Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft
File:                     7A443962573EC01D5131651F90F46DA19AFC21D2.mft (raw, json)
Hash identifier:          VljUTLadzsp1+2le7eyjadONWdQ3F+xwb1rnFqgkiiA=
Subject key identifier:   B7:F8:12:98:13:82:72:BD:2A:33:9D:08:BB:B8:73:84:4D:74:CB:72
Authority key identifier: 7A:44:39:62:57:3E:C0:1D:51:31:65:1F:90:F4:6D:A1:9A:FC:21:D2
Certificate issuer:       /CN=A917447B0000/serialNumber=7A443962573EC01D5131651F90F46DA19AFC21D2
Certificate serial:       23820D85E112AC43703F8E3828720054A53E7457
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ekQ5Ylc-wB1RMWUfkPRtoZr8IdI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft
Manifest number:          012F
Signing time:             Mon 28 Apr 2025 20:42:56 +0000
Manifest this update:     Mon 28 Apr 2025 20:37:56 +0000
Manifest next update:     Tue 29 Apr 2025 23:32:56 +0000
Files and hashes:         1: 323030313a6466343a353134303a3a2f34342d3438203d3e20313533333436.roa (hash: vq1Dx7sG4WRtaFPZjc9wFRugfLv/UBgy5UEajCDuBjc=)
                          2: 7A443962573EC01D5131651F90F46DA19AFC21D2.crl (hash: qbQUpVMEfvp/mHkj2iQjXijNC8T2sSpDTGFhKTE95c0=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.crl
                          rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ekQ5Ylc-wB1RMWUfkPRtoZr8IdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 23:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:82:0d:85:e1:12:ac:43:70:3f:8e:38:28:72:00:54:a5:3e:74:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917447B0000, serialNumber=7A443962573EC01D5131651F90F46DA19AFC21D2
        Validity
            Not Before: Apr 28 20:37:56 2025 GMT
            Not After : Apr 29 23:32:56 2025 GMT
        Subject: CN=B7F81298138272BD2A339D08BBB873844D74CB72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e0:06:fe:2d:60:91:26:b9:3b:00:c5:75:87:
                    fc:d9:81:19:8d:1a:e6:48:df:b9:b1:a1:ff:8f:12:
                    a2:65:e9:c3:93:46:1e:2f:13:9f:3e:f0:b4:c0:b9:
                    41:8e:31:bc:52:0b:7f:0e:23:83:6d:0f:64:00:53:
                    34:7f:8e:a2:5d:8e:16:c1:4b:3d:83:e9:44:5a:29:
                    bf:8e:86:88:6a:32:0e:34:4c:08:ff:a4:06:98:26:
                    b6:ed:a8:b8:eb:5f:a4:99:7d:55:71:e1:24:e8:78:
                    27:79:88:ec:4a:82:fa:f8:00:0c:be:a9:3c:22:19:
                    d8:42:db:7d:b1:ed:48:78:f7:ff:8c:d0:e9:89:c6:
                    84:7d:44:dc:29:de:2b:b3:88:4b:2f:0a:d6:0e:2a:
                    a5:e9:1a:de:e7:ea:24:24:61:a2:f6:64:17:62:05:
                    0a:0f:b7:86:cf:ba:46:76:4d:bf:7c:b3:a7:80:ec:
                    da:55:ac:56:c4:bc:fa:cc:91:ed:d0:1d:73:4b:50:
                    cf:b0:db:64:03:76:d4:61:89:45:80:09:5b:d0:72:
                    8d:a5:7f:96:2c:32:86:77:7b:20:56:96:11:f4:74:
                    51:01:72:7b:a8:d0:6e:2e:ea:e1:2b:a7:3d:d3:c1:
                    2d:a6:83:d2:66:c7:d8:0d:be:7d:b7:4d:2b:64:20:
