Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
File:                     47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft (raw, json)
Hash identifier:          XVX92nnfkjSkkRpF0fk5HwuToc7eTFEPVrlZsWYydW4=
Subject key identifier:   25:99:0F:71:FD:5F:59:FE:32:60:B0:61:CD:1D:FB:B6:73:17:7B:2B
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Certificate issuer:       /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial:       2DC8F43133FC3BC20B40E7B6D0EE1D515B672C20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
Manifest number:          98
Signing time:             Mon 03 Nov 2025 20:12:59 +0000
Manifest this update:     Mon 03 Nov 2025 20:07:59 +0000
Manifest next update:     Tue 04 Nov 2025 22:57:59 +0000
Files and hashes:         1: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (hash: wCmAihkuPVll63UXoUNHhBYaZUWeSkIeoTLZCg0AKF4=)
                          2: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (hash: EZOcjod0P020aSaAKcSt3wLs5i7xD2mHOPcCy2SsTv8=)
                          3: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl (hash: WI9fiwTamMZOiXA5PvMt+wE+kMOwEPRmPeFzexs9O/M=)
                          4: 3130332e3234382e35302e302f32342d3234203d3e203234333232.roa (hash: Rak0PT2vHeUTkciSopyQRGRucDafeHmmWv2PLR2WrPU=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Nov 2025 22:57:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c8:f4:31:33:fc:3b:c2:0b:40:e7:b6:d0:ee:1d:51:5b:67:2c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
        Validity
            Not Before: Nov  3 20:07:59 2025 GMT
            Not After : Nov  4 22:57:59 2025 GMT
        Subject: CN=25990F71FD5F59FE3260B061CD1DFBB673177B2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:31:fd:f3:63:6a:46:5c:f8:a8:bb:a1:6c:28:
                    68:28:49:db:11:ab:d7:58:87:9d:dd:51:52:f5:8e:
                    1b:f8:62:75:23:aa:9d:ed:1c:66:c9:b8:8e:b7:42:
                    51:8d:1f:65:17:37:2d:8a:7b:68:29:e5:d5:0a:cc:
                    49:1a:ab:70:d1:98:11:19:3a:99:2f:8b:ae:0b:b0:
                    4f:f5:c3:b6:19:3a:d9:eb:63:c5:e4:6e:20:f0:92:
                    41:97:d0:e8:95:c1:9f:26:fe:28:63:62:1e:8f:d7:
                    2f:29:1a:3e:03:ea:6d:cf:7b:fd:26:e2:c1:aa:f1:
                    e0:b4:33:da:51:14:d0:e3:ca:a1:2c:09:e6:7a:66:
                    91:30:9e:7f:77:c2:d3:0f:79:f0:f4:4b:38:36:1d:
                    92:53:c6:b6:81:cd:25:15:47:cb:9c:e0:36:44:80:
                    44:49:13:94:00:c1:85:fb:f1:5f:fe:48:c8:b0:68:
                    f6:9b:0a:4b:9b:c6:12:a5:23:ea:3b:d1:be:76:35:
                    fa:b8:45:e1:ad:06:74:3f:a9:03:81:d9:0a:77:17:
                    23:f6:26:1c:a3:fd:07:8b:f0:f1:a3:26:28:7e:fd:
                    00:b6:8b:ce:1a:03:fc:f9:2b:b6:e3:82:99:06:dd:
                    bb:1d:05:93:97:88:ba:9d:f9:68:72:6c:16:cf:4e:
                    7b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:99:0F:71:FD:5F:59:FE:32:60:B0:61:CD:1D:FB:B6:73:17:7B:2B
            X509v3 Authority Key Identifier:
                keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e1:e7:36:f5:18:1c:ac:64:0b:cb:6d:79:cc:b2:8f:17:78:
         4d:11:ca:93:16:f7:0b:42:e3:96:7d:e1:47:a7:6a:e5:16:d7:
         0b:83:2c:64:4b:70:21:8f:a0:5f:fe:18:a4:8d:1c:74:bb:e9:
         9c:d2:17:c7:99:e5:5c:6c:70:d4:2f:2d:7e:09:a6:b0:eb:32:
         42:83:9d:23:3c:6a:03:60:fd:15:a5:69:7b:63:3a:a6:19:73:
         d6:bc:ca:6d:b2:99:dd:0b:29:f5:52:67:7b:c2:ea:55:c7:1b:
         6c:e0:ca:3c:61:26:5e:d4:9c:64:cb:63:f4:45:e0:33:60:de:
         dd:60:b2:6f:7c:5d:e5:0f:0b:bd:2f:0b:17:ee:e8:c6:17:2c:
         70:ec:d6:c0:a9:f1:a3:16:a5:dd:1b:57:1b:00:2f:46:b2:b2:
         1f:cc:04:86:7d:c5:96:02:1c:61:9b:98:cc:cc:f2:84:dc:a1:
         f7:5a:05:b0:92:3c:60:92:08:c0:08:30:32:ae:a3:7b:86:66:
         11:52:56:ce:45:e5:0f:1a:61:17:79:be:3e:db:e3:f1:26:d6:
         4c:e3:51:65:ce:4b:22:bd:b3:90:ca:d1:98:45:c6:5f:6d:5f:
         2e:c8:52:d0:a6:d4:d7:79:a2:3f:bb:46:9a:08:2d:b5:69:eb:
         95:bd:0f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:04:13 2025 by rpki-client