Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File:                     989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier:          jAGazckcd/vUAxNjaHLSTBXeqBfEsb/NpQxqbL0oXXU=
Subject key identifier:   A3:7D:AD:7B:4B:87:58:C7:E0:90:C7:10:7B:05:33:90:69:8A:CB:3B
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       23ED1768B02CDE260033F53A6FFC53C1E96CAAF8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number:          09D3
Signing time:             Sat 26 Sep 2026 01:02:18 +0000
Manifest this update:     Sat 26 Sep 2026 00:57:18 +0000
Manifest next update:     Sun 27 Sep 2026 04:38:18 +0000
Files and hashes:         1: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: BuEBPTJ2vfTWlZKFjMl32JrJQqRwp1mqSuqe+EmcFIA=)
                          2: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: 7oXfpj3C/mgJ9C72voMZZOZTwU/VWJrw70I4Vj4hZRU=)
                          3: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: wD2X/rnLvjYX7xyPB9Jt+GcW/s8Zi1WkDFOO2rKFbBY=)
                          4: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: wx7mDDVDVvssyRRRK7qXWbAqlJxXiOpWt5/RcILxYjM=)
                          5: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: 3ggSTM9Di1FgXo3Ut6sBwZJGn9C5XLQtwoGmuGHyLTs=)
                          6: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: Y4k57xRWRy9X0jeYDXKld09T8mLHah2yzMR8vWq3R2M=)
                          7: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: l44DkO5H548zrrt8n41yzQYV6ng41SxD7aq7IAil17g=)
                          8: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: SlyeO73BsaZhNaBtds/ns68oiIGA+OXgFydVUq6b7Yc=)
                          9: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: uKziAmnKEFzqB9nfk5eW2+yVcFJdYkRgt8r/NipgvDk=)
                          10: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: nQW/gChgRCJZOUmKfXuBxzd9ebuiuqT7zJMBaxZsIrM=)
                          11: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: 6bUioHOiplX0nplUReMAUW/pmAQYfQERH31QOiWI09E=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 04:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ed:17:68:b0:2c:de:26:00:33:f5:3a:6f:fc:53:c1:e9:6c:aa:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Sep 26 00:57:18 2026 GMT
            Not After : Sep 27 04:38:18 2026 GMT
        Subject: CN=A37DAD7B4B8758C7E090C7107B053390698ACB3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:70:b4:50:64:47:7f:57:2e:d3:4e:5b:72:0e:
                    11:ca:0f:88:49:cc:2f:8c:9d:bb:d0:ee:12:bf:55:
                    ae:62:61:ef:b6:16:bc:ab:08:2b:67:94:52:f0:81:
                    57:ab:95:8d:c5:61:5d:2b:3a:5d:65:db:c0:53:91:
                    98:13:a8:9d:ab:30:a8:8e:88:05:a4:a7:2c:ac:eb:
                    a7:7f:b9:11:3d:fa:a6:55:9d:e1:ef:ce:88:ee:b9:
                    45:d9:12:ea:8f:b2:34:04:3c:8d:de:7b:a8:9b:94:
                    ea:5f:14:1d:68:d5:f2:53:8f:7a:11:2b:c3:e2:33:
                    34:d3:fe:0a:06:6a:9b:51:c8:e9:85:33:84:88:82:
                    c6:bb:f2:21:5b:70:ec:13:05:05:5f:23:1d:a9:4c:
                    c9:a4:1a:5e:05:91:c2:3a:3b:37:9e:2c:0f:ab:db:
                    ba:4a:7b:ed:39:eb:6a:15:c2:75:28:dc:53:f5:fb:
                    dc:27:c1:54:aa:74:c1:09:49:d7:03:2b:ce:9e:3c:
                    13:ab:3c:9d:25:55:b9:18:ad:24:e7:b2:16:5d:22:
                    30:f2:e8:30:a0:ea:81:2e:6d:4c:52:5e:64:8f:34:
                    d8:29:ad:ce:7e:13:52:aa:88:38:84:36:28:f0:a2:
                    b8:47:ea:f8:56:03:96:b8:a9:8d:d1:f3:08:39:dc:
                    f9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7D:AD:7B:4B:87:58:C7:E0:90:C7:10:7B:05:33:90:69:8A:CB:3B
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:8c:aa:95:cf:21:61:0c:0d:25:ee:16:ea:41:3f:80:02:6c:
         4b:0e:66:0f:d2:ad:36:18:be:d0:e8:12:21:d2:0f:33:ce:7c:
         e8:90:8b:ee:27:92:ae:21:ba:65:29:2b:40:78:57:66:24:6f:
         c5:bd:5f:88:fb:73:9a:d0:6a:cb:9f:d5:3d:27:53:1d:4d:86:
         5f:67:8d:0a:ee:9f:3b:dd:09:af:b6:be:86:39:dc:6b:40:6d:
         ef:c3:23:23:05:b0:3d:67:68:ce:c1:8b:57:50:7a:c2:cb:2a:
         60:6d:ce:74:2a:58:45:95:17:e7:f7:a4:e6:e9:84:d9:3a:50:
         7e:29:f3:5b:60:9e:e6:f0:ec:68:f5:94:0a:38:9e:21:02:4b:
         3d:fe:11:20:40:fe:58:76:04:e3:9c:cd:df:cc:33:5c:25:80:
         16:e5:e7:69:9f:11:c3:cf:17:0e:d4:b2:7c:06:2e:83:3e:f9:
         e7:ab:a5:b3:6d:6c:0c:c8:03:b2:b1:32:20:10:f9:ea:e6:6a:
         81:58:78:5f:c9:04:ef:21:4d:88:6d:13:c8:34:8f:73:e0:54:
         2c:2a:5d:ed:d2:d6:30:c1:90:b1:ae:8c:3f:fc:41:1d:2a:84:
         25:e9:04:35:fb:43:1f:26:ed:ec:06:3a:6e:9e:3b:ef:60:9b:
         cf:74:70:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----