Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File:                     989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier:          mj+li9OvKqE9JbXgCdVreTFiaFi+ZPcFAy2sXmYXL4Y=
Subject key identifier:   CD:9F:D0:97:0D:78:F5:D2:51:C0:AD:B9:00:DA:22:DD:C4:F9:82:C9
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       0AFD1EA6CD993999BAD632D7C01FE98B2E2623BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number:          0952
Signing time:             Mon 22 Jun 2026 03:53:54 +0000
Manifest this update:     Mon 22 Jun 2026 03:48:54 +0000
Manifest next update:     Tue 23 Jun 2026 04:49:54 +0000
Files and hashes:         1: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: 7oXfpj3C/mgJ9C72voMZZOZTwU/VWJrw70I4Vj4hZRU=)
                          2: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: uKziAmnKEFzqB9nfk5eW2+yVcFJdYkRgt8r/NipgvDk=)
                          3: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: SlyeO73BsaZhNaBtds/ns68oiIGA+OXgFydVUq6b7Yc=)
                          4: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: Y4k57xRWRy9X0jeYDXKld09T8mLHah2yzMR8vWq3R2M=)
                          5: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: wD2X/rnLvjYX7xyPB9Jt+GcW/s8Zi1WkDFOO2rKFbBY=)
                          6: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: nQW/gChgRCJZOUmKfXuBxzd9ebuiuqT7zJMBaxZsIrM=)
                          7: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: Nop9dkUte9U68fkIB0BsFoUa5JXzDdvq5lKUYj0CyXE=)
                          8: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: 3ggSTM9Di1FgXo3Ut6sBwZJGn9C5XLQtwoGmuGHyLTs=)
                          9: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: wx7mDDVDVvssyRRRK7qXWbAqlJxXiOpWt5/RcILxYjM=)
                          10: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: BuEBPTJ2vfTWlZKFjMl32JrJQqRwp1mqSuqe+EmcFIA=)
                          11: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: 6bUioHOiplX0nplUReMAUW/pmAQYfQERH31QOiWI09E=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Jun 2026 04:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:fd:1e:a6:cd:99:39:99:ba:d6:32:d7:c0:1f:e9:8b:2e:26:23:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Jun 22 03:48:54 2026 GMT
            Not After : Jun 23 04:49:54 2026 GMT
        Subject: CN=CD9FD0970D78F5D251C0ADB900DA22DDC4F982C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:43:d3:5a:a6:0f:36:2c:2c:79:21:58:e7:
                    f4:09:8f:b6:ed:8d:86:df:2c:67:a1:8f:c3:b1:f6:
                    fb:3a:c7:74:c9:0b:02:81:d1:d9:7d:d3:25:7f:52:
                    cc:cb:b0:50:90:9c:12:b6:55:26:61:3b:73:bc:5e:
                    e7:c3:b8:d3:17:ef:b8:a3:2a:fa:6c:c7:3f:b0:36:
                    13:54:04:87:28:f4:d6:db:8a:55:06:27:98:c6:73:
                    d1:38:ee:f4:df:4e:e1:ed:63:9b:d9:17:da:e7:10:
                    d7:8a:b0:06:08:d4:99:b2:09:dd:91:69:a5:e5:33:
                    0c:04:69:20:b6:1b:b0:a4:a6:7b:76:28:f4:21:21:
                    d8:fd:98:26:05:7c:83:0e:f7:0e:4b:5f:11:ea:01:
                    3f:46:3f:d7:fa:24:e7:b5:4e:94:bf:12:95:5c:c6:
                    c9:4d:2f:43:cc:7a:21:0a:33:35:b1:33:ce:7c:7d:
                    78:a4:91:a0:fe:4a:5b:01:e0:7b:71:f7:8d:43:c7:
                    63:1d:49:1e:54:5c:67:3b:21:7c:37:a0:f5:26:1a:
                    40:48:3d:10:d4:12:cf:32:ce:b9:a4:90:c7:bf:aa:
                    d9:c7:d0:21:41:45:ba:27:26:99:2e:89:d8:dd:f7:
                    fd:c8:64:ca:e1:88:8d:fe:12:e1:f5:a8:77:a8:34:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9F:D0:97:0D:78:F5:D2:51:C0:AD:B9:00:DA:22:DD:C4:F9:82:C9
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:46:4a:69:19:b1:8d:04:11:50:9f:78:61:71:26:46:dc:06:
         83:a5:0b:16:8a:59:11:e3:b2:0d:8a:9f:2b:f6:c9:e1:52:47:
         99:87:97:83:08:8e:69:98:28:d8:2c:9f:cb:21:c1:3e:0c:dc:
         8c:bc:9a:fc:85:3a:ed:95:4c:bd:12:52:0b:86:76:db:92:17:
         30:dd:f2:4b:40:05:1c:a4:36:8d:12:72:32:1d:e1:86:96:18:
         1c:7a:85:8b:d5:29:26:2e:6c:b6:81:0e:88:f4:4e:4c:19:bb:
         ea:a2:86:6e:bb:ba:a2:7f:1e:c3:0d:ce:1c:69:6f:cc:b4:b9:
         61:2b:f8:40:3c:d4:1c:04:38:79:b9:d1:18:b0:f0:06:5b:4f:
         00:f7:bb:9b:16:f5:7e:cb:02:5d:1e:fc:aa:41:c2:7d:f9:b9:
         e2:cc:02:cd:7d:a4:b8:81:75:1f:c4:05:17:d9:ee:93:cb:45:
         87:c9:42:d8:b5:97:a3:43:f5:a2:fe:cc:a0:4b:2a:f6:2e:08:
         d9:a5:42:9f:c0:00:05:5e:1b:7a:6e:8f:f6:9c:a8:bd:3c:1a:
         27:0b:66:6a:5b:cb:9b:06:e4:11:94:27:67:6e:8b:cf:7c:5b:
         bb:ff:60:1e:3b:63:8c:d4:14:3f:05:5a:77:20:09:78:39:2a:
         e7:b6:be:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 08:29:48 2026 by rpki-client