Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File:                     989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier:          eD3ahqi5R9ZLSQPHI8+t8PJia8ol7ASO79BkMCYmkFM=
Subject key identifier:   DE:2F:CD:8E:93:40:83:65:A3:88:DF:2B:6A:3D:AE:DD:93:2E:D1:F6
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       0C8821AB1A6A6B4593B09D70330C19D0A7421045
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number:          053E
Signing time:             Sat 18 May 2024 14:33:11 +0000
Manifest this update:     Sat 18 May 2024 14:28:11 +0000
Manifest next update:     Sun 19 May 2024 15:38:11 +0000
Files and hashes:         1: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: frkJKiCyXYl0O7kTf2GxQ+LkYroq4yDuBKlHPztet/M=)
                          2: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: 8qHvH7dtq74i47oKyRKQgg7EQpHJWlRUDrVKXbacbLM=)
                          3: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: niWZqVlthYTcU7CfrAYH3CrLBO3uGIcVzLYe1SwnHJg=)
                          4: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: sFkl5q2nnBlpmHXXAiz0Z7LlS2dknxOWwXvF/BC3ClU=)
                          5: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: 3O8RmvpKNDuovdCulkRSAzWomSmmsM0jR5uwbm4hKYY=)
                          6: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: Hg1GAlG9GJw3Zn+DJb1QTEGXf6KKmdFtuhAwW9PPtSs=)
                          7: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: n5SJyxnO6NVFaGxK0qycUh6AtoaQCIlKjuShPLkuFzs=)
                          8: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: T0XkhaLBz35dnuPKfdN9b92e/uHNEvwvcMG1ALVwJ24=)
                          9: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: U0n2ppmOv5X9DgR0q0q7abU874/vqRpNAUuDbc7CaBs=)
                          10: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: CX048Vu9bXvkLwvxOg2eANqSOir/XKlafOqbrptn8yk=)
                          11: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: aQT27PfBNkWq3eExcBT6fvl4Nw2j+NRxXKsrYsMfoSw=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 May 2024 15:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:88:21:ab:1a:6a:6b:45:93:b0:9d:70:33:0c:19:d0:a7:42:10:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: May 18 14:28:11 2024 GMT
            Not After : May 19 15:38:11 2024 GMT
        Subject: CN=DE2FCD8E93408365A388DF2B6A3DAEDD932ED1F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a2:f6:15:83:9e:92:c8:e4:b9:62:17:c9:05:
                    0c:65:c2:dc:3e:0f:71:94:0a:07:50:df:c8:28:04:
                    00:4b:d6:8a:99:92:eb:d4:5e:00:e9:a6:a2:b4:95:
                    84:5a:b1:31:5b:8d:1e:ac:86:51:af:42:45:f6:d2:
                    6e:28:27:c6:40:de:07:c2:5e:63:fd:42:2f:54:75:
                    78:3b:a9:35:ae:a7:8c:bf:94:86:89:42:95:85:b0:
                    eb:b6:e3:34:c0:2c:ff:44:bc:69:22:45:5f:95:5d:
                    06:6a:5f:22:d5:dd:c3:26:67:4a:bf:e2:7b:96:0c:
                    d9:69:f2:16:79:f9:52:02:3b:d5:c3:a3:ce:ad:d6:
                    67:4d:b1:2d:d9:32:52:1b:f9:35:6e:d2:8b:24:66:
                    97:62:7a:80:31:04:4e:87:34:e8:21:08:c0:ea:ee:
                    5a:7c:bc:24:2d:95:cc:ae:c7:6e:2a:9b:8e:69:8e:
                    b0:c7:b9:95:18:01:8c:bb:3e:ec:ce:c0:17:84:a1:
                    d5:5d:5b:e4:dd:41:f3:6d:aa:bc:41:76:4f:b8:84:
                    91:16:03:f6:04:3d:31:56:1a:e7:25:74:46:3a:39:
                    00:dd:16:95:dd:d2:d6:66:a3:df:f4:66:cb:87:48:
                    98:e2:c1:e8:e8:df:23:df:28:bf:8d:0c:30:b4:4e:
                    20:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2F:CD:8E:93:40:83:65:A3:88:DF:2B:6A:3D:AE:DD:93:2E:D1:F6
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:1e:51:76:09:b6:5d:44:29:17:58:ec:3a:69:c3:e3:e5:4c:
         00:84:1a:b9:05:08:8d:3f:11:3a:de:db:00:ea:e2:c1:de:0c:
         5c:7c:fe:56:78:57:ec:ee:06:d9:88:2e:e2:82:de:38:81:92:
         5e:e6:85:bc:40:72:3d:fe:89:cd:1a:4f:13:01:5b:41:08:7c:
         cc:b4:2c:e6:ad:4f:a2:43:e1:cc:f4:78:5d:ea:ae:e2:21:5f:
         6c:d5:d8:17:29:c9:47:85:14:84:49:9b:02:75:cd:e1:4b:dc:
         07:87:18:ef:68:2b:60:09:76:18:1e:da:85:3c:84:9b:24:65:
         c6:c7:8f:23:01:62:81:06:80:f4:ea:36:2e:44:4f:08:01:30:
         76:64:85:2f:48:18:d6:ae:b4:bf:56:50:41:d0:4b:30:7c:ad:
         3c:65:6c:9d:de:5c:f1:1d:7f:2c:e7:77:63:74:8f:87:31:1c:
         9f:e0:eb:0e:2f:b6:33:31:27:8d:b3:d1:39:fd:c2:36:ff:96:
         4f:df:78:41:a2:a0:d2:aa:ca:9a:62:9b:3f:da:1a:89:f4:7c:
         e1:1d:61:0e:b0:5f:1b:c1:05:52:51:1c:85:d5:6c:0e:71:9b:
         dd:11:40:03:17:ce:40:3c:fc:cd:5d:6b:1e:37:85:42:5b:f2:
         74:be:74:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:25:25 2024 by rpki-client on console-ams.rpki-client.org