:9c:c0:7c:
         df:cf:d6:1c:1f:fd:37:f9:be:aa:7d:e1:2b:6c:1b:23:47:d0:
         09:72:4b:01:1f:6b:58:05:da:98:f5:e6:24:f4:b2:3a:5b:f4:
         11:fd:a7:81:13:f6:a2:96:9d:63:6b:11:ba:fe:ae:22:d9:2b:
         01:70:a8:d0:15:5c:14:7f:65:32:1d:12:d8:de:86:fc:de:80:
         09:20:d6:57:17:99:41:4a:b2:2d:e6:6b:91:53:56:90:52:28:
         95:fd:6d:f1:e0:d8:a6:cb:ce:ec:4e:64:05:38:72:96:35:a4:
         32:da:97:d1:e0:8a:4a:4e:3d:53:e7:dc:57:14:79:c2:58:fc:
         78:bb:09:dd:bc:6a:5f:91:da:7e:c2:3c:c8:f7:86:4f:f7:c2:
         a1:2b:df:61:4e:40:42:f2:62:27:8f:51:52:51:70:c7:16:1a:
         2b:8e:12:8e:75:2d:eb:25:66:23:17:d0:ba:bf:9a:5e:69:8d:
         62:ec:cf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:38:12 2026 by rpki-client