Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
File:                     47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft (raw, json)
Hash identifier:          mUz9xpza/rF6PIpdkGJzlbQ/DKc3lZshmfSc/UIP4mk=
Subject key identifier:   61:13:6F:B8:38:8E:D6:C6:D5:08:A0:9C:6A:03:20:3B:F5:68:10:C9
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Certificate issuer:       /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial:       308C15AD45CE777BABBC0B19DA19494AAB95CB0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
Manifest number:          017C
Signing time:             Sun 05 Apr 2026 15:43:05 +0000
Manifest this update:     Sun 05 Apr 2026 15:38:05 +0000
Manifest next update:     Mon 06 Apr 2026 19:37:05 +0000
Files and hashes:         1: 3130332e3234382e35312e302f32342d3234203d3e203234333232.roa (hash: bSqcxnKKgmOfqBVl8Zd8fqJ4RKh8h8c2vzTx0i6ZW9s=)
                          2: 323430313a323036303a323030303a3a2f34382d3438203d3e203234333232.roa (hash: TjbV874XBMp8S2IZrVBVTYPXUStYMsZKMyuXH+6WAKg=)
                          3: AS24322.asa (hash: KNZZKBKdNW4ly3QdWaLH+5z3SRvC6C/GJR2bjdfprj4=)
                          4: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl (hash: dGWnrcPqLmVjFOACKWQKaP54w6t+Cx/cj21PrUUzE94=)
                          5: DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer (hash: ffBGHZNa0/zu9DtnY2XbTiKsF4UkeXAs1v9jbG4kO1Y=)
                          6: 3130332e3234382e35302e302f32342d3234203d3e203234333232.roa (hash: Rak0PT2vHeUTkciSopyQRGRucDafeHmmWv2PLR2WrPU=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Apr 2026 19:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8c:15:ad:45:ce:77:7b:ab:bc:0b:19:da:19:49:4a:ab:95:cb:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
        Validity
            Not Before: Apr  5 15:38:05 2026 GMT
            Not After : Apr  6 19:37:05 2026 GMT
        Subject: CN=61136FB8388ED6C6D508A09C6A03203BF56810C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:29:11:ac:61:33:e6:2a:78:f6:d9:74:2d:78:
                    f3:b6:9d:c6:d8:2d:08:5b:8b:28:f4:ca:a9:06:c8:
                    1f:2d:d6:bd:d5:d5:e6:f9:c1:f5:c0:d2:92:94:2a:
                    a7:12:96:d8:0f:51:18:fa:eb:68:ff:eb:fb:06:48:
                    64:3e:cd:0d:d3:da:bb:73:c1:e1:49:fe:c2:04:3e:
                    1c:21:c7:04:00:ae:7c:41:9a:e0:2d:15:30:a3:7d:
                    83:05:f8:78:e2:60:92:e0:27:74:74:b6:c0:93:4c:
                    07:01:48:f9:b9:d2:00:39:48:4f:b5:3a:71:d2:b3:
                    18:a0:31:43:1a:51:e6:5a:47:cc:0d:b6:f0:62:d3:
                    27:25:b6:c8:be:cf:46:ae:c0:f9:0e:4b:41:a3:b7:
                    2b:64:6e:26:60:57:cb:ad:71:11:68:02:94:82:a0:
                    68:ec:fe:db:7c:c9:ca:d1:b7:34:f5:ee:30:f6:de:
                    0d:5a:24:52:3e:3e:8e:b9:1b:c7:54:13:45:4f:9c:
                    70:5d:f0:f3:40:f4:2d:75:5e:92:e6:b3:d0:3b:da:
                    83:14:ec:7a:27:ed:34:de:7e:47:71:36:22:0b:d3:
                    5d:e1:fe:df:f6:05:22:b0:ca:7a:48:6d:cd:89:5f:
                    8e:9d:ea:94:ef:08:1d:36:00:5f:99:2a:bd:01:d6:
                    64:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:13:6F:B8:38:8E:D6:C6:D5:08:A0:9C:6A:03:20:3B:F5:68:10:C9
            X509v3 Authority Key Identifier:
                keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:1d:f0:31:59:f1:c4:54:28:df:2e:32:97:98:a9:6e:21:b6:
         10:05:a1:14:d9:2e:42:a7:a8:5c:ed:c5:15:af:b3:10:77:89:
         51:06:8b:b3:ff:ef:9f:bb:f6:59:47:ad:37:83:78:6c:0a:16:
         b3:31:ba:ce:42:6c:77:51:bb:f2:fe:52:4c:64:bb:10:7d:20:
         97:7a:7b:85:f4:5a:16:b7:31:df:b6:73:dc:81:50:34:20:99:
         74:05:8d:d6:a4:92:68:29:80:1e:5f:e5:92:2f:12:c1:bf:de:
         89:22:24:99:10:ab:ae:eb:23:bc:12:c4:46:17:34:d7:1b:90:
         49:53:fd:4b:28:c0:5f:f2:9d:a2:2a:b9:8e:da:86:13:76:d0:
         b3:5c:0f:6d:5b:d0:03:0f:15:40:39:c9:9c:47:32:5e:60:2c:
         e0:e4:a3:50:eb:ec:1b:e5:71:36:b6:ac:d0:82:1f:04:14:76:
         d9:7b:cb:75:a6:37:a3:4f:dc:ce:0a:f8:6d:38:2c:3d:a4:7a:
         f7:46:0d:24:2d:1e:45:7e:a5:bb:bb:42:25:f6:b8:28:0d:55:
         11:2c:66:29:c0:f2:0d:aa:9c:8d:45:33:a0:e0:0e:3f:61:98:
         0e:6c:a9:0f:96:1a:72:bf:0f:57:a1:95:30:95:93:47:e7:42:
         30:81:94:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:48 2026 by rpki-client