Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File:                     989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier:          G8PkcKd0Wsqz6mmDPjwej3SA6Biuoef6MvNkVovXYZ4=
Subject key identifier:   35:B1:F1:D8:E5:47:59:0D:40:D1:67:71:9E:1B:11:D8:C4:CB:7F:7F
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       7991686E2562308FE49509A90E6A83EAEDC59945
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number:          0945
Signing time:             Fri 12 Jun 2026 12:21:54 +0000
Manifest this update:     Fri 12 Jun 2026 12:16:54 +0000
Manifest next update:     Sat 13 Jun 2026 15:39:54 +0000
Files and hashes:         1: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: 6bUioHOiplX0nplUReMAUW/pmAQYfQERH31QOiWI09E=)
                          2: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: 3ggSTM9Di1FgXo3Ut6sBwZJGn9C5XLQtwoGmuGHyLTs=)
                          3: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: 7oXfpj3C/mgJ9C72voMZZOZTwU/VWJrw70I4Vj4hZRU=)
                          4: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: SlyeO73BsaZhNaBtds/ns68oiIGA+OXgFydVUq6b7Yc=)
                          5: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: wD2X/rnLvjYX7xyPB9Jt+GcW/s8Zi1WkDFOO2rKFbBY=)
                          6: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: Y4k57xRWRy9X0jeYDXKld09T8mLHah2yzMR8vWq3R2M=)
                          7: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: nQW/gChgRCJZOUmKfXuBxzd9ebuiuqT7zJMBaxZsIrM=)
                          8: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: BuEBPTJ2vfTWlZKFjMl32JrJQqRwp1mqSuqe+EmcFIA=)
                          9: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: uKziAmnKEFzqB9nfk5eW2+yVcFJdYkRgt8r/NipgvDk=)
                          10: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: LhndQpHU8gCA0PMINj71pOUNVT+HGVT3B7GGT2d1xwg=)
                          11: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: wx7mDDVDVvssyRRRK7qXWbAqlJxXiOpWt5/RcILxYjM=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 15:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:91:68:6e:25:62:30:8f:e4:95:09:a9:0e:6a:83:ea:ed:c5:99:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Jun 12 12:16:54 2026 GMT
            Not After : Jun 13 15:39:54 2026 GMT
        Subject: CN=35B1F1D8E547590D40D167719E1B11D8C4CB7F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:01:8d:2e:13:31:e0:10:1f:0a:77:05:77:
                    a6:3b:2e:71:ab:cf:6d:dc:ca:da:11:91:71:04:38:
                    3b:6d:59:a3:7e:fe:c7:d1:3a:e1:78:71:2b:86:6a:
                    4f:e5:c7:71:17:38:c5:ef:b1:6e:fe:e0:d9:7b:f0:
                    9c:4b:8a:7c:f5:1e:86:88:7f:78:1b:df:33:13:4a:
                    13:6e:64:1d:90:81:ed:1d:a6:fa:b6:db:d2:cc:0b:
                    8c:e3:d8:db:36:0f:ec:da:ac:02:6c:78:46:a1:90:
                    bf:f7:ab:8d:b0:a0:b3:b4:6d:3b:67:a7:97:7b:5a:
                    a6:26:f4:60:ff:3c:6e:63:49:db:a8:7d:bb:de:7f:
                    67:d5:df:5e:ef:f2:93:1c:8a:49:77:8d:b9:2b:34:
                    1e:10:1f:37:19:47:0e:fe:b0:3c:a9:f6:37:15:42:
                    48:3a:a1:22:09:42:91:54:41:aa:ae:a3:89:a4:00:
                    a6:15:4c:06:d3:ba:82:87:30:85:6b:2f:ec:01:d9:
                    4f:79:8e:81:28:b8:1c:69:5f:d4:f1:3e:b0:02:bf:
                    ee:c5:68:5c:aa:b3:6c:f2:78:f6:12:47:98:c9:62:
                    f3:00:8d:5f:e4:b9:d5:5e:ec:89:7a:82:bf:b4:6d:
                    9b:35:04:ce:18:b5:58:f5:1a:60:f1:55:cc:10:b7:
                    f9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B1:F1:D8:E5:47:59:0D:40:D1:67:71:9E:1B:11:D8:C4:CB:7F:7F
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:83:fc:cd:84:88:9b:6e:b8:9c:07:39:66:62:04:ca:25:d0:
         75:28:75:5b:48:90:25:21:66:60:53:6b:e0:ed:f4:af:3d:10:
         7a:69:ad:06:37:5c:a7:1b:75:ef:16:00:23:ae:e2:5c:c9:3c:
         4e:93:48:a5:86:cc:bc:e1:d0:d4:ea:e4:82:97:85:e3:59:e9:
         91:68:a9:76:68:5c:b5:07:4a:b9:56:69:b9:b9:5e:ec:97:f1:
         23:10:b8:2e:cc:18:fd:57:b4:87:09:ea:b2:9f:d7:3d:ef:5f:
         fd:62:f9:32:a3:35:35:7f:83:c7:13:20:f0:22:49:f9:31:6f:
         01:d1:a8:52:98:4b:80:4e:76:74:a9:21:b9:8c:85:b6:d0:1b:
         f5:03:c0:8b:2f:23:91:8c:e6:7f:87:70:cd:a3:7d:ba:8c:f6:
         6a:39:a9:73:5d:5f:e9:d9:a4:18:2e:90:c9:70:5b:80:79:c7:
         d3:2c:c7:6f:ec:24:37:03:88:37:e8:58:85:37:d9:e0:1e:c3:
         a8:4b:13:fa:1a:f2:eb:00:60:94:d7:89:46:65:0b:62:5a:19:
         ab:aa:55:c3:8e:d5:c8:5a:88:42:a0:d2:63:5c:b0:64:4c:75:
         1e:7f:c8:cf:93:01:84:e9:02:09:7b:2c:ba:fb:88:ea:8e:de:
         cc:5c:ed:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:38 2026 by rpki-client