Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File:                     989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier:          +TC8TfYueePMzYe8YFW+N3AFeXwPzL5FExAm3qbQMHg=
Subject key identifier:   45:55:A1:22:FD:60:7C:A3:53:2D:DB:84:8F:99:DE:44:E8:74:96:00
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       7449F952E8C28EF0BF0FC597B8B9C8E9D93E2FEA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number:          09D1
Signing time:             Thu 24 Sep 2026 14:04:10 +0000
Manifest this update:     Thu 24 Sep 2026 13:59:10 +0000
Manifest next update:     Fri 25 Sep 2026 16:44:10 +0000
Files and hashes:         1: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: Y4k57xRWRy9X0jeYDXKld09T8mLHah2yzMR8vWq3R2M=)
                          2: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: wx7mDDVDVvssyRRRK7qXWbAqlJxXiOpWt5/RcILxYjM=)
                          3: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: nQW/gChgRCJZOUmKfXuBxzd9ebuiuqT7zJMBaxZsIrM=)
                          4: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: uKziAmnKEFzqB9nfk5eW2+yVcFJdYkRgt8r/NipgvDk=)
                          5: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: SlyeO73BsaZhNaBtds/ns68oiIGA+OXgFydVUq6b7Yc=)
                          6: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: BuEBPTJ2vfTWlZKFjMl32JrJQqRwp1mqSuqe+EmcFIA=)
                          7: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: 7oXfpj3C/mgJ9C72voMZZOZTwU/VWJrw70I4Vj4hZRU=)
                          8: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: wD2X/rnLvjYX7xyPB9Jt+GcW/s8Zi1WkDFOO2rKFbBY=)
                          9: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: 6bUioHOiplX0nplUReMAUW/pmAQYfQERH31QOiWI09E=)
                          10: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: nbZPL6WtyuqoUqZnk23Sj7R7BbLTD8YW1aJjdI32tds=)
                          11: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: 3ggSTM9Di1FgXo3Ut6sBwZJGn9C5XLQtwoGmuGHyLTs=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 16:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:49:f9:52:e8:c2:8e:f0:bf:0f:c5:97:b8:b9:c8:e9:d9:3e:2f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Sep 24 13:59:10 2026 GMT
            Not After : Sep 25 16:44:10 2026 GMT
        Subject: CN=4555A122FD607CA3532DDB848F99DE44E8749600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:5c:39:60:9d:36:a8:7c:a0:47:e6:fa:5a:
                    ba:d3:04:e3:03:16:78:2d:9c:bd:b2:48:8b:23:a9:
                    09:66:7f:cf:f0:f4:0c:16:8f:b8:e2:11:95:65:6c:
                    f0:cb:c0:db:19:3a:da:10:b9:e1:8c:1e:a1:e3:6e:
                    9b:08:10:dd:17:f6:a1:d1:19:1e:6a:70:1f:aa:f0:
                    af:c6:c1:c2:ed:06:d2:9c:4b:f5:6c:bd:90:7d:68:
                    c0:1f:5a:9b:94:72:3c:b4:dd:3b:a0:38:28:a6:a1:
                    7b:49:97:e0:d3:f0:c0:10:0b:dd:7f:03:5f:04:9a:
                    8b:b4:f1:a8:09:5c:24:07:59:02:b2:3e:56:84:3a:
                    b1:58:4a:99:43:e8:4f:fd:66:fb:71:1a:f7:6d:5f:
