Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
File:                     47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft (raw, json)
Hash identifier:          CotZjfVtqP4RsCHR8NEsR1hl9lv4UA8itQNO5rDL24c=
Subject key identifier:   7D:D5:C0:E7:C2:F5:17:24:CA:9D:4C:6F:DB:90:28:84:3A:14:BB:10
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Certificate issuer:       /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial:       2EAFC90F64716D3A03DF62370E454B4BA4926197
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
Manifest number:          3A
Signing time:             Sat 23 Aug 2025 06:52:45 +0000
Manifest this update:     Sat 23 Aug 2025 06:47:45 +0000
Manifest next update:     Sun 24 Aug 2025 10:26:45 +0000
Files and hashes:         1: 3130332e3234382e35302e302f32342d3234203d3e203234333232.roa (hash: Rak0PT2vHeUTkciSopyQRGRucDafeHmmWv2PLR2WrPU=)
                          2: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (hash: EZOcjod0P020aSaAKcSt3wLs5i7xD2mHOPcCy2SsTv8=)
                          3: 47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl (hash: 7TPciu9eVSMtVGhAOPinZp5t4ah7nDWuETCXQw2tCOc=)
                          4: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (hash: wCmAihkuPVll63UXoUNHhBYaZUWeSkIeoTLZCg0AKF4=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 10:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:af:c9:0f:64:71:6d:3a:03:df:62:37:0e:45:4b:4b:a4:92:61:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
        Validity
            Not Before: Aug 23 06:47:45 2025 GMT
            Not After : Aug 24 10:26:45 2025 GMT
        Subject: CN=7DD5C0E7C2F51724CA9D4C6FDB9028843A14BB10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:e1:3d:6c:6b:8e:dd:8c:37:93:62:5e:ac:
                    3c:77:11:43:2a:f0:13:1c:8a:bc:1a:63:b3:e4:30:
                    18:f4:5c:ea:3d:41:a7:c6:8d:b9:a1:54:29:a5:b6:
                    99:02:a8:f4:22:61:43:cf:2e:41:7d:cd:cd:6b:2c:
                    dc:1b:4c:90:5d:64:1f:2c:43:01:50:ca:3d:db:a9:
                    a1:10:3e:b9:c6:c2:cc:a4:34:1b:43:36:81:29:e3:
                    aa:ef:0e:4a:3c:da:8c:bc:af:15:66:fc:ef:1e:4c:
                    18:2d:06:37:27:dc:5b:62:f9:ba:df:d4:3d:61:9f:
                    da:69:97:60:fe:f5:e0:0f:4d:cd:89:3a:60:cc:fb:
                    45:ad:66:3c:24:49:a4:b2:b5:80:91:d2:03:75:60:
                    79:f4:05:39:81:b1:ec:0d:b7:b4:02:2f:bc:0b:f4:
                    70:f8:5e:01:f9:1c:f5:66:0d:60:27:09:b9:19:67:
                    63:6a:da:67:ad:ab:c7:18:9d:c5:9d:e4:98:7d:2b:
                    29:e7:dd:21:6a:88:c4:d9:aa:a8:24:1e:db:e0:e6:
                    f4:4c:ea:fe:f3:d7:35:15:3a:fa:54:1d:49:5b:17:
                    9f:82:78:19:2d:15:4a:ee:40:4a:94:22:23:00:9b:
                    ae:1d:93:0d:d3:bc:4f:42:a1:70:01:ac:b5:06:15:
                    a9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D5:C0:E7:C2:F5:17:24:CA:9D:4C:6F:DB:90:28:84:3A:14:BB:10
            X509v3 Authority Key Identifier:
                keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d2:8f:c5:60:b9:0e:c2:0a:e4:ed:1b:da:f1:93:dd:58:f1:
         29:2a:79:2a:8c:7b:50:f5:66:13:f6:5e:52:b4:53:2b:37:e4:
         7a:3a:8a:17:0c:53:ce:c8:47:90:a9:72:51:e9:c6:c7:ff:8c:
         0d:e8:16:f3:15:ae:ce:ea:aa:93:18:9d:a1:65:66:9f:3e:12:
         ec:4a:11:4b:2a:9b:38:52:52:ee:5d:81:d4:a6:a2:99:cf:9d:
         fb:35:19:ec:e8:b9:5e:be:9e:17:d9:ef:d9:95:82:93:bd:bd:
         17:92:ee:5a:e3:25:f9:68:a6:d6:b6:d5:33:1d:78:82:e5:df:
         6a:aa:2b:56:23:f2:a2:33:95:65:3e:00:08:75:cc:e1:bc:37:
         7d:91:08:06:32:d3:33:a5:ed:16:d8:51:a3:2d:6d:b0:0d:75:
         35:28:70:58:6e:12:71:8f:91:37:61:f3:7a:ad:55:c6:83:5e:
         53:48:24:b9:f4:9e:b3:79:fc:10:e8:82:86:70:f5:80:e4:52:
         c4:b4:d6:6a:45:ca:8a:db:41:63:27:20:a4:e5:57:f0:c2:5e:
         13:02:d5:57:bb:f0:56:fb:4e:80:a0:a4:f5:51:33:cf:5a:6d:
         d4:6b:2f:22:a2:1d:7a:e3:a1:e2:d4:60:4e:c2:55:e2:e4:6a:
         a4:9d:af:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:38 2025 by rpki-client