Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
File:                     4B1987D5160068092602529871C93EA320045A75.mft (raw, json)
Hash identifier:          xapGNxz7+vzRok2VsrpWqlLcA9FMd+l0bj4DH3J1lu4=
Subject key identifier:   7D:E4:7B:EA:42:AB:99:AD:F0:B4:D1:18:C2:A5:D7:14:51:90:EA:D1
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Certificate issuer:       /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial:       64F194B02475FD9E37391B0337323656F70CBCCE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
Manifest number:          049C
Signing time:             Sat 18 Jul 2026 02:47:02 +0000
Manifest this update:     Sat 18 Jul 2026 02:42:02 +0000
Manifest next update:     Sun 19 Jul 2026 04:55:02 +0000
Files and hashes:         1: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=)
                          2: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=)
                          3: 4B1987D5160068092602529871C93EA320045A75.crl (hash: uZvbOwBEnBanZYjFf2YfClncoi4yJSz2EotRiWkVSiE=)
                          4: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Jul 2026 04:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f1:94:b0:24:75:fd:9e:37:39:1b:03:37:32:36:56:f7:0c:bc:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75
        Validity
            Not Before: Jul 18 02:42:02 2026 GMT
            Not After : Jul 19 04:55:02 2026 GMT
        Subject: CN=7DE47BEA42AB99ADF0B4D118C2A5D7145190EAD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:d8:77:2c:9d:4c:b3:2c:2c:fc:dd:e8:d3:
                    49:35:fc:1f:3a:e4:99:ac:18:4d:68:21:2b:8b:da:
                    1c:72:a8:bc:ba:84:2a:12:69:16:e4:11:a3:29:6e:
                    e6:ee:c6:f0:bf:9a:80:dc:0d:6e:c9:4a:07:9e:f8:
                    92:ad:f1:16:7b:31:bb:3e:85:d0:62:5d:14:4d:0c:
                    fb:7b:b0:c7:dd:c1:7f:9b:9a:5c:e6:5b:d8:c6:a0:
                    23:4f:a5:72:21:04:cd:4a:b7:3c:89:c8:7d:bd:f0:
                    77:f1:24:1d:e3:68:bd:6b:3f:83:c8:a7:89:cc:d6:
                    c4:44:66:4f:9c:67:1b:95:37:84:d9:43:6b:42:54:
                    59:af:21:17:d6:63:44:f9:a5:74:df:08:31:55:85:
                    ff:7a:ec:2d:de:2a:29:d3:56:b9:37:38:19:a8:5f:
                    9d:72:79:46:f9:c4:28:6a:00:6f:68:26:4c:1a:a3:
                    57:59:d1:23:33:81:f1:60:d3:7a:6a:79:a3:ad:d0:
                    ef:e1:24:f3:86:f1:e4:d3:a1:58:da:d9:d2:96:eb:
                    ac:1d:d7:1d:07:fb:8a:d2:dd:ad:df:34:90:47:b5:
                    67:f2:6d:15:36:90:91:b9:c4:58:23:d2:a6:bc:82:
                    4f:56:14:9e:9f:d8:bd:30:ba:63:b9:7b:9b:96:03:
                    76:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E4:7B:EA:42:AB:99:AD:F0:B4:D1:18:C2:A5:D7:14:51:90:EA:D1
            X509v3 Authority Key Identifier:
                keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:cb:40:10:c8:f3:ac:c9:f0:b0:58:22:d9:dc:1b:63:71:0c:
         95:63:0a:89:43:fb:4c:b2:83:07:79:24:e2:c9:5a:65:01:d5:
         e9:27:5d:ef:f1:e9:d7:ce:d8:ca:30:e7:ce:59:4f:ec:b4:36:
         7f:85:51:c2:13:41:a7:33:05:7e:54:08:66:65:ac:be:c0:68:
         b2:95:04:d5:88:a5:12:dc:1c:f8:dc:05:f8:c2:9f:cc:be:7e:
         66:b2:04:6b:b6:b0:25:c6:c8:71:d5:a6:17:e1:26:f2:eb:7b:
         b3:6e:19:3e:1c:08:5c:b6:a2:d6:1b:b1:44:80:19:6f:df:20:
         40:19:61:f6:df:5e:5b:09:0a:ca:7b:fe:16:cf:3f:16:05:35:
         04:1c:6c:2a:62:ab:51:e7:1e:9b:17:73:af:3d:e6:50:36:69:
         71:fa:59:ea:59:48:74:00:89:2c:25:51:6d:0e:81:16:0f:08:
         3b:d0:54:83:a6:59:ea:54:69:ef:c2:81:45:52:b8:27:f1:b3:
         44:bd:a2:b8:9f:fc:f9:e0:64:4a:3b:68:b6:69:a7:83:f9:82:
         48:5c:b3:30:a9:ab:7a:41:73:cd:b9:9d:6d:9f:b3:2b:4b:da:
         2f:ad:71:70:14:a1:ff:90:50:c7:03:c8:a6:9d:ed:db:d7:c9:
         0c:3a:a0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 11:08:46 2026 by rpki-client