Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File:                     989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier:          1oW3BI2TigreZqtgv043UbXeXHlnGYvOQ8InR26GjOk=
Subject key identifier:   AE:EC:BA:B0:5D:AE:5B:AA:0A:36:D7:53:1C:5C:EA:DF:2E:DE:6D:64
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       386ED8CAC01F0377596D55B142D3AEFBB5B8E179
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number:          0770
Signing time:             Thu 03 Jul 2025 15:54:52 +0000
Manifest this update:     Thu 03 Jul 2025 15:49:52 +0000
Manifest next update:     Fri 04 Jul 2025 18:52:52 +0000
Files and hashes:         1: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WYpwG0m5rYoph5qvV7ozJr+AyGbjlYlNMkCHWXyrbOc=)
                          2: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: IhaBjAH5AzMgzvRaQixC+njTbKcwrp3/F2CTwVuq0Jw=)
                          3: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: 6HF0IFLFjxlel98+6iXh/DxQRucBrE5fwdXODS6iRiI=)
                          4: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: 9b7VFtbzcnnUx2J6rArFgrGPOOdWZcbJYsCzShwO+BA=)
                          5: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: M4i7p9No5fZoZbpjSFGgtG6zWQFJTESIcWrPguWH25k=)
                          6: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=)
                          7: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: GXLgyQ7nu0rvfFM1r9PFPKlf+Di6lPWHOcSBNwp3/sw=)
                          8: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: EILeVm2wqjdcdAxUUWHvxGy4DxMGxeBIJfbsJHdbTE4=)
                          9: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: ZqgJMkEE+Gc01jyYKV6RIqm2fEEb3IP+zRkqR7gBnHs=)
                          10: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: Mm2Q/pLpu7nZeX6YcfUZK6f/DObsvCX5rLONYL2/UAM=)
                          11: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: hMoqRvtcHp5MAB1nMbAqi7DRxy2c4cpG5EiQHRdMR9U=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 18:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6e:d8:ca:c0:1f:03:77:59:6d:55:b1:42:d3:ae:fb:b5:b8:e1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Jul  3 15:49:52 2025 GMT
            Not After : Jul  4 18:52:52 2025 GMT
        Subject: CN=AEECBAB05DAE5BAA0A36D7531C5CEADF2EDE6D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:65:b7:4c:16:fb:b7:e1:0a:55:01:5d:a5:31:
                    2c:17:cd:8b:0d:57:6e:98:d8:31:f3:47:61:43:2d:
                    43:f3:dc:9c:71:26:dd:d0:d0:6f:ea:44:29:db:70:
                    03:c5:d6:d0:87:2e:cc:aa:20:5e:c1:74:38:e1:f1:
                    65:b8:a0:9e:99:ce:e7:31:1c:81:aa:6a:b7:51:8b:
                    7b:7e:6e:a3:eb:52:ee:ae:bd:68:f2:25:6c:13:cb:
                    78:7d:8e:9e:5e:e2:d5:87:41:4f:9b:51:ee:20:26:
                    b9:ea:e6:85:a3:b7:39:1a:bc:58:a1:d4:05:66:94:
                    81:95:6b:29:0a:1f:e9:42:f0:4c:a6:bf:ed:d1:3f:
                    8b:42:72:6f:31:66:b4:f0:3f:da:d2:d8:b5:ad:a6:
                    08:55:cf:cb:67:6a:df:31:c3:7a:e0:db:e8:50:e3:
                    b9:89:04:2e:04:16:98:d9:86:5f:aa:92:ff:66:22:
                    8b:41:e7:ab:f0:c3:e8:e1:1c:ef:9a:0c:b5:42:2d:
                    12:a4:74:19:7c:90:e7:19:b1:cc:b7:c2:09:44:d7:
                    6a:d4:b6:d4:65:42:96:55:b0:88:3d:bf:b5:7f:34:
                    81:cc:47:2c:7d:84:f6:31:0e:44:12:a9:70:56:1c:
                    12:02:3c:d9:59:ec:6c:82:8a:18:60:e6:b8:c6:32:
                    90:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EC:BA:B0:5D:AE:5B:AA:0A:36:D7:53:1C:5C:EA:DF:2E:DE:6D:64
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:dc:97:b1:2d:b3:9e:13:45:be:bd:7a:1d:54:79:5d:53:4b:
         3d:ba:58:cd:dd:c2:a9:9c:5f:fa:cb:67:f5:f1:4a:f3:4b:5b:
         d7:95:7e:b5:65:20:45:c0:7b:70:44:34:14:b9:c8:1e:72:00:
         d7:b7:4c:01:48:f1:99:e3:b4:b4:23:d2:8e:6d:f3:0d:28:7a:
         b4:95:f2:a5:1c:9a:e3:85:a3:df:9d:21:35:42:69:3e:69:7c:
         09:98:ae:2c:90:a0:fc:59:58:21:1f:1c:e2:a3:fc:47:e9:10:
         55:4f:42:d3:f1:7a:e6:b1:92:4c:f1:7b:39:4c:c5:d0:8e:8e:
         8c:d6:f5:be:81:01:63:1b:92:02:50:de:ea:dd:2f:82:78:27:
         a0:1c:a9:b3:f0:90:b3:14:b4:c4:be:b5:0c:17:93:c7:20:3c:
         9c:ca:5b:74:b1:41:68:21:31:66:21:eb:c8:14:0f:d9:16:04:
         f7:f7:b5:20:14:cf:39:52:34:ce:53:f9:13:e9:4c:78:fd:f0:
         32:fc:1d:86:13:48:a6:f0:b2:3b:fe:ce:c6:b4:07:55:b4:2a:
         ab:de:65:ac:e4:9b:0b:46:a0:49:f3:dc:76:6e:cb:fe:cd:b5:
         ea:33:4c:e5:b1:b8:4e:10:f4:f5:46:93:0f:4f:30:fe:8b:8c:
         9c:68:c4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:23:09 2025 by rpki-client