Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
File:                     339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json)
Hash identifier:          y3GpnQzRCya+dOvEfO6aWp/V48dBJTVZK8Oft52ZfTw=
Subject key identifier:   0F:C0:03:86:3F:B3:7C:D9:65:F6:ED:FE:A5:B2:71:63:E7:16:3F:F5
Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
Certificate issuer:       /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Certificate serial:       47B7A8A55CA8EC460991FA58303208494B7B109A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
Manifest number:          ED
Signing time:             Mon 28 Apr 2025 11:44:53 +0000
Manifest this update:     Mon 28 Apr 2025 11:39:53 +0000
Manifest next update:     Tue 29 Apr 2025 13:18:53 +0000
Files and hashes:         1: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: 54NyPOVksKppQSv2JGzl+1S1L4rXg9sI0NJGI2uUnQs=)
                          2: 3130332e3232332e3138342e302f32332d3234203d3e20313531313036.roa (hash: CBbZdYOvzs1t+tqtDF6Ts0Z4cSe+M4/U5oUl3sp2oLk=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
                          rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 13:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b7:a8:a5:5c:a8:ec:46:09:91:fa:58:30:32:08:49:4b:7b:10:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
        Validity
            Not Before: Apr 28 11:39:53 2025 GMT
            Not After : Apr 29 13:18:53 2025 GMT
        Subject: CN=0FC003863FB37CD965F6EDFEA5B27163E7163FF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:50:9c:62:e4:92:4a:82:93:09:8d:2e:15:
                    83:8e:81:7a:31:66:4c:53:6f:60:9d:8e:1e:9c:86:
                    2c:8e:5d:7c:08:6a:9b:7b:79:95:2a:e2:3d:7a:b9:
                    87:c4:eb:6a:03:2e:98:08:88:13:d4:7b:ce:fe:96:
                    08:b5:5b:c0:ba:87:90:0f:7b:ea:83:0b:52:f2:88:
                    b2:36:53:75:b0:54:c2:bb:7d:85:81:86:28:e4:fa:
                    5d:12:10:4a:2b:4b:fa:ad:ec:e1:2f:94:ae:6a:09:
                    0a:8a:1e:50:31:a6:26:48:b5:8d:f9:57:f0:f7:0d:
                    72:6c:2f:83:c2:e5:a3:62:77:4a:ae:97:40:ac:d2:
                    1e:c8:73:45:7d:eb:be:2a:f3:45:58:11:87:16:21:
                    e7:c5:a9:07:a1:72:ed:8f:6e:66:37:b4:8a:a0:cf:
                    45:9c:67:0f:97:43:fb:36:2e:57:d5:b5:45:71:2f:
                    91:fb:fc:17:52:31:a8:91:f4:72:fc:52:45:f6:dc:
                    7f:f8:f1:09:f3:21:70:16:fe:82:8d:ec:e3:7f:ee:
                    64:a5:59:1e:6a:e5:de:24:cf:7a:83:65:f3:3b:7d:
                    24:77:80:8c:ed:8a:3e:04:20:d9:2b:66:f4:70:7b:
                    d2:20:91:04:0f:b2:77:ed:e8:b9:31:d0:b5:f0:16:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C0:03:86:3F:B3:7C:D9:65:F6:ED:FE:A5:B2:71:63:E7:16:3F:F5
            X509v3 Authority Key Identifier:
                keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d1:23:bd:a5:48:02:d8:0a:16:e4:c0:e0:43:43:d4:2e:7b:
         c1:1c:e7:84:c4:4c:da:bf:4a:95:2b:3c:32:33:c0:b0:6e:1f:
         6e:c1:f6:6a:9a:6a:34:7e:fa:88:9a:fb:83:cf:18:e8:d6:d7:
         0b:ce:c3:74:22:c1:d8:75:24:14:2b:14:6c:8e:8c:e0:62:f4:
         96:a4:e0:8a:c7:68:65:11:01:27:fd:a7:5e:7a:b3:0c:35:a5:
         6e:34:55:77:e3:93:df:78:e4:77:98:98:2e:a5:85:a0:c4:51:
         4b:e4:24:21:b8:e6:a6:d2:97:f1:91:b9:68:7d:2b:02:6e:83:
         60:7e:cd:6b:8c:42:69:ef:db:7f:ef:26:d0:cf:ea:28:9b:0e:
         df:9c:c2:e8:ae:ac:bd:59:cd:ea:f7:1c:ff:8f:41:46:8b:65:
         cb:03:37:0a:c6:3e:be:3c:7e:ab:eb:7a:ce:e8:3f:17:3d:03:
         46:3c:8e:94:a1:4b:08:96:fe:02:dd:8b:04:11:3b:75:2c:f4:
         18:1b:88:63:8f:73:3d:6c:67:d4:c4:27:19:80:e1:9f:77:de:
         f1:e8:21:eb:d9:b6:ae:b7:cc:a2:5c:52:4c:59:68:d6:25:29:
         34:f2:f5:3e:c3:41:30:ee:a2:37:87:fa:41:6e:53:ff:3c:8f:
         09:cf:b9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:31:47 2025 by rpki-client on console.sobornost.net