Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
File:                     339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json)
Hash identifier:          OBKMeN8/vRcY2At2kj2S6ny4B0ju+rzrZdSTv+JY3Ig=
Subject key identifier:   E4:6E:B4:9C:AC:F9:32:B3:65:4A:12:B5:F3:1B:6D:37:FF:16:30:5B
Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
Certificate issuer:       /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Certificate serial:       6AF76EBBCC881717731846CA512CB9FB74406910
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
Manifest number:          02C8
Signing time:             Fri 17 Apr 2026 23:53:35 +0000
Manifest this update:     Fri 17 Apr 2026 23:48:35 +0000
Manifest next update:     Sun 19 Apr 2026 00:40:35 +0000
Files and hashes:         1: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: Co+CO1Mn5iOarEI7KYShiSFGQn7rcarNQ2F82dnvvfE=)
                          2: 3130332e3232332e3138342e302f32332d3234203d3e20313335303237.roa (hash: g8Tw9Ss3ogaL2/E788moJ1DCuoJI7+nYIfSvQGup0po=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
                          rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 00:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f7:6e:bb:cc:88:17:17:73:18:46:ca:51:2c:b9:fb:74:40:69:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
        Validity
            Not Before: Apr 17 23:48:35 2026 GMT
            Not After : Apr 19 00:40:35 2026 GMT
        Subject: CN=E46EB49CACF932B3654A12B5F31B6D37FF16305B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:97:49:df:54:0c:c1:da:06:6c:97:e4:d9:62:
                    e0:40:8b:25:03:4e:96:2a:05:cb:91:6c:b2:12:23:
                    87:70:61:9f:bc:0e:91:e9:67:a0:4e:49:e4:2a:75:
                    2a:64:66:ee:77:92:98:52:5f:31:16:30:c3:bc:01:
                    4f:2b:d0:32:52:4d:a3:8c:ee:b3:01:78:a8:c8:35:
                    7f:21:05:56:db:23:23:c0:85:49:98:ae:05:6f:0f:
                    db:e6:29:b2:07:e4:f9:b0:37:56:2e:e8:07:9e:c9:
                    e2:16:78:f1:cf:2b:39:02:99:1a:f2:b9:87:d2:91:
                    0e:14:8d:e9:06:55:6e:a4:be:9d:63:30:cb:7b:68:
                    a8:8f:ad:8f:10:f7:f2:f8:cb:66:11:bc:63:67:d9:
                    0b:c0:b0:44:c2:a7:31:8f:24:ae:d3:2d:06:13:63:
                    7c:3f:70:9d:db:d2:92:c7:c5:d6:53:cc:c4:00:fe:
                    83:eb:d1:ef:b7:ce:20:2d:ba:a9:50:80:81:4c:99:
                    30:df:51:ad:5b:6a:62:4a:3d:32:11:5b:ba:78:33:
                    88:95:e0:37:aa:c9:d9:de:81:b1:22:aa:4a:ee:86:
                    3a:05:ff:f5:ad:37:ac:83:15:e4:fe:2d:cb:0e:db:
                    7d:ec:5b:39:e2:b9:bc:f8:c9:dd:ba:6a:be:0c:32:
                    a0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6E:B4:9C:AC:F9:32:B3:65:4A:12:B5:F3:1B:6D:37:FF:16:30:5B
            X509v3 Authority Key Identifier:
                keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:fc:6e:70:cd:56:89:7a:ba:a8:46:f8:e9:e6:13:e7:d7:7e:
         44:33:2a:f9:03:99:90:f2:d7:bf:25:4f:1b:c4:ad:e3:1c:d8:
         8b:84:c8:01:bb:41:1d:05:db:ff:7f:a4:f5:4a:c1:b8:3d:4d:
         6f:09:c5:cd:d9:32:96:20:06:98:0a:ef:1c:bc:59:33:54:25:
         0e:28:78:15:0e:95:fe:22:ab:18:a3:e4:91:7f:5e:01:16:90:
         cf:5e:62:d0:25:4d:f7:22:7e:2e:a4:03:cf:bf:76:2c:6a:31:
         19:3d:dd:76:00:85:1e:2f:13:4f:a6:b9:59:54:8f:8c:26:ea:
         4b:13:7d:2e:6d:be:7e:20:b8:0f:2c:1d:fb:ef:4c:24:b2:37:
         66:eb:6a:97:e5:d2:f1:57:c8:3d:0d:6d:eb:02:08:f3:37:39:
         59:fa:85:77:f9:ec:21:75:73:31:be:fa:8c:44:e6:9e:9a:57:
         74:64:61:78:d1:a9:e4:77:e3:a3:17:ca:3b:83:a4:dd:3d:ac:
         b5:02:32:67:8d:fa:51:c1:5f:2f:09:fe:f1:f8:ef:78:8c:5d:
         92:ab:da:65:63:27:c4:40:4d:4b:30:85:a9:3f:51:1f:ad:72:
         89:81:77:0f:6b:86:92:8e:9d:42:6e:18:5d:2e:27:21:ef:ed:
         1f:f2:06:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:00:53 2026 by rpki-client