Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
File:                     339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json)
Hash identifier:          RnOur/tYMzF1uOFQGplM2OI9E0WIzsm4eXrHQq/q3KE=
Subject key identifier:   A9:ED:96:6B:07:51:C0:69:0D:52:A3:F6:10:2A:7E:26:5B:A2:4A:D4
Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
Certificate issuer:       /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Certificate serial:       19AA45B5B56E714950EFFFE91F972DB4C36CEDAD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
Manifest number:          0349
Signing time:             Thu 23 Jul 2026 20:01:09 +0000
Manifest this update:     Thu 23 Jul 2026 19:56:09 +0000
Manifest next update:     Fri 24 Jul 2026 23:56:09 +0000
Files and hashes:         1: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: MS5tYEoBlwUz9SQKejknSC1GHZ0jEIjiqvtKFmg9XH0=)
                          2: 3130332e3232332e3138342e302f32332d3234203d3e20313335303237.roa (hash: g8Tw9Ss3ogaL2/E788moJ1DCuoJI7+nYIfSvQGup0po=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
                          rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 23:56:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:aa:45:b5:b5:6e:71:49:50:ef:ff:e9:1f:97:2d:b4:c3:6c:ed:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
        Validity
            Not Before: Jul 23 19:56:09 2026 GMT
            Not After : Jul 24 23:56:09 2026 GMT
        Subject: CN=A9ED966B0751C0690D52A3F6102A7E265BA24AD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:6b:d0:a4:fe:66:25:6c:45:b8:d4:9e:e7:
                    22:9d:5e:73:48:dd:d9:aa:81:2f:cf:65:b4:13:84:
                    f6:7c:5c:0f:81:3c:e6:3a:2c:3e:eb:2e:d2:60:ff:
                    5a:01:a0:ad:64:a6:0a:62:96:ab:8e:97:d2:f4:01:
                    07:dc:37:4e:c8:ee:5d:73:c3:9a:78:34:45:5d:a3:
                    94:ca:28:d6:9d:20:42:2d:bc:e5:7a:76:00:b4:55:
                    bd:7f:72:ee:45:be:8d:cd:b1:9c:a7:75:3a:cb:e6:
                    e5:9d:34:24:77:3a:a0:e9:13:b0:49:4c:02:91:17:
                    8a:45:cb:78:1e:a7:76:22:a6:83:56:7b:64:a6:f8:
                    d7:58:31:38:28:54:d8:f9:d9:3a:7b:aa:23:ca:8d:
                    ff:4d:41:27:d1:12:16:37:b2:b3:6a:11:f6:09:8a:
                    df:8b:0c:e5:e1:1c:58:35:35:5d:15:b3:91:1e:76:
                    df:d0:82:76:b3:6c:eb:33:47:2d:9c:3a:d9:1c:01:
                    cf:95:33:26:b5:9f:0c:3f:f4:1f:6b:50:13:12:ea:
                    cb:f8:d8:17:4a:40:69:d9:8c:45:15:ed:bb:e2:af:
                    c3:19:51:b3:fe:72:dd:f2:2c:31:7c:a4:9c:f1:45:
                    63:21:c9:0d:fb:97:d2:71:14:37:02:e9:44:7d:87:
                    bb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:ED:96:6B:07:51:C0:69:0D:52:A3:F6:10:2A:7E:26:5B:A2:4A:D4
            X509v3 Authority Key Identifier:
                keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:40:80:61:7e:3a:3d:23:28:66:1a:31:91:e7:36:1f:ca:8f:
         ae:59:60:41:6c:9e:70:a8:a1:c7:61:b0:12:bc:3a:2e:8c:a0:
         48:e7:af:20:33:7e:63:02:e7:5f:9e:09:bf:63:60:f7:4f:2f:
         d7:b1:73:f3:29:d7:5f:63:a4:df:cd:e2:8c:4a:87:2f:30:74:
         18:61:91:9c:c1:1e:d2:1e:84:06:09:30:89:ea:62:cc:10:52:
         47:50:1d:6c:a3:91:5a:30:64:73:c6:f3:97:ca:2d:3f:48:93:
         8a:97:af:75:92:59:b4:b2:55:af:c4:e3:db:a0:16:5d:ef:f1:
         4c:df:f0:80:a6:cb:ee:76:0a:e0:0f:cf:26:01:a3:52:06:66:
         c0:d7:20:3d:6b:4e:ab:54:1b:6c:f6:ac:c7:5c:65:8b:5d:cd:
         02:15:96:f0:0a:c6:39:51:b0:69:17:2e:68:e6:06:e6:7f:30:
         f4:1d:e9:35:c3:76:91:c5:62:cb:df:ff:34:bc:d3:4f:85:55:
         b5:58:a7:cf:1f:2e:d9:71:96:5c:60:d4:41:e0:e0:81:71:5f:
         b9:1f:82:5a:df:0e:f5:6d:9f:5d:8b:65:d6:8c:58:2d:1c:df:
         d0:a4:a0:7f:07:a3:db:7c:d5:03:eb:e6:eb:f8:a8:28:7a:2f:
         55:6b:8f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:19:48 2026 by rpki-client