Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
File:                     B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json)
Hash identifier:          gJ2whpZtrvrs3cwoMMvlp29A6hy8Tu1fCgRk0NTeBE8=
Subject key identifier:   A2:D1:B1:88:F7:D0:56:00:29:15:BE:1F:7F:03:F6:F8:0D:F0:8F:F1
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       2FECC8322268D3341456AB51D96FA76EA97DBF76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
Manifest number:          085E
Signing time:             Sun 25 Oct 2026 09:27:22 +0000
Manifest this update:     Sun 25 Oct 2026 09:22:22 +0000
Manifest next update:     Mon 26 Oct 2026 10:10:22 +0000
Files and hashes:         1: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: Yif9zAcaCiGPMsa6nFpzg5c6EtmMp4yn18LmSsTMSYg=)
                          2: 3230332e372e3139372e302f32342d3234203d3e20313334303930.roa (hash: a7JbZMr92zzHbEOXrpI0N91OQAaQL4UiyFM6BOscqZE=)
                          3: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: fkFkv4x2RJF8ikeWNYi3IpWqQO/j13TZnucB+1TubjI=)
                          4: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ouqx4LxaBgGUkmuXMINywcsMwqU0N6ifWFXfDupPMm0=)
                          5: 3230332e372e3139362e302f32342d3234203d3e20313334303930.roa (hash: /LpdqHnCJJlwCcOi3CqIbxGlAHdFFT95xe2Q0VqmA3E=)
                          6: 3230332e372e3139372e302f32342d3234203d3e2039343439.roa (hash: vAwqdvaW6yc2XtCDVw1UZNeo44zGvcl9i5o3oiFTQWo=)
                          7: 3230332e372e3139362e302f32332d3233203d3e20313334303930.roa (hash: qaOra+xDLyRhqdf//j4nvjjhMuhgOEsIZ5B8fiKTKxU=)
                          8: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: Qdlg6Q3CDGMcGdLd6hc/n27GxAPRFvG8h6gvDdVpGPw=)
                          9: 3230332e372e3139362e302f32342d3234203d3e2037353436.roa (hash: V95Z++X1BN0ujeiUpldiRsUT1wl/Vx8TaPKCLXBi9zI=)
                          10: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: fDoR67VqgO4UC2WoFr3onY00uK4pxdsfonbFV6yqmUw=)
                          11: 3230332e372e3139372e302f32342d3234203d3e2037353436.roa (hash: 63Xbycua4Mi8GYHYLibG9AGPdZZeGwzqJEcmfJT9ybE=)
                          12: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: rzinuF8M1yOollf04EvErWnWH6T2XoPt2D2UOC4d8Tk=)
                          13: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: aNPv9QWVtH9n+gnLXuZ6dzxPw4I7fQPByYNoN2wj0vw=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 10:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ec:c8:32:22:68:d3:34:14:56:ab:51:d9:6f:a7:6e:a9:7d:bf:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: Oct 25 09:22:22 2026 GMT
            Not After : Oct 26 10:10:22 2026 GMT
        Subject: CN=A2D1B188F7D056002915BE1F7F03F6F80DF08FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:cd:52:1f:c0:bb:b0:c3:1f:6d:87:d7:31:
                    de:f8:6e:cb:43:cb:e6:7b:0a:18:1d:77:86:16:b0:
                    52:76:51:2f:88:95:80:6c:5c:d1:39:20:4b:99:4c:
                    e6:0b:eb:e7:f8:d6:98:99:b5:3f:b4:5e:50:7a:dd:
                    29:f1:74:49:ef:df:37:9e:fe:4f:da:c8:dc:cc:3a:
                    33:1e:86:9f:b5:02:7b:5c:1c:6f:08:a3:dd:96:6f:
                    5f:87:41:91:e5:7e:7f:e5:33:2e:50:23:3e:80:82:
                    24:41:14:b4:f6:d0:b1:e6:49:4f:8f:a2:49:56:99:
                    e2:3d:dc:4f:9b:9a:1f:75:d4:cc:82:96:fe:65:e3:
                    d0:7d:42:a6:3a:d4:bb:50:a7:1f:8e:1c:25:2e:67:
                    63:58:b0:79:04:f1:58:6b:32:0e:d3:c5:61:82:fc:
                    c5:c8:4e:e4:c5:2c:0b:7f:70:40:30:1d:55:c1:d7:
                    db:de:75:7a:41:2b:a4:1e:8e:9d:8a:fd:e1:99:a2:
                    cc:c3:fb:f6:07:7b:be:ea:85:98:25:3f:3a:1a:c6:
                    29:aa:72:87:0d:b6:b0:73:79:77:cf:ac:98:1b:c9:
                    d5:bd:8b:83:47:47:a0:8e:4e:81:10:9c:bf:f5:bf:
                    c8:05:dd:29:bd:44:b3:89:47:c7:63:b7:92:dd:11:
                    5f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D1:B1:88:F7:D0:56:00:29:15:BE:1F:7F:03:F6:F8:0D:F0:8F:F1
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:47:2f:cb:f9:b9:ec:e3:43:c1:b8:a5:5c:30:5d:4d:70:16:
         c0:fe:91:a5:69:ee:ec:f7:80:d6:9c:90:4c:62:87:15:24:e3:
         40:0c:fc:f8:55:42:0a:d0:7e:74:0d:7d:04:2e:7c:9a:ff:e0:
         bc:ee:89:87:3a:03:3e:3c:f8:08:0f:aa:67:f7:5f:b9:ad:e4:
         67:c6:fe:80:a4:e8:c9:94:57:7b:cd:63:30:ea:42:c2:cb:67:
         ab:88:d1:f0:cd:8a:4f:e5:fd:ae:c0:dd:27:bc:9f:3d:70:0d:
         9f:b0:aa:be:d8:4a:37:cb:b2:2e:63:27:68:ba:04:f1:2c:41:
         bf:36:a9:54:f2:e6:92:94:42:aa:6a:09:8f:d3:f5:d0:a7:5e:
         a9:4d:9e:46:63:a3:63:18:42:1f:86:34:a7:29:2f:6a:06:e6:
         a1:d4:33:56:04:d6:2e:b8:39:a0:3c:a0:a9:37:3d:55:6c:80:
         67:15:96:dd:46:32:57:94:45:2d:8c:fe:e6:f9:d2:6d:8a:fa:
         79:58:6e:b6:45:fa:0f:9d:de:fb:cf:9f:e0:f3:3a:0a:17:5c:
         74:c4:08:69:a3:c6:b5:3f:07:87:c2:64:a0:38:e1:95:17:3b:
         fe:f7:2e:30:24:09:10:13:1a:de:cd:7e:55:b2:e8:cd:53:96:
         77:46:2f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:42:08 2026 by rpki-client