Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
File:                     B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json)
Hash identifier:          cARF1b7wyK2xBaa/wHC+U3su6ybpIiv/drDgXP29b/g=
Subject key identifier:   2E:94:54:03:06:AC:30:6E:1C:3E:38:D2:83:F8:29:E2:EE:ED:67:6F
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Certificate issuer:       /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial:       1EDA4B7E32474CC3E8C2D2CB75F535BD060385
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
Manifest number:          085A
Signing time:             Mon 26 Oct 2026 01:37:24 +0000
Manifest this update:     Mon 26 Oct 2026 01:32:24 +0000
Manifest next update:     Tue 27 Oct 2026 02:33:24 +0000
Files and hashes:         1: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: 8+0jL3+NbfciLcZgupy5BXboLJIz0oZxaOC4vwv27Cg=)
                          2: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: 0SHIwVIwVyWAhBgnbacpjgq46FIsXuIaoz9VKCP/7mY=)
                          3: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: flJTPZ46b4mt9qzWDdfIDdppJpcYKfDqIn9TjegEbok=)
                          4: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: Sylf+6F0rs2iWRvKNrVjclZWIfF/tiqHfdrXOW0RiPo=)
                          5: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: M/e9JYxNlAFFvx5pruu6e138GeVq2fFfQJvX9da0dDs=)
                          6: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: /tPPfFvPJE3axlLl1Fjq/BkPqBuOvwfzjmPSaqQFGVg=)
                          7: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: oMfTdg/Rj2XRGxmXU1sElHSlgd2vFn+T0PIYfvXEBg0=)
                          8: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: qXRloiinPDAaznKahN61ox5RGcuvXITDVkzJjURvcyg=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 02:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:da:4b:7e:32:47:4c:c3:e8:c2:d2:cb:75:f5:35:bd:06:03:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
        Validity
            Not Before: Oct 26 01:32:24 2026 GMT
            Not After : Oct 27 02:33:24 2026 GMT
        Subject: CN=2E94540306AC306E1C3E38D283F829E2EEED676F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:81:4e:fc:5e:e4:df:75:76:b9:b0:ff:09:
                    84:c4:92:d1:12:33:6b:20:5b:79:44:5e:09:61:3d:
                    04:2b:45:f2:09:0b:21:5d:38:2c:46:b6:00:55:c8:
                    44:df:78:b9:98:bb:9b:81:2c:ea:4b:d3:17:6e:3c:
                    82:ae:15:4d:0f:44:d8:f2:11:35:81:db:ef:08:5e:
                    84:66:9d:e9:54:cc:c6:06:14:71:7b:6b:63:2f:a1:
                    b0:cd:55:e5:25:fd:03:4e:2c:c7:45:ae:b9:06:aa:
                    46:92:f7:60:34:31:8e:44:fe:16:01:c6:71:b9:77:
                    dc:8c:fa:96:c9:9e:cb:0d:01:ac:62:4b:68:fe:42:
                    5f:3e:07:9e:95:67:98:e3:5e:52:e9:f4:ee:20:cb:
                    ce:50:f5:31:bc:b4:31:df:4c:b6:7d:66:a4:96:49:
                    79:76:49:bc:2c:13:01:8c:ba:44:c1:95:7c:57:75:
                    25:70:c8:5c:09:64:af:f6:cf:25:4b:1f:74:86:59:
                    21:98:40:e8:4d:eb:85:40:43:3a:03:03:25:18:3b:
                    5f:a7:75:ad:eb:0e:65:d6:26:2f:2c:b4:b8:e2:d4:
                    dd:5c:0e:9d:b7:76:0c:10:5d:0f:d2:7e:dc:64:74:
                    84:93:39:1a:64:e3:05:b1:76:b5:69:b1:95:6f:80:
                    76:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:94:54:03:06:AC:30:6E:1C:3E:38:D2:83:F8:29:E2:EE:ED:67:6F
            X509v3 Authority Key Identifier:
                keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ef:1d:29:62:47:49:c9:f2:51:cb:ea:24:70:07:10:7d:29:
         6a:75:b5:44:09:12:33:c3:9f:31:09:80:4f:5e:6f:e1:fd:54:
         f6:8d:4a:7b:06:9e:b9:df:b0:7b:05:2d:8b:05:e7:f9:4b:5d:
         42:d1:39:07:8e:e5:46:e1:06:3b:b0:d8:15:84:e6:a8:93:30:
         10:15:a3:e9:09:38:64:52:16:59:00:f5:eb:b7:b1:86:63:34:
         37:b5:d0:21:a5:4f:48:7d:6e:f1:e4:76:3f:f6:1f:8d:9b:f3:
         bd:98:4d:57:27:f2:45:69:b8:0e:4d:5a:a6:52:f9:84:56:0c:
         7c:41:63:5a:dc:3a:c0:46:87:c4:9f:7a:ec:4f:f3:9b:e1:04:
         12:e7:a8:9f:0c:df:d2:cc:cb:eb:e1:21:86:3f:60:f3:56:50:
         40:90:fe:d8:4d:b3:69:41:d8:dd:62:e7:e7:53:6b:34:a1:09:
         48:fd:63:af:7f:b7:a8:40:a0:43:ec:0d:89:b7:2d:4c:2b:f9:
         2f:b0:d1:21:1d:2d:72:2b:6f:3a:fe:72:8f:ee:42:43:bb:a4:
         dd:1f:d1:de:a5:84:4e:b6:01:1d:34:ba:af:9f:d2:11:ea:84:
         10:e3:da:6d:91:55:81:74:36:9f:9c:56:63:b3:13:07:48:b7:
         11:14:6d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:16:27 2026 by rpki-client