Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
File:                     30356EF46D594DA57C7697011183ACFFE04613E0.mft (raw, json)
Hash identifier:          yoHOZLa4YgNzlMusjGPBDlGsgfZa+2Os5OaZ8zCee3s=
Subject key identifier:   19:36:BA:A7:B7:4A:DB:CE:15:94:3F:F0:B4:06:02:CB:87:32:7E:55
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       18FBB4F60AA025298976D96D241492E0F007A100
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
Manifest number:          0863
Signing time:             Mon 26 Oct 2026 17:42:24 +0000
Manifest this update:     Mon 26 Oct 2026 17:37:24 +0000
Manifest next update:     Tue 27 Oct 2026 18:28:24 +0000
Files and hashes:         1: 3130332e3136302e3131362e302f32332d3234203d3e2039383838.roa (hash: 4M3Gj7VtwtPss7dq7bEuNaNtbKXrLCHIYjSN8LGXjK0=)
                          2: 3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (hash: 380MteHJu085lIotRMCrM3Ws74eHVNCxql4WXGt1OL0=)
                          3: 323430363a653934303a3a2f33322d3536203d3e2039343439.roa (hash: iW/Pe5Cqp3aiKoMmZoO7B7Qp0dEF2rMCnFsMeO07vy8=)
                          4: 30356EF46D594DA57C7697011183ACFFE04613E0.crl (hash: cEwF5F3WRh/l2C8iANAq6Fv/1CPvEd61lNwYva9SQH0=)
                          5: 3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (hash: 2guqc3il/Df3q/hiPOyhywzhF3bNWW294jv3FUSAbQM=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 18:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:fb:b4:f6:0a:a0:25:29:89:76:d9:6d:24:14:92:e0:f0:07:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: Oct 26 17:37:24 2026 GMT
            Not After : Oct 27 18:28:24 2026 GMT
        Subject: CN=1936BAA7B74ADBCE15943FF0B40602CB87327E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8a:e5:93:0c:bc:0c:68:9d:ab:88:98:4e:aa:
                    50:4b:a7:ff:68:25:85:c5:5a:06:b8:4d:15:a1:98:
                    83:7f:a5:57:ea:cd:ea:9c:44:85:e0:73:f2:e9:64:
                    e8:19:30:5c:51:bb:d9:0f:f6:cf:9e:3d:8f:da:4b:
                    e1:78:82:26:e8:a3:64:29:49:9b:b4:a1:d8:22:2c:
                    6e:7a:19:dc:ed:db:28:a0:4f:9e:ea:06:d8:ae:0f:
                    d3:10:f7:0b:ae:80:ba:80:cb:0a:48:c8:fd:2e:bb:
                    35:4b:f6:22:9b:da:40:68:6e:4f:fc:c9:a3:9a:b4:
                    a6:3e:df:0c:c5:4c:25:a1:6b:32:89:5c:90:38:39:
                    f6:ca:7a:15:f5:d4:d8:72:3f:d8:05:26:a9:d6:7d:
                    d0:f5:02:e6:9d:b5:51:36:49:52:49:b2:3b:d9:c4:
                    cd:26:7b:4a:19:4e:01:1c:fa:c7:9c:90:55:5c:b5:
                    03:92:3a:df:3d:23:11:dc:d4:7c:ff:3b:14:4c:5c:
                    86:0c:31:64:e1:19:69:38:2c:00:8f:43:20:6f:1e:
                    24:5d:a7:6e:c1:68:3f:fd:68:0d:04:87:85:9e:8a:
                    a8:87:24:15:e5:5a:40:e5:46:1f:df:2b:bf:33:80:
                    02:66:f7:e0:7c:dd:a5:b4:8b:12:07:dd:6b:9c:02:
                    fa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:36:BA:A7:B7:4A:DB:CE:15:94:3F:F0:B4:06:02:CB:87:32:7E:55
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ff:2b:fc:f3:fc:10:23:19:95:fd:49:73:10:57:13:91:7c:
         d4:1f:1e:ef:03:05:69:80:0d:b4:e0:9b:f2:43:6f:db:47:d5:
         a8:0d:11:0f:0d:9e:72:90:3a:af:1f:fc:32:06:6a:0d:70:00:
         2b:ad:6b:76:16:71:46:86:4c:bf:90:eb:7a:ba:5b:2a:c2:4a:
         23:cb:9e:4d:85:89:b2:97:32:14:78:47:fd:f5:a7:9e:a7:da:
         b0:be:a2:6f:d2:1b:75:cb:67:0f:0c:87:fc:26:06:10:5a:9d:
         cf:d9:c3:6c:d3:95:24:b4:7e:28:b1:4e:ff:81:bb:3d:ec:ed:
         c9:65:68:77:d5:67:44:67:3f:5a:98:0a:6b:db:ad:9c:6b:cc:
         eb:5e:d5:db:7d:68:1f:77:77:39:2e:49:05:59:83:8b:c9:5c:
         d8:ce:5b:93:60:34:f2:86:36:a4:d1:54:69:d4:61:50:c2:de:
         c1:1e:d4:d5:cb:7f:5d:b0:94:63:e7:35:11:ab:63:42:0f:a8:
         ca:7e:3d:91:8d:6c:54:c1:a5:e6:82:9b:ba:15:c1:f5:72:92:
         c1:9c:4a:29:c3:c4:3d:0d:f6:02:14:10:d0:3f:de:74:e0:3b:
         0f:f6:4a:ce:02:66:c2:05:e2:a7:96:8e:00:60:17:33:1a:53:
         f5:75:8d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:44:25 2026 by rpki-client