Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
File:                     72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json)
Hash identifier:          6avgSpUZh4JpGp50quCAYEXnCsFPTbq6/FMxa901yYU=
Subject key identifier:   1E:58:03:AA:5A:7C:BE:10:9B:83:F9:ED:08:6B:4D:7E:D1:2A:26:06
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       46C6E612EDB2BD940BB807DB37BF557E65AB97BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
Manifest number:          0513
Signing time:             Sun 26 Jul 2026 15:56:09 +0000
Manifest this update:     Sun 26 Jul 2026 15:51:09 +0000
Manifest next update:     Mon 27 Jul 2026 19:36:09 +0000
Files and hashes:         1: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=)
                          2: 3130332e3233382e3133312e302f32342d3234203d3e20323134363639.roa (hash: VZ/w51p0XzsZ2KBo9k7nosvrYyc5C/8zhxaZuBRhqSI=)
                          3: 3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa (hash: jaYCwKUfN1ahphjmuCip8Xd6KyVekTXlh6eiv1lr6wE=)
                          4: 3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa (hash: BOcBhnnvYV178kOTT3dELkNmbvpnN/z4847g0PI0+QA=)
                          5: 3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa (hash: /3IEW/L0xD5c+gjtCpGu3f4OnNilISvSgo/f0RfHoCg=)
                          6: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (hash: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=)
                          7: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=)
                          8: 34332e3235352e38322e302f32342d3234203d3e20383334.roa (hash: icPb5M6Y/CPwkJET9vdKSzs0dBOYlGKaymEwUa2ujW8=)
                          9: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=)
                          10: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: TFlz1WXidYkgqXMTQ3Mu6MEjLveKygoR5TOzIGYYvgo=)
                          11: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: XW5ROJXsHtfkngdlXEUs0YnhnPoR10fb35FCOeUkreg=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 19:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c6:e6:12:ed:b2:bd:94:0b:b8:07:db:37:bf:55:7e:65:ab:97:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Jul 26 15:51:09 2026 GMT
            Not After : Jul 27 19:36:09 2026 GMT
        Subject: CN=1E5803AA5A7CBE109B83F9ED086B4D7ED12A2606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:1d:94:eb:82:ac:77:0b:2b:50:5c:82:3b:
                    74:83:58:b6:e9:d6:b4:97:d8:01:08:fe:1c:ac:cf:
                    e8:45:2b:a1:45:58:a5:b5:fc:cb:1a:10:4b:22:23:
                    57:44:8a:bb:74:d4:fe:2c:d0:c3:5f:f3:27:40:45:
                    c2:24:4c:e0:ad:57:0d:ee:a2:1a:ae:b3:3a:07:11:
                    f3:c0:69:23:3d:11:12:87:53:65:9a:7f:ac:80:5e:
                    b7:d5:51:0f:bc:a5:0c:23:1b:f5:d3:45:0f:0a:02:
                    82:c8:da:5d:5e:79:6d:0a:40:65:57:7c:84:bd:65:
                    bd:f0:b0:bf:e7:80:27:53:ed:76:de:c5:78:6b:0d:
                    ff:16:8e:4e:81:57:af:ef:ec:ea:bb:dc:ab:7a:28:
                    b9:60:28:77:bc:b0:7e:7a:30:a8:29:d0:a8:90:65:
                    03:85:b6:fa:ab:5b:45:d6:63:74:4c:b7:25:b6:b4:
                    42:48:f7:6f:90:77:9f:6c:2a:7f:45:bb:af:8e:00:
                    61:aa:aa:76:3d:ab:1a:ef:8b:c3:33:67:15:43:23:
                    90:cd:58:10:05:2a:d2:c4:0c:42:43:16:c3:da:f7:
                    7d:5b:61:36:54:36:05:f9:40:08:99:09:5d:f6:57:
                    6f:7b:be:a9:40:fc:d8:b4:19:39:94:e9:ab:b6:2e:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:58:03:AA:5A:7C:BE:10:9B:83:F9:ED:08:6B:4D:7E:D1:2A:26:06
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:16:bb:94:d4:18:7e:96:1c:bf:ea:63:35:10:a9:f2:85:91:
         df:95:50:81:13:ed:34:61:5e:3b:b4:ed:f7:0a:38:e9:f8:e0:
         df:5c:43:f9:35:ba:55:c3:0d:5e:1c:4f:34:d9:bf:8c:08:99:
         f1:e4:27:5d:5e:e5:ef:06:ab:77:32:5e:6a:34:a2:f1:cd:f7:
         02:ad:b8:b5:49:71:e5:4d:af:9e:fe:72:9f:cb:df:a1:24:87:
         96:a1:cd:b9:9c:1e:f6:2e:ff:8e:bf:b8:44:ea:aa:f0:34:be:
         19:a2:34:85:77:8d:5a:f3:70:2a:6f:8c:12:29:d4:af:4a:9f:
         43:01:36:0d:d5:62:7f:02:5e:0d:c7:87:7b:b0:7d:db:d4:9c:
         de:af:70:ea:1a:58:4a:4c:02:40:ec:0d:3d:9f:e7:ba:ae:54:
         74:73:2b:06:cc:00:98:b3:14:a2:f1:48:af:cc:5c:79:e8:9f:
         7f:40:a8:b6:03:d7:fc:62:66:86:3a:35:68:f0:8b:a5:31:48:
         47:30:db:3d:16:0c:9c:f5:0b:39:8e:6e:df:42:93:ef:00:69:
         aa:9b:f2:47:7a:c3:e4:61:06:26:0f:87:3b:26:7b:35:7e:73:
         a5:67:ff:80:a0:a9:20:b4:20:bc:fb:95:e8:83:a1:8d:e9:97:
         00:2a:db:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:25:10 2026 by rpki-client