Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
File:                     33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft (raw, json)
Hash identifier:          SdPDTLXHY0LdbGRYJdn6+OElgqliPrrFwAHirvheXao=
Subject key identifier:   DE:EF:62:C5:E8:46:59:24:62:27:B1:52:59:D7:AA:40:19:D2:3C:C6
Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
Certificate issuer:       /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Certificate serial:       7373E69DFDDE253516C54237002C09DFC4574C46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
Manifest number:          0C
Signing time:             Thu 03 Jul 2025 02:16:52 +0000
Manifest this update:     Thu 03 Jul 2025 02:11:52 +0000
Manifest next update:     Fri 04 Jul 2025 03:49:52 +0000
Files and hashes:         1: 3230332e312e36392e302f32342d3234203d3e2039393133.roa (hash: HYKqNuiBE/DUFFDQyKmuMZ6wkcvhITNaHWFYsHIuJlA=)
                          2: 3230332e33312e3131302e302f32342d3234203d3e2039393133.roa (hash: Th3RG2y4VUTKhfMzlUUSBpKBps2IwB4thNo9+TULNBQ=)
                          3: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl (hash: FE+rsAsaaSIjNVoAG6jkoJh3nd5M8m470Zfy7Q8teUA=)
                          4: 3230332e33312e3131312e302f32342d3234203d3e2039393133.roa (hash: YlAvV8ZZuoYsPDhwbCWgqa9GkyYRu/NKCURMzPqa7q4=)
                          5: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (hash: gjG1OZMW5faujAfknl/AsEqIEMo1X4J8rMD0eZTWBDg=)
                          6: 3230332e302e38302e302f32342d3234203d3e2039393133.roa (hash: 5CEE0bOW0MgpOlLO8lN9+nz4tABxvncSgkR6y2kvmq4=)
                          7: 3230332e312e36382e302f32342d3234203d3e2039393133.roa (hash: sf6xpmLBwwFxYc5zLhbA2o5zERE4ANPwwQpcoFqWw9Y=)
                          8: 3230322e31342e3134382e302f32342d3234203d3e2039393133.roa (hash: jEqn8jELxuDQMwvht+ON+P9QmjrSbE+0mwwGAYlItGo=)
                          9: 3230332e35372e32332e302f32342d3234203d3e2039393133.roa (hash: 9vPoyR5h4XW7VzKPshTgyqTHm+x238aD7PNshnOSJtk=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:73:e6:9d:fd:de:25:35:16:c5:42:37:00:2c:09:df:c4:57:4c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
        Validity
            Not Before: Jul  3 02:11:52 2025 GMT
            Not After : Jul  4 03:49:52 2025 GMT
        Subject: CN=DEEF62C5E84659246227B15259D7AA4019D23CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:e4:36:78:67:cd:68:61:45:91:30:34:a7:
                    87:3f:a9:dc:96:21:98:0c:2a:51:4c:98:d4:9c:52:
                    60:e7:69:70:0b:82:55:9d:36:28:7a:44:e6:c0:e0:
                    9d:a0:a9:45:a4:34:1b:1c:7d:e6:de:d9:97:95:5a:
                    20:87:2a:67:e5:e0:f4:74:6d:64:e8:eb:97:7a:bc:
                    d3:43:2e:35:8c:8c:9d:34:1c:f8:08:bc:87:21:32:
                    c6:a3:5b:4b:67:29:d9:9f:d8:ce:52:80:54:80:16:
                    ca:f6:16:d1:18:1a:84:6b:5a:55:56:d2:fc:d0:0f:
                    0a:80:8b:ef:20:bf:36:e5:6c:04:b3:21:0e:9a:a2:
                    ab:97:ab:d1:db:8f:ea:25:be:aa:62:5d:72:0d:39:
                    77:b1:ad:70:10:76:26:15:05:29:b9:4b:75:fa:7b:
                    9c:0f:85:39:4d:ab:dd:15:3c:b2:80:c0:96:93:a1:
                    64:61:f3:1a:dd:93:00:81:2c:1f:06:cf:bf:df:71:
                    e3:14:12:86:04:d8:52:d4:9d:a5:db:51:88:fe:2d:
                    2a:c7:74:aa:26:6d:ed:03:65:5e:7b:a3:f1:89:37:
                    27:ef:c8:a2:3e:29:5c:58:3f:41:1a:b2:03:7f:bb:
                    af:e1:bc:83:9f:38:55:27:7a:87:01:5a:ea:b6:72:
                    ee:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EF:62:C5:E8:46:59:24:62:27:B1:52:59:D7:AA:40:19:D2:3C:C6
            X509v3 Authority Key Identifier:
                keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e5:96:5c:d4:79:ae:62:0f:e4:7a:f3:31:7d:1a:a7:f5:b0:
         8e:e0:48:90:d5:d7:20:8e:58:65:5f:00:79:15:c6:c7:65:56:
         ba:2d:23:d4:b4:14:87:f6:d0:fe:a9:a6:29:0c:d1:2b:48:fd:
         ba:a1:67:ed:51:ca:c6:c4:c0:f6:12:e7:b1:17:e2:cd:fd:9c:
         56:1a:a9:b0:12:f6:ca:0d:1c:5e:50:ed:66:8c:ab:9a:fd:5a:
         5c:8c:1f:76:56:b6:d6:9d:1d:c7:a6:9f:1a:1b:36:89:fd:96:
         5c:99:0c:8e:52:7d:2c:f1:1b:86:f7:de:71:68:46:ef:0e:3c:
         4c:16:b6:72:e6:10:32:bc:26:91:7d:21:f7:c4:4c:f6:b5:5e:
         aa:2a:c2:02:0d:cb:72:bc:06:40:a7:f7:4e:35:69:fb:6c:34:
         5e:fa:6c:7b:75:b3:d8:af:9c:f0:88:4f:98:24:70:ed:1d:19:
         9d:33:39:be:0f:51:ae:1b:6a:48:7f:d1:58:1c:f4:5d:97:0e:
         b3:5d:d1:8f:1e:ab:30:cc:47:9a:e1:26:f9:e9:d3:40:88:2d:
         b9:40:d2:d4:cc:10:a2:50:9c:7f:46:bd:68:39:5b:16:59:25:
         91:58:3f:ce:74:e3:30:35:bd:cc:dd:a1:12:c4:47:ed:00:4f:
         39:cc:b6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:59:38 2025 by rpki-client