Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
File:                     339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json)
Hash identifier:          ZcfForS9FMh7N/QdwhMTHNSazMMyxD8Jypx0C5vZSuM=
Subject key identifier:   2E:F4:2B:8F:75:FC:8D:B5:A4:58:C5:7F:87:C5:93:D0:E9:A9:59:D1
Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
Certificate issuer:       /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Certificate serial:       3BB8F665564822842C8CD95A1D77F1D467D3C1CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
Manifest number:          015F
Signing time:             Tue 22 Jul 2025 13:49:52 +0000
Manifest this update:     Tue 22 Jul 2025 13:44:52 +0000
Manifest next update:     Wed 23 Jul 2025 15:13:52 +0000
Files and hashes:         1: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: iRPKYwLZydvd99FvhMB1CnzpVfuD+GV59TJZxG84pjU=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
                          rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 15:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b8:f6:65:56:48:22:84:2c:8c:d9:5a:1d:77:f1:d4:67:d3:c1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
        Validity
            Not Before: Jul 22 13:44:52 2025 GMT
            Not After : Jul 23 15:13:52 2025 GMT
        Subject: CN=2EF42B8F75FC8DB5A458C57F87C593D0E9A959D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fe:73:d4:d5:51:b9:37:0a:e8:7b:38:b6:00:
                    ba:e9:a1:03:5a:7f:e1:6c:9a:fd:41:28:8e:50:8f:
                    32:fa:ac:ae:27:bc:f1:0a:60:50:b3:ab:e6:e3:4d:
                    db:2a:70:85:21:a6:e1:6b:38:47:d3:cc:97:11:af:
                    a5:46:ec:72:76:ff:14:38:03:56:02:06:b9:ec:d7:
                    00:88:9f:9a:b7:b0:45:77:1e:f8:93:16:d9:31:0e:
                    3d:4d:b9:1f:53:6a:8b:e7:9e:cf:96:6a:4c:2c:1f:
                    be:0a:47:b3:78:46:9e:19:ec:09:7b:4e:c0:a2:04:
                    e2:f0:06:77:20:65:28:2f:94:1e:e3:ad:74:6c:e2:
                    b8:c3:58:58:d3:9c:0f:24:c9:70:46:e3:bf:34:da:
                    55:8a:23:a1:79:1c:47:41:4e:e4:47:1c:c0:22:0c:
                    e9:71:a1:dc:d1:bd:38:e0:34:b4:62:83:67:36:35:
                    63:09:2b:12:14:e0:43:a1:1f:e3:3c:31:75:e8:f9:
                    a1:d7:f3:0b:e7:01:90:4c:26:1c:30:fb:a3:0f:22:
                    9f:9d:96:80:29:0e:36:5f:69:53:06:6d:d7:a3:a3:
                    99:7b:d6:e0:0d:c4:90:f0:8e:b2:39:ec:23:28:42:
                    65:b7:b5:18:43:f0:87:41:05:49:be:cb:9f:4a:79:
                    2b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F4:2B:8F:75:FC:8D:B5:A4:58:C5:7F:87:C5:93:D0:E9:A9:59:D1
            X509v3 Authority Key Identifier:
                keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:65:1b:37:29:42:00:be:72:e0:18:fa:e8:f7:20:51:8f:31:
         31:e4:bf:4b:3d:77:5b:e3:2f:a3:9a:1e:2a:66:a1:20:d6:0c:
         6e:76:1d:63:81:1f:e3:b0:cb:3e:8d:36:a8:c0:1d:24:f5:af:
         16:32:0b:0d:c3:a7:71:6d:d6:61:cf:ff:43:1c:5d:d3:b5:3f:
         de:4b:c1:b7:ce:ac:4d:24:48:48:02:d2:e6:87:86:85:83:59:
         d9:68:2f:0a:90:c9:e0:ae:be:0e:c7:63:ee:38:97:f5:ea:ee:
         d2:82:fb:60:f3:22:9b:2b:c0:9c:03:d8:ef:f7:10:4a:84:f4:
         cf:ef:67:ed:28:46:68:f3:3a:a1:a1:ad:94:e0:cf:b6:99:ab:
         b4:5c:37:21:b7:a2:ad:45:4b:6b:8e:de:7a:bc:95:81:11:da:
         d9:4b:e1:79:a1:f6:12:ed:8e:45:7f:76:48:8a:be:aa:0e:06:
         de:3e:64:f4:50:b3:27:03:38:0b:e9:e7:b9:a7:95:2f:6e:47:
         47:45:bd:a4:d1:84:f3:f7:14:04:6a:d3:5e:38:2d:0d:43:c9:
         8e:c6:7f:41:0a:ab:96:7b:eb:85:8b:c2:e2:2e:95:96:a4:85:
         c4:a3:2d:ae:7b:ee:4c:9b:0d:13:d4:e0:ab:41:bd:a4:d0:5e:
         4d:2e:41:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:17:28 2025 by rpki-client