Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
File:                     339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json)
Hash identifier:          /ZEMwGivkSWVzytajgKTrilWG4++gGOh0NnprPVVzrI=
Subject key identifier:   8E:8A:47:73:31:18:68:93:C2:BB:F6:BB:EB:1C:13:9F:02:B7:86:22
Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
Certificate issuer:       /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Certificate serial:       35AFDB1B2AEEFBCB440DFD093379FAB2E6844D28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
Manifest number:          039E
Signing time:             Fri 25 Sep 2026 21:46:32 +0000
Manifest this update:     Fri 25 Sep 2026 21:41:32 +0000
Manifest next update:     Sun 27 Sep 2026 00:55:32 +0000
Files and hashes:         1: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: Zp57ukR/XdRuGOggd2HDD2iEsSz8Y6RtV/RypgFlohk=)
                          2: 3130332e3232332e3138342e302f32332d3234203d3e20313335303237.roa (hash: g8Tw9Ss3ogaL2/E788moJ1DCuoJI7+nYIfSvQGup0po=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
                          rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 00:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:af:db:1b:2a:ee:fb:cb:44:0d:fd:09:33:79:fa:b2:e6:84:4d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
        Validity
            Not Before: Sep 25 21:41:32 2026 GMT
            Not After : Sep 27 00:55:32 2026 GMT
        Subject: CN=8E8A477331186893C2BBF6BBEB1C139F02B78622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cc:49:ec:63:db:c8:ea:84:54:60:4e:e4:8a:
                    33:75:2d:11:d4:1a:2d:a4:d2:ee:20:24:b7:05:53:
                    61:49:79:88:11:c9:d0:96:55:f4:10:aa:70:4b:60:
                    4a:67:00:e6:25:3d:2a:5c:6c:c1:86:93:92:07:df:
                    f7:5b:34:19:b4:6a:ec:17:e2:66:74:4a:94:e4:dd:
                    1e:e3:4f:3f:0d:86:65:ff:6c:c1:8b:57:6b:44:b3:
                    44:79:ca:c2:83:56:c7:8a:9a:02:22:30:96:f5:99:
                    17:e4:d2:c4:73:43:db:89:1c:22:5e:d6:6e:85:91:
                    e2:0e:ed:b5:dd:9a:d3:09:26:ab:b2:9c:aa:e9:c8:
                    9a:6b:a6:3a:bd:48:c3:a6:3f:00:a3:3c:c8:ed:29:
                    c9:11:93:f8:a1:b1:d3:46:d5:6e:86:02:89:3c:60:
                    39:e2:70:1d:60:19:4b:00:4c:21:e9:21:4e:06:fe:
                    56:a8:28:a0:78:4a:0c:9d:40:7a:aa:4e:70:40:83:
                    71:a0:57:44:2e:18:fb:10:09:23:24:6c:aa:23:66:
                    7a:2b:cd:97:4c:e3:60:6b:d1:f2:ec:4b:38:66:6c:
                    aa:3d:c9:bf:82:f2:b3:78:78:0b:9f:40:0e:9e:94:
                    af:f8:d3:3c:08:e9:5f:fc:4d:8a:1c:f4:5c:e4:51:
                    35:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8A:47:73:31:18:68:93:C2:BB:F6:BB:EB:1C:13:9F:02:B7:86:22
            X509v3 Authority Key Identifier:
                keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:af:04:d0:30:1c:72:d4:5a:1f:fa:ed:92:44:21:e7:98:7c:
         be:80:73:a4:a3:d5:bd:28:d5:61:b0:f3:44:e0:6c:2b:51:39:
         ed:bc:03:ec:ed:10:04:eb:29:c4:51:5d:d5:0f:46:b4:fd:54:
         d2:ce:09:9e:73:73:ed:15:5e:3c:0b:2e:4e:4c:6e:c6:56:97:
         b7:cd:bb:da:17:10:81:a5:74:67:27:4e:15:6d:bd:33:5f:e5:
         a8:77:98:0d:bc:01:d3:e2:f4:17:64:6b:4a:04:e4:62:33:56:
         37:9e:fc:a6:86:07:11:eb:8e:9d:36:c2:60:c5:95:ef:08:b2:
         4d:75:5e:61:e5:52:4d:3f:f5:00:10:b9:da:9b:b5:a8:f6:fd:
         e0:ad:27:29:6e:30:88:82:4c:03:7d:31:2f:4c:de:69:cd:4f:
         97:d6:18:1a:14:a1:9c:ae:7a:c4:32:d4:e8:c6:8e:17:76:b5:
         0f:f8:c7:ce:1a:27:8c:3b:dc:ad:2e:8d:40:25:63:a5:e7:b8:
         e8:9d:61:0c:a8:2f:21:ec:03:20:67:51:49:e6:99:a9:be:44:
         28:46:79:12:2e:43:ec:c8:e3:10:59:14:a3:9e:7b:4c:95:e2:
         0f:de:72:a0:6b:19:52:eb:dc:87:87:bc:ee:91:d7:68:a3:62:
         5b:63:66:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:18:22 2026 by rpki-client