Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File:                     989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier:          aSDHDXo48wUJXmwaoa9yeeAVQJQCkay9VLmW//G17Wc=
Subject key identifier:   14:29:D3:33:D5:DB:17:B3:A7:5B:8D:C4:AF:EC:05:D1:05:10:57:45
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       2185C3DD317E5F4D9CA8535CBC7CF741CDEAF750
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number:          063E
Signing time:             Fri 22 Nov 2024 07:37:20 +0000
Manifest this update:     Fri 22 Nov 2024 07:32:20 +0000
Manifest next update:     Sat 23 Nov 2024 08:54:20 +0000
Files and hashes:         1: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: 3HHBigQ7bni3q68Lq9kOehjQPPPEN78gYviHH2yD2Tk=)
                          2: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: M4i7p9No5fZoZbpjSFGgtG6zWQFJTESIcWrPguWH25k=)
                          3: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: hw7ZG+W2FJRDOP/YJmI89LenLugszceN0n5PpL3aqpM=)
                          4: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: IhaBjAH5AzMgzvRaQixC+njTbKcwrp3/F2CTwVuq0Jw=)
                          5: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WLPwi3bQ5nn7bReBlArqTrU/FNBEK2cEiBr4W3SK8to=)
                          6: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: hMoqRvtcHp5MAB1nMbAqi7DRxy2c4cpG5EiQHRdMR9U=)
                          7: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: EpUsVOQyAsYw0HesoFdtkY5jTfWDz5cp/Z7rGqdyJlY=)
                          8: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: GXLgyQ7nu0rvfFM1r9PFPKlf+Di6lPWHOcSBNwp3/sw=)
                          9: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: ZqgJMkEE+Gc01jyYKV6RIqm2fEEb3IP+zRkqR7gBnHs=)
                          10: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: 9b7VFtbzcnnUx2J6rArFgrGPOOdWZcbJYsCzShwO+BA=)
                          11: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: EILeVm2wqjdcdAxUUWHvxGy4DxMGxeBIJfbsJHdbTE4=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 08:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:85:c3:dd:31:7e:5f:4d:9c:a8:53:5c:bc:7c:f7:41:cd:ea:f7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Nov 22 07:32:20 2024 GMT
            Not After : Nov 23 08:54:20 2024 GMT
        Subject: CN=1429D333D5DB17B3A75B8DC4AFEC05D105105745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ca:1f:0b:c6:5f:78:fd:f1:6e:b9:6f:03:d2:
                    76:01:a5:f8:12:cd:64:46:3f:1f:63:6f:8c:d6:fa:
                    1f:fc:e9:af:c3:7c:e3:fa:48:70:98:3f:5d:d6:ea:
                    9a:cb:64:b5:96:f5:cf:af:e0:36:53:b6:95:92:51:
                    24:9f:ab:7a:fb:34:e4:49:8d:fb:d3:7a:6a:8f:44:
                    41:3e:a9:0c:c0:c5:3e:af:a8:5e:35:15:4f:4c:27:
                    b0:d6:58:8e:82:ee:2b:d2:22:ed:d5:50:79:f0:fd:
                    6c:db:cc:2c:e0:6c:fa:24:78:c2:28:fb:5f:d9:77:
                    57:84:dc:70:74:ef:30:37:fb:2f:45:46:29:f3:96:
                    7c:6f:07:03:5b:4c:08:a9:53:bb:23:6e:96:fb:5d:
                    de:87:a7:80:da:a4:d9:39:cf:28:dc:e1:48:a7:82:
                    e5:d4:34:d7:91:80:bd:66:52:f6:f6:a5:20:10:7a:
                    b8:1d:4c:3b:cc:7e:08:a9:32:60:db:f2:07:ef:b2:
                    91:cc:6e:d9:9c:f1:a8:63:d7:6e:8d:37:ed:ae:92:
                    c1:ef:2e:82:f8:d5:01:01:25:f2:8d:95:a6:bf:53:
                    65:20:e4:18:22:34:cb:cb:f2:0a:23:66:4b:b1:8b:
                    5c:dc:c8:e8:03:de:df:fc:f1:b7:39:83:9d:2c:37:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:29:D3:33:D5:DB:17:B3:A7:5B:8D:C4:AF:EC:05:D1:05:10:57:45
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:1b:61:d1:3c:96:d2:ff:6f:3c:e9:6e:bf:de:56:ff:a2:32:
         dc:0c:83:9c:8c:eb:7f:0a:c2:76:9b:0a:0e:2c:e5:18:43:8e:
         af:ac:a2:f9:44:a3:13:8d:c1:e3:ab:0e:85:c7:39:7e:72:d3:
         ee:e5:20:c8:56:4f:6e:92:39:86:2d:36:6d:19:d6:70:9b:07:
         c1:95:73:05:ca:f3:d5:1c:ed:9f:7c:99:8d:02:62:df:2a:8c:
         69:2c:29:cb:b7:f0:62:b8:9f:1c:7c:ef:ca:45:34:31:0b:41:
         e9:17:2b:ac:67:a9:1a:b2:ee:8d:01:8d:f3:fa:cc:0c:cb:f6:
         01:8f:bf:51:b2:f8:06:fe:0d:b2:5c:3f:e6:07:63:c2:ca:00:
         d6:ad:1c:bc:46:17:90:a9:58:f5:36:7b:d7:fb:0f:2a:2e:ff:
         03:69:63:bc:53:8c:f6:11:79:53:12:96:89:c0:ea:e9:13:e2:
         58:39:33:e0:cc:0e:8b:15:fc:bd:ae:93:23:b0:b8:45:c2:06:
         af:0e:25:d6:70:26:bc:0e:d9:be:86:a3:d2:14:60:ca:45:4a:
         c3:0e:79:71:bf:6c:9a:c3:b9:68:eb:d3:d5:a0:b3:38:fb:0b:
         f8:f5:5f:9c:ad:7e:82:a7:bd:9e:34:30:fa:c3:b1:90:22:71:
         54:54:a5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org