Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
File:                     339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json)
Hash identifier:          yK6PpoHeerlGL1EPZGytgYzXHZNwFMFxiC0jQdZJrok=
Subject key identifier:   14:02:33:64:2D:BF:D8:2D:26:13:39:4A:66:9B:72:08:D5:EE:2A:20
Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
Certificate issuer:       /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Certificate serial:       1DAD3231456C965D69524D1D5D9A029C902F2D59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
Manifest number:          0161
Signing time:             Thu 24 Jul 2025 01:59:52 +0000
Manifest this update:     Thu 24 Jul 2025 01:54:52 +0000
Manifest next update:     Fri 25 Jul 2025 03:05:52 +0000
Files and hashes:         1: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: eQcnB6SyKnmEOkqA/ZoYGT9Ht0eUgyoYmdseJgsVXB4=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
                          rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 03:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ad:32:31:45:6c:96:5d:69:52:4d:1d:5d:9a:02:9c:90:2f:2d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
        Validity
            Not Before: Jul 24 01:54:52 2025 GMT
            Not After : Jul 25 03:05:52 2025 GMT
        Subject: CN=140233642DBFD82D2613394A669B7208D5EE2A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:49:d5:4a:dd:a8:94:21:88:55:bb:9e:0e:
                    fa:a6:bc:33:f4:7d:1b:93:51:87:ef:81:e3:bd:77:
                    e0:10:25:96:86:dc:a8:dc:20:b6:1e:92:45:49:8d:
                    7f:2a:64:8e:3a:c1:f9:22:c2:0b:1c:5a:cb:77:a0:
                    8d:0f:cb:7d:15:49:19:95:75:2a:d5:97:41:a3:73:
                    b4:f1:13:34:ce:b0:23:c5:37:6f:5e:7a:81:99:af:
                    cd:8c:c5:ed:1a:5f:ed:7c:bb:5e:ab:dc:44:51:f9:
                    4f:a1:62:18:92:d2:5d:7a:cd:a5:c8:8c:66:59:b5:
                    f8:86:42:56:77:21:b9:a2:80:d2:ae:10:98:a0:ac:
                    f2:80:d9:58:38:e0:f5:8e:33:e1:69:6b:43:c2:fc:
                    1a:5f:6a:ac:b2:35:e3:6a:af:3e:58:0e:48:80:28:
                    01:2a:bd:0e:1d:e9:f4:21:b6:01:da:d5:94:9d:d7:
                    14:85:f4:61:4c:a5:3a:41:ca:27:fb:b0:b3:7d:02:
                    a9:22:d7:0c:93:a6:63:06:97:11:6c:41:4c:52:f2:
                    d4:71:f0:b7:66:b7:f7:f6:61:a6:5c:d8:1c:b1:36:
                    11:7c:6f:d8:6d:ca:c8:7f:21:a8:38:7b:c6:7e:4c:
                    23:cc:b9:a9:c6:6e:49:6f:54:82:3a:3b:f5:a0:e4:
                    af:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:02:33:64:2D:BF:D8:2D:26:13:39:4A:66:9B:72:08:D5:EE:2A:20
            X509v3 Authority Key Identifier:
                keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ff:73:cd:06:6f:75:f1:f7:15:bd:1b:c6:45:2c:61:53:e6:
         d8:14:9d:38:c1:eb:06:f3:f9:11:b0:8c:79:50:f0:5c:54:b5:
         a2:7c:98:dc:14:88:4e:5b:84:d7:ed:56:8b:d7:b3:bc:49:c4:
         50:91:25:3f:e6:ec:c5:61:b2:b4:c0:89:ce:82:22:e8:69:ed:
         1d:85:9f:49:96:e7:92:ae:2c:5f:61:29:9b:f8:d9:ff:fa:89:
         c3:36:f2:a0:d8:94:32:49:71:ef:74:67:63:4d:e1:3a:15:05:
         ec:25:93:f1:ad:c7:8a:59:a1:f5:f9:e7:3e:b6:83:ed:7c:5f:
         f6:3a:f9:75:8a:7c:55:86:26:56:4c:e1:c2:ff:b1:3b:2a:66:
         e9:89:19:cf:45:0e:2b:b6:3a:67:d1:3c:6c:ca:b4:28:77:37:
         10:3d:45:70:c0:7e:e6:3f:32:60:55:d9:ee:63:ef:24:92:86:
         4e:9f:6c:f9:3b:7e:94:f3:80:09:7f:d9:20:c4:1b:29:80:09:
         a0:a8:d5:9b:2b:f3:e3:24:95:6c:72:83:81:16:c3:fc:ff:97:
         fa:c0:f5:e4:74:cb:59:b7:e7:b7:5e:ff:49:06:37:66:5f:49:
         ad:c6:3f:a9:ab:ca:45:da:bc:33:05:fa:16:db:73:26:75:ae:
         6b:06:32:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:59:52 2025 by rpki-client