Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File:                     989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier:          LP8PYLeaROJVi1XgJVN+TfoaDQN+G0AEAypKqt/uFpU=
Subject key identifier:   5F:99:56:C5:50:B3:5F:1E:89:6B:E2:06:22:00:60:18:EE:A9:58:7A
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       41F8BFD06336DCFA976B5F7AD5B45BFC90BACD26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number:          06F1
Signing time:             Fri 04 Apr 2025 11:01:24 +0000
Manifest this update:     Fri 04 Apr 2025 10:56:24 +0000
Manifest next update:     Sat 05 Apr 2025 13:54:24 +0000
Files and hashes:         1: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: ZqgJMkEE+Gc01jyYKV6RIqm2fEEb3IP+zRkqR7gBnHs=)
                          2: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: j+9gK/hrSEmS90x0qDsi6cr8I3pwNWKsItP926a038I=)
                          3: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: hMoqRvtcHp5MAB1nMbAqi7DRxy2c4cpG5EiQHRdMR9U=)
                          4: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WLPwi3bQ5nn7bReBlArqTrU/FNBEK2cEiBr4W3SK8to=)
                          5: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: IhaBjAH5AzMgzvRaQixC+njTbKcwrp3/F2CTwVuq0Jw=)
                          6: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: hw7ZG+W2FJRDOP/YJmI89LenLugszceN0n5PpL3aqpM=)
                          7: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: EpUsVOQyAsYw0HesoFdtkY5jTfWDz5cp/Z7rGqdyJlY=)
                          8: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: M4i7p9No5fZoZbpjSFGgtG6zWQFJTESIcWrPguWH25k=)
                          9: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: GXLgyQ7nu0rvfFM1r9PFPKlf+Di6lPWHOcSBNwp3/sw=)
                          10: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: 9b7VFtbzcnnUx2J6rArFgrGPOOdWZcbJYsCzShwO+BA=)
                          11: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: EILeVm2wqjdcdAxUUWHvxGy4DxMGxeBIJfbsJHdbTE4=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 13:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f8:bf:d0:63:36:dc:fa:97:6b:5f:7a:d5:b4:5b:fc:90:ba:cd:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000
        Validity
            Not Before: Apr  4 10:56:24 2025 GMT
            Not After : Apr  5 13:54:24 2025 GMT
        Subject: CN=5F9956C550B35F1E896BE20622006018EEA9587A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ed:c6:c4:03:ae:37:ae:25:45:90:ee:2c:cb:
                    d2:3a:72:83:12:54:b4:cd:0d:4d:d5:b6:9b:03:a6:
                    28:0d:a0:ad:15:53:9f:66:e4:16:14:80:66:c6:20:
                    44:f4:4c:ab:b9:d1:8a:f8:22:01:82:2f:7b:f4:f7:
                    de:f9:9c:c6:05:f8:e0:d5:17:4d:19:67:f2:16:30:
                    d4:ad:8b:e9:68:21:a4:75:cc:63:44:cb:37:6e:bc:
                    3e:ff:a8:a1:90:00:cf:d3:48:cb:3a:1e:20:94:43:
                    7d:93:2c:bd:ad:26:75:d9:50:d7:80:48:d4:23:b4:
                    93:57:27:50:8a:aa:b6:bf:34:9c:6f:c5:ff:ed:48:
                    4c:a7:68:4d:02:68:3e:4c:0e:31:86:b8:84:33:73:
                    f5:d3:46:64:ec:4a:39:ae:55:19:90:b7:c1:a8:b2:
                    cd:4f:ba:37:0b:c2:e9:6a:81:81:b6:c7:a2:a7:d8:
                    f6:c8:8d:6b:09:c3:8c:6f:93:12:98:11:71:de:55:
                    fe:f1:c7:76:1a:91:b6:21:82:bb:35:7e:d7:60:1e:
                    9e:7e:f3:9f:0e:3e:3f:57:55:61:53:5b:4e:73:51:
                    e6:9d:5c:cc:6b:ef:a0:f6:aa:98:80:ce:96:ef:f7:
                    60:e5:74:57:d4:9a:6f:c6:c9:b2:94:71:a9:88:7c:
                    cc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:99:56:C5:50:B3:5F:1E:89:6B:E2:06:22:00:60:18:EE:A9:58:7A
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:79:08:d9:f2:47:3d:90:17:26:05:07:e6:a2:62:1e:23:20:
         c3:60:ac:a4:6b:7d:e9:6e:06:f4:61:06:87:bd:3f:2f:1d:42:
         7f:a2:35:a3:d5:2a:1f:49:b5:72:f8:31:36:17:33:c5:2c:09:
         2f:fc:ca:53:0d:f3:0e:bf:a9:75:86:e8:c2:1c:73:16:fd:93:
         43:3f:ae:34:36:5a:60:bc:af:9e:64:33:4b:5b:6c:50:80:7e:
         aa:ef:15:83:26:a8:cc:2e:c0:f4:78:3d:b3:44:a4:df:c8:2c:
         82:76:23:0c:c9:e6:c1:55:f1:cd:e5:5d:47:0c:e1:10:3f:1d:
         17:41:f2:78:e9:9d:39:36:36:bb:05:56:9b:47:ce:37:14:12:
         ff:00:d1:a7:40:13:48:0f:12:35:8f:ad:48:f9:17:bc:c1:ee:
         d9:14:b2:ac:e1:0c:e2:08:7f:01:e3:ed:50:74:d2:8a:19:d7:
         81:f7:67:ac:10:9d:3e:ac:1e:e5:6b:c3:7f:79:d0:cf:2b:e0:
         7c:f5:5b:ed:02:2d:4e:ff:23:44:30:87:92:dd:0a:97:cc:31:
         40:62:ea:3c:00:97:2e:17:79:eb:4c:30:74:7e:af:60:60:9f:
         3d:f0:1c:c2:47:ca:c3:0a:2d:97:3d:be:2f:8a:4e:88:c7:bf:
         71:87:8a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:45 2025 by rpki-client