                    e2:3e:4d:82:b0:23:b4:1b:4b:8f:59:a5:0a:7f:a8:
                    2f:ab:51:8e:48:f7:df:4f:d9:fd:55:21:d6:87:b4:
                    6f:57:77:51:bb:46:e3:14:34:e5:9c:c0:68:52:e1:
                    8d:b2:a4:0e:47:f9:bd:d7:1b:c4:f1:2b:dd:ac:50:
                    d7:55:eb:41:d9:90:67:ee:d8:a3:06:d2:e7:2a:25:
                    26:f5:21:85:64:eb:5b:2f:66:33:9d:f1:16:d1:20:
                    07:7a:74:5d:74:c3:2a:40:fc:c7:7b:e3:18:e9:84:
                    b1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:55:A1:22:FD:60:7C:A3:53:2D:DB:84:8F:99:DE:44:E8:74:96:00
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:db:c6:d6:53:9c:5d:5d:c7:4d:44:eb:d5:fd:ea:32:57:d6:
         7d:62:aa:98:19:44:83:9c:b7:6b:1d:3b:1c:83:12:72:6c:7d:
         55:ad:c4:c8:53:e0:f4:e7:36:3c:fa:54:2c:f7:21:e0:b2:65:
         bf:be:94:70:ed:e2:a7:46:0d:ae:7b:ab:b9:3d:8c:9b:14:0a:
         a0:5e:20:d3:74:4d:55:ee:2e:8d:ee:6c:66:3f:db:f6:45:2a:
         55:1e:09:d2:84:4e:6d:07:9c:3e:97:d1:a6:a3:69:bc:7d:c7:
         64:43:d9:38:75:9b:73:45:38:60:84:7c:59:fd:2f:5e:b2:50:
         3a:c0:c1:3e:f4:a9:d5:d4:ab:4a:11:3d:46:0c:5a:d4:68:39:
         88:c7:0d:3d:4b:0c:37:78:5f:50:27:28:f4:7e:24:7c:ce:93:
         38:2d:bd:46:5c:bd:ed:1f:e6:66:95:11:90:5c:6e:7c:8a:5d:
         d4:85:93:6e:b5:81:04:94:75:0c:90:b2:fc:42:81:0c:8c:61:
         d0:d2:84:cb:bf:64:33:13:bf:a9:3a:e9:be:b2:22:3f:af:fe:
         1e:c4:ce:4c:77:b4:52:d7:56:e5:10:15:25:c0:63:a7:4a:e0:
         33:8d:2d:49:0c:c3:96:a6:ef:14:d0:ac:f7:5d:5b:76:77:63:
         b8:e3:f2:d9
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUdEn5UujCjvC/D8WXuLnI6dk+L+owDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2
MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTI2MDkyNDEzNTkxMFoX
DTI2MDkyNTE2NDQxMFowMzExMC8GA1UEAxMoNDU1NUExMjJGRDYwN0NBMzUzMkRE
Qjg0OEY5OURFNDRFODc0OTYwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALPmXDlgnTaofKBH5vpautME4wMWeC2cvbJIiyOpCWZ/z/D0DBaPuOIRlWVs
8MvA2xk62hC54YweoeNumwgQ3Rf2odEZHmpwH6rwr8bBwu0G0pxL9Wy9kH1owB9a
m5RyPLTdO6A4KKahe0mX4NPwwBAL3X8DXwSai7TxqAlcJAdZArI+VoQ6sVhKmUPo
T/1m+3Ea921f4j5NgrAjtBtLj1mlCn+oL6tRjkj330/Z/VUh1oe0b1d3UbtG4xQ0
5ZzAaFLhjbKkDkf5vdcbxPEr3axQ11XrQdmQZ+7YowbS5yolJvUhhWTrWy9mM53x
FtEgB3p0XXTDKkD8x3vjGOmEsf8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBRFVaEi
/WB8o1Mt24SPmd5E6HSWADAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e
EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE
NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU
aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5
ODAwMDAvMC85ODlEMzJENUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEy
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAc9vG1lOcXV3HTUTr1f3qMlfWfWKqmBlEg5y3ax07HIMScmx9
Va3EyFPg9Oc2PPpULPch4LJlv76UcO3ip0YNrnuruT2MmxQKoF4g03RNVe4uje5s
Zj/b9kUqVR4J0oRObQecPpfRpqNpvH3HZEPZOHWbc0U4YIR8Wf0vXrJQOsDBPvSp
1dSrShE9Rgxa1Gg5iMcNPUsMN3hfUCco9H4kfM6TOC29Rly97R/mZpURkFxufIpd
1IWTbrWBBJR1DJCy/EKBDIxh0NKEy79kMxO/qTrpvrIiP6/+HsTOTHe0UtdW5RAV
JcBjp0rgM40tSQzDlqbvFNCs911bdndjuOPy2Q==
-----END CERTIFICATE-----