Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
File:                     B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft (raw, json)
Hash identifier:          o4eSL6VVL+fEHs/uhxsv2f7+h+hdfsXAx0BC6nYeZcU=
Subject key identifier:   5B:64:9C:03:46:3B:70:54:B9:15:EB:FF:D4:9F:FC:B8:D2:DB:1A:14
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       645E54FE935CD9E0F9DC7E57B3765A48F1BF415B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
Manifest number:          07D7
Signing time:             Fri 17 Jul 2026 15:17:01 +0000
Manifest this update:     Fri 17 Jul 2026 15:12:01 +0000
Manifest next update:     Sat 18 Jul 2026 16:08:01 +0000
Files and hashes:         1: 3230332e372e3139362e302f32332d3233203d3e20313334303930.roa (hash: qaOra+xDLyRhqdf//j4nvjjhMuhgOEsIZ5B8fiKTKxU=)
                          2: 3230332e372e3139362e302f32342d3234203d3e20313334303930.roa (hash: /LpdqHnCJJlwCcOi3CqIbxGlAHdFFT95xe2Q0VqmA3E=)
                          3: 3230332e33302e36302e302f32342d3234203d3e2037353436.roa (hash: ciSHjom7uhsnTUry3euH0kEf+ood81S/2eHdQ8CkHns=)
                          4: 3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (hash: Wnz7iyh9clZuDDpLGVNNBZJ0JgoGPtAKZ8B2Ynr6Xgc=)
                          5: 3230332e372e3139372e302f32342d3234203d3e2039343439.roa (hash: vAwqdvaW6yc2XtCDVw1UZNeo44zGvcl9i5o3oiFTQWo=)
                          6: 3132322e39392e3132302e302f32322d3234203d3e2037353436.roa (hash: Fe1UVCyCNYuLeK/2YClSqpX8AFGVDlpgAyiB6HZMqgE=)
                          7: 323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (hash: TyUQXYW/Z9X7LSxau+0o+4cjIXJiQzcIYmIWKatiFMc=)
                          8: 323430333a376530303a3a2f33322d3438203d3e2037353436.roa (hash: /tu1GLPgmx3L59lA9DS67uY00dm6i5Wm3Y/TLJzZPPI=)
                          9: 3230332e372e3139362e302f32332d3233203d3e2037353436.roa (hash: fkFkv4x2RJF8ikeWNYi3IpWqQO/j13TZnucB+1TubjI=)
                          10: 3230332e372e3139372e302f32342d3234203d3e20313334303930.roa (hash: yVZN8uUTOOhqgDafcuJzyObo6OYnTkFGrZV6T9wM9pM=)
                          11: 3230332e372e3139362e302f32342d3234203d3e2037353436.roa (hash: V95Z++X1BN0ujeiUpldiRsUT1wl/Vx8TaPKCLXBi9zI=)
                          12: B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl (hash: UZd4rrT2NcIGtPgc2EOi9DfKwtFNdDADviqQCJvPzug=)
                          13: 3230332e372e3139372e302f32342d3234203d3e2037353436.roa (hash: 63Xbycua4Mi8GYHYLibG9AGPdZZeGwzqJEcmfJT9ybE=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 16:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5e:54:fe:93:5c:d9:e0:f9:dc:7e:57:b3:76:5a:48:f1:bf:41:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: Jul 17 15:12:01 2026 GMT
            Not After : Jul 18 16:08:01 2026 GMT
        Subject: CN=5B649C03463B7054B915EBFFD49FFCB8D2DB1A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:69:2e:d5:21:41:c8:00:a6:ac:8d:d6:5a:59:
                    dc:fc:13:bf:b4:97:75:43:5d:f6:d2:a4:32:3f:88:
                    e4:a9:a2:5c:ed:07:49:93:1e:26:70:06:6e:47:31:
                    69:38:47:e7:e2:7b:0f:ce:b8:75:94:c8:ac:13:21:
                    f0:fa:b9:8a:49:84:72:6e:2a:7a:8e:4d:80:13:86:
                    c0:00:6e:b1:ab:36:d1:cd:87:f4:c8:94:37:08:3e:
                    15:fc:35:1b:8d:98:7a:57:cc:76:e6:9f:c9:c1:57:
                    0f:c9:45:a1:08:b9:50:48:e7:86:d0:83:ac:6f:74:
                    e9:21:90:6f:80:c0:32:1c:fe:60:4d:32:02:31:3c:
                    74:66:42:a9:3e:c0:81:fb:da:0f:c8:28:4a:c8:53:
                    e1:b9:fa:52:54:91:be:5a:41:d6:70:25:b2:62:1a:
                    00:77:3d:f7:c8:4b:06:3a:0b:90:86:0f:70:57:f6:
                    b2:84:2b:6e:59:1e:e7:a8:f1:4c:95:95:9d:76:3e:
                    b8:a7:bb:5e:a7:42:6b:87:03:ff:c2:d4:a0:5e:1a:
                    67:d0:8c:24:9f:2f:f0:62:22:45:8a:69:1b:f5:93:
                    36:e4:33:22:76:eb:4c:53:c8:37:18:37:f0:13:d6:
                    5b:51:9e:5b:59:9f:0f:f4:e6:fc:d0:d0:61:ab:fb:
                    16:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:64:9C:03:46:3B:70:54:B9:15:EB:FF:D4:9F:FC:B8:D2:DB:1A:14
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ed:cf:a6:3f:d8:4e:20:6a:5b:8f:8c:cb:33:3c:3b:12:77:
         4c:61:3d:db:01:fa:02:d2:c8:32:f6:a2:62:d3:2a:b1:fb:44:
         25:7d:ca:87:17:73:c7:17:3d:aa:8c:17:2c:70:08:46:ce:19:
         c8:64:0f:dd:33:5b:31:92:10:52:95:19:76:a0:45:f6:21:38:
         c1:3b:39:e0:d0:7f:4f:a6:fb:80:90:01:2f:e3:5b:e7:e6:9c:
         4e:4c:7a:0f:ca:0b:93:f6:7f:65:19:16:1a:14:95:b2:12:cb:
         5f:31:8c:82:7d:3b:90:1f:24:2b:59:7d:fc:ec:bf:4c:89:0b:
         ac:06:a3:ea:61:68:4c:78:6d:86:cc:f0:c3:cf:93:8e:11:05:
         f5:92:c9:2a:e4:a7:17:8d:b1:ac:4d:cb:c9:d6:ef:01:f4:53:
         68:03:98:cb:c8:be:d1:48:c6:d9:3b:79:9e:84:7c:41:7b:5a:
         06:f9:95:f4:df:29:fd:b6:bd:40:3a:65:8a:84:c4:3e:29:d9:
         f6:90:81:8d:90:c3:64:75:ed:36:32:df:cf:b8:72:b3:d5:2a:
         ab:d6:bb:f1:9f:ac:8c:c9:3d:7f:19:be:6b:44:f2:5c:cc:77:
         fd:ed:d4:00:71:d2:a6:b7:2c:18:9c:e7:86:8a:26:39:25:56:
         2a:f7:b7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:06:07 2026 by rpki-client