Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File:                     989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier:          7J3eeUaru2clIjnjtRRUoRy3n/yvcQ0VFJeAlgmZdR4=
Subject key identifier:   8C:9F:BB:A5:B5:9B:77:9E:1B:D6:98:DF:A3:41:ED:FD:23:E7:AE:7F
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       5C8A3DA68BEF99309EF12821BAF1CF04AEC3398D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number:          078F
Signing time:             Sat 26 Jul 2025 04:45:51 +0000
Manifest this update:     Sat 26 Jul 2025 04:40:51 +0000
Manifest next update:     Sun 27 Jul 2025 06:23:51 +0000
Files and hashes:         1: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: kuKc/Fzq1k45n+B7QPJtKPHfxv/uauW5SLLyn69G0pE=)
                          2: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=)
                          3: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: 2vhl4Z/Q0QwMFUiTfjhsKnVPR149xftpNjeOHmM6IZE=)
                          4: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: yaa8ol4LgB22fW2W1ZJmKPPE5Gh61YXf2HgbAKpQtds=)
                          5: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: Mm2Q/pLpu7nZeX6YcfUZK6f/DObsvCX5rLONYL2/UAM=)
                          6: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: d2LNoP5CbqXhXbaEA/3gYrwmjESmuB+Pxer+WLv32Ww=)
                          7: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: xRrGpLwfZJRCjIbgMGjrDAMfc7dsoYw7T+d6iyUHT0A=)
                          8: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=)
                          9: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WYpwG0m5rYoph5qvV7ozJr+AyGbjlYlNMkCHWXyrbOc=)
                          10: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: qr6zGc4NdTGG5ScRahYWoyNf6IHmCSZEkDUdA2n4VP8=)
                          11: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 06:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8a:3d:a6:8b:ef:99:30:9e:f1:28:21:ba:f1:cf:04:ae:c3:39:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Jul 26 04:40:51 2025 GMT
            Not After : Jul 27 06:23:51 2025 GMT
        Subject: CN=8C9FBBA5B59B779E1BD698DFA341EDFD23E7AE7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:94:7e:2d:18:16:cc:9a:92:db:cf:f3:cb:2c:
                    3d:b1:21:a2:9a:ea:9a:86:83:e5:ae:9c:0e:a4:80:
                    a9:70:a2:9f:c5:6b:a1:01:10:98:cd:f7:a8:9a:c9:
                    0a:61:cc:9d:7c:fb:1e:41:50:3e:0f:0f:eb:82:da:
                    8f:27:3a:e5:d0:7d:74:b8:60:f5:47:ab:f4:8a:cd:
                    0f:14:36:65:ff:c9:47:f1:78:b7:f2:f7:a8:43:29:
                    0a:a8:50:66:93:d0:39:89:0a:ae:e4:1e:76:be:64:
                    a7:d1:8a:c0:9a:e8:c6:25:b5:29:67:0c:89:eb:cc:
                    46:52:a2:58:3d:91:2f:c4:1b:84:ac:10:68:2b:91:
                    f7:ef:87:27:8c:0e:a1:6e:eb:b4:f4:ae:60:66:4d:
                    65:09:f7:97:f0:1a:fd:35:5c:ea:0c:b4:69:c7:84:
                    a7:d9:84:f9:7f:0a:4f:53:cb:57:c6:f9:d7:d5:b5:
                    d4:03:f2:e8:02:f5:08:ec:5f:86:37:55:49:7c:bc:
                    db:e8:48:4f:cb:4c:a8:ad:e0:67:ab:45:d5:83:e4:
                    47:0c:24:18:ee:5f:49:51:e2:32:68:64:91:5b:a7:
                    2f:b3:48:ab:b2:e8:13:d6:30:9c:2f:b6:95:85:dd:
                    ec:58:47:bc:72:21:37:d0:39:23:3d:a5:ee:89:d1:
                    38:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9F:BB:A5:B5:9B:77:9E:1B:D6:98:DF:A3:41:ED:FD:23:E7:AE:7F
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:9a:1f:9a:64:48:37:d6:18:65:2c:eb:cc:06:09:3d:f2:b0:
         3a:87:94:21:bb:76:e4:c1:2d:ae:d0:d7:97:21:af:16:34:59:
         86:d0:f5:34:2e:ba:ef:36:47:98:f0:e0:82:e7:a3:f1:1d:b0:
         c0:83:3f:b3:4a:ea:e9:01:05:0c:27:e6:d3:0e:fb:40:6f:10:
         77:a6:f0:ef:60:1d:9d:be:db:c3:fd:d4:03:c1:1a:80:d9:58:
         42:d5:e6:8e:59:0b:23:22:6c:2f:7d:e2:e6:53:80:14:cd:ba:
         68:c8:f0:a2:39:42:67:5b:0c:3e:c3:1e:e9:fa:ca:99:ed:cb:
         54:6d:10:b9:f5:09:0b:c4:fc:fc:02:ac:29:bf:ae:86:ac:7b:
         a8:59:af:f4:0c:be:f2:a9:b9:d2:9f:b3:8c:09:94:81:26:13:
         8e:47:e2:a3:35:09:2e:68:cf:47:93:b9:88:d6:68:67:39:f4:
         0f:c1:f0:e8:07:54:03:6b:a0:47:0e:ff:67:f5:4a:64:95:52:
         f0:f3:0a:ce:e9:82:32:ff:61:91:1d:ed:2d:ee:51:8e:5d:fd:
         94:06:21:92:0e:80:d4:e9:29:1e:72:eb:3f:53:cc:21:d0:2b:
         10:fb:9e:a4:07:87:0e:94:c3:04:29:e5:b1:e8:3e:4c:f2:42:
         bc:65:37:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:40:40 2025 by rpki-client