                    d1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F8:12:98:13:82:72:BD:2A:33:9D:08:BB:B8:73:84:4D:74:CB:72
            X509v3 Authority Key Identifier:
                keyid:7A:44:39:62:57:3E:C0:1D:51:31:65:1F:90:F4:6D:A1:9A:FC:21:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ekQ5Ylc-wB1RMWUfkPRtoZr8IdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c3:61:a5:8a:86:88:1b:8c:c5:16:83:da:f4:cd:09:f1:5c:
         a2:69:c4:65:a9:4b:b9:b3:48:3d:18:39:c0:b4:74:61:82:35:
         97:3e:89:57:2a:b7:1e:e3:c4:28:18:cb:c2:c1:00:b6:6f:bd:
         8f:05:7c:40:2a:fa:2a:77:09:f4:36:74:f9:03:9c:26:70:78:
         e1:bb:b8:2e:bc:15:64:69:bb:1c:b0:43:ea:86:14:89:96:b1:
         8d:dc:de:fd:a0:05:1b:cb:77:2b:52:a0:70:66:ff:45:49:cb:
         4b:72:82:36:9b:eb:e0:78:e4:25:78:ab:73:18:c1:4b:d8:b5:
         3b:f2:97:af:a7:4b:a1:1d:6d:f8:0a:af:4d:e8:df:47:f5:a6:
         16:79:5d:2e:05:24:84:72:a3:18:6b:c2:47:3a:31:ef:52:40:
         36:0e:01:c0:0f:18:6d:b1:d9:d8:7b:c3:3c:25:dd:66:78:08:
         0f:92:26:3c:84:00:83:4b:e7:8d:b5:12:13:00:21:96:63:c3:
         d6:39:5e:fe:e3:ce:18:02:39:4a:5a:30:90:57:88:34:e9:aa:
         4f:c7:9a:66:c2:0a:2d:3b:6a:13:0d:76:93:b6:57:4d:83:ef:
         7d:3d:4c:4f:3d:16:f7:31:51:5b:6c:f5:04:70:26:ea:13:19:
         b3:ef:e8:56
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUI4INheESrENwP444KHIAVKU+dFcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyg3QTQ0Mzk2MjU3
M0VDMDFENTEzMTY1MUY5MEY0NkRBMTlBRkMyMUQyMB4XDTI1MDQyODIwMzc1NloX
DTI1MDQyOTIzMzI1NlowMzExMC8GA1UEAxMoQjdGODEyOTgxMzgyNzJCRDJBMzM5
RDA4QkJCODczODQ0RDc0Q0I3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKHgBv4tYJEmuTsAxXWH/NmBGY0a5kjfubGh/48SomXpw5NGHi8Tnz7wtMC5
QY4xvFILfw4jg20PZABTNH+Ool2OFsFLPYPpRFopv46GiGoyDjRMCP+kBpgmtu2o
uOtfpJl9VXHhJOh4J3mI7EqC+vgADL6pPCIZ2ELbfbHtSHj3/4zQ6YnGhH1E3Cne
K7OISy8K1g4qpeka3ufqJCRhovZkF2IFCg+3hs+6RnZNv3yzp4Ds2lWsVsS8+syR
7dAdc0tQz7DbZAN21GGJRYAJW9ByjaV/liwyhnd7IFaWEfR0UQFye6jQbi7q4Sun
PdPBLaaD0mbH2A2+fbdNK2Qg0e0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBS3+BKY
E4JyvSoznQi7uHOETXTLcjAfBgNVHSMEGDAWgBR6RDliVz7AHVExZR+Q9G2hmvwh
0jAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMS83QTQ0Mzk2
MjU3M0VDMDFENTEzMTY1MUY5MEY0NkRBMTlBRkMyMUQyLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9la1E1WWxjLXdC
MVJNV1Vma1BSdG9acjhJZEkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3
QjAwMDAvMS83QTQ0Mzk2MjU3M0VDMDFENTEzMTY1MUY5MEY0NkRBMTlBRkMyMUQy
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEArcNhpYqGiBuMxRaD2vTNCfFcomnEZalLubNIPRg5wLR0YYI1
lz6JVyq3HuPEKBjLwsEAtm+9jwV8QCr6KncJ9DZ0+QOcJnB44bu4LrwVZGm7HLBD
6oYUiZaxjdze/aAFG8t3K1KgcGb/RUnLS3KCNpvr4HjkJXircxjBS9i1O/KXr6dL
oR1t+AqvTejfR/WmFnldLgUkhHKjGGvCRzox71JANg4BwA8YbbHZ2HvDPCXdZngI
D5ImPIQAg0vnjbUSEwAhlmPD1jle/uPOGAI5SlowkFeINOmqT8eaZsIKLTtqEw12
k7ZXTYPvfT1MTz0W9zFRW2z1BHAm6hMZs+/oVg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:50 2025 by rpki-client on console.sobornost.net