Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
File:                     339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json)
Hash identifier:          Hbyd/SqJ6vgdF9XkBLX8ZZEFb29xJl620Pxg0R+DQfE=
Subject key identifier:   EF:BB:B1:68:DA:3A:58:FC:4B:68:62:AC:4A:80:0F:1B:AE:E5:E4:DD
Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
Certificate issuer:       /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Certificate serial:       215EB4281360FA06D91664F97F325FCA415D4538
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
Manifest number:          02B7
Signing time:             Sun 05 Apr 2026 02:43:18 +0000
Manifest this update:     Sun 05 Apr 2026 02:38:18 +0000
Manifest next update:     Mon 06 Apr 2026 06:32:18 +0000
Files and hashes:         1: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: QwErCBmJ2NELt4BsYQ6NT1cO9d+V7RBmyJ+yLHQZDjs=)
                          2: 3130332e3232332e3138342e302f32332d3234203d3e20313335303237.roa (hash: g8Tw9Ss3ogaL2/E788moJ1DCuoJI7+nYIfSvQGup0po=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
                          rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Apr 2026 06:32:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5e:b4:28:13:60:fa:06:d9:16:64:f9:7f:32:5f:ca:41:5d:45:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
        Validity
            Not Before: Apr  5 02:38:18 2026 GMT
            Not After : Apr  6 06:32:18 2026 GMT
        Subject: CN=EFBBB168DA3A58FC4B6862AC4A800F1BAEE5E4DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5a:7e:bb:33:e0:1a:61:3c:1f:21:ce:db:d4:
                    28:c9:dd:b3:b0:df:a4:bc:86:38:40:4e:7b:27:a7:
                    32:d4:99:03:b6:ec:b9:28:7d:d0:58:3d:ad:89:e4:
                    71:80:20:16:3e:ed:32:ae:40:91:0a:03:06:f3:ff:
                    cf:07:16:02:07:78:cb:3b:32:40:69:f6:bd:56:3b:
                    ea:3c:7b:98:be:c6:c9:79:1a:a0:2c:12:36:6d:8a:
                    61:40:24:c3:9a:2b:38:57:b8:9f:eb:60:99:3a:97:
                    c1:a5:63:61:d4:67:d1:6d:95:09:63:66:73:f8:19:
                    4c:f8:29:54:1b:3e:27:1e:8d:af:5f:28:e6:55:92:
                    36:42:07:0c:48:eb:cc:95:34:35:df:cb:b9:cf:19:
                    fa:77:49:52:8e:a4:19:ab:cd:49:18:c2:46:c9:d2:
                    d7:d7:e0:44:19:53:af:6f:ce:ea:78:5c:c1:b3:42:
                    0f:9a:fd:ba:5c:d9:d3:70:e3:f0:d4:e3:e9:bb:44:
                    4d:06:c7:37:3f:c5:b1:02:d2:9b:77:ee:2e:40:40:
                    27:a7:2d:71:da:32:86:8c:f6:4c:83:28:ca:23:f1:
                    a0:03:f5:db:78:29:8e:33:21:c6:d6:72:34:63:b3:
                    34:43:0f:74:9c:79:49:3c:24:97:94:28:1b:73:f5:
                    c9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BB:B1:68:DA:3A:58:FC:4B:68:62:AC:4A:80:0F:1B:AE:E5:E4:DD
            X509v3 Authority Key Identifier:
                keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:53:5a:4a:61:6c:48:e4:67:66:f4:11:7a:bf:a5:93:ab:bb:
         66:42:65:e3:8c:20:12:f1:6a:56:e6:4d:57:17:2a:c1:d9:68:
         78:2e:04:e5:e6:07:81:fe:3f:18:44:2a:82:d6:fb:f2:2a:bb:
         12:8e:5b:78:58:ff:e0:da:f7:32:f8:b0:f4:ce:63:f6:bc:d0:
         03:0c:13:58:ab:1a:8a:c3:8f:a5:2e:e6:da:af:42:73:83:01:
         29:6d:19:e0:1e:be:5e:6a:b6:dc:56:e3:ca:bd:9a:c4:33:58:
         29:a9:47:bc:0d:68:4b:fa:58:9f:c4:65:af:e7:c2:b3:e4:53:
         41:e6:35:2a:b1:f5:49:a7:67:c9:36:85:1a:eb:58:aa:f8:d9:
         0d:bb:b5:05:e6:8b:30:7f:b6:e1:48:2a:2c:6f:fa:ac:54:ba:
         47:20:be:9a:7e:db:a3:47:d0:48:84:56:79:3d:6f:e3:d6:81:
         db:b6:ce:df:81:b8:0a:96:b3:f8:d9:2f:78:ea:0d:90:38:89:
         21:80:3d:29:d1:34:63:d8:40:95:68:ca:84:a9:ec:c2:73:f7:
         bc:fd:99:30:9c:ef:2e:b5:50:0f:1f:fa:0f:3e:69:ad:7b:f4:
         f6:8a:f3:b1:42:63:4f:96:d8:32:3a:ee:36:3c:d4:46:74:63:
         8e:1a:65:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:07:12 2026 by rpki-client