Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File:                     989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier:          lmI9DWIBmr6opl7747/E33bJ6zPrYidwTcUiHx0kqAA=
Subject key identifier:   03:BA:89:22:FB:C5:78:33:1B:07:6F:D7:20:B8:B2:B0:55:B8:6E:33
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       0F7E2458064FC0F5D8F290AE3801AB92A788D7C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number:          09CD
Signing time:             Mon 21 Sep 2026 11:26:15 +0000
Manifest this update:     Mon 21 Sep 2026 11:21:15 +0000
Manifest next update:     Tue 22 Sep 2026 14:06:15 +0000
Files and hashes:         1: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: nQW/gChgRCJZOUmKfXuBxzd9ebuiuqT7zJMBaxZsIrM=)
                          2: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: Ae94nBJBhQU2QbuLqPXykjgugdH35b69T5nBDgNDscw=)
                          3: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: wD2X/rnLvjYX7xyPB9Jt+GcW/s8Zi1WkDFOO2rKFbBY=)
                          4: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: 3ggSTM9Di1FgXo3Ut6sBwZJGn9C5XLQtwoGmuGHyLTs=)
                          5: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: wx7mDDVDVvssyRRRK7qXWbAqlJxXiOpWt5/RcILxYjM=)
                          6: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: BuEBPTJ2vfTWlZKFjMl32JrJQqRwp1mqSuqe+EmcFIA=)
                          7: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: SlyeO73BsaZhNaBtds/ns68oiIGA+OXgFydVUq6b7Yc=)
                          8: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: Y4k57xRWRy9X0jeYDXKld09T8mLHah2yzMR8vWq3R2M=)
                          9: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: uKziAmnKEFzqB9nfk5eW2+yVcFJdYkRgt8r/NipgvDk=)
                          10: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: 6bUioHOiplX0nplUReMAUW/pmAQYfQERH31QOiWI09E=)
                          11: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: 7oXfpj3C/mgJ9C72voMZZOZTwU/VWJrw70I4Vj4hZRU=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 14:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7e:24:58:06:4f:c0:f5:d8:f2:90:ae:38:01:ab:92:a7:88:d7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Sep 21 11:21:15 2026 GMT
            Not After : Sep 22 14:06:15 2026 GMT
        Subject: CN=03BA8922FBC578331B076FD720B8B2B055B86E33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a4:31:0e:25:7b:23:eb:cf:7a:81:44:f9:04:
                    b9:60:84:8b:80:50:e5:ab:66:e7:2c:87:7a:c0:a3:
                    29:03:b4:06:3a:9b:af:fa:56:0e:77:0c:cb:d8:e9:
                    73:11:93:7b:2c:28:fa:23:85:07:76:fd:4d:d0:2a:
                    54:0a:ef:03:09:eb:26:a8:57:10:95:db:42:69:4d:
                    f4:ee:a0:37:96:7d:db:c0:01:59:25:7f:74:f5:3c:
                    2b:f3:e0:75:9b:e2:16:3f:fe:c7:1a:20:dc:97:d4:
                    47:fe:b0:ec:24:ee:58:ed:d4:15:1e:30:a0:5b:55:
                    dc:32:8a:bd:a9:56:fa:8b:5d:e8:36:82:93:d0:6c:
                    0e:4a:56:c9:63:e7:78:1b:d8:d3:cc:16:95:db:41:
                    e9:6a:26:3e:5c:f6:f4:ae:a1:40:82:c8:e3:51:22:
                    56:34:43:c5:fe:69:79:cd:1c:68:67:3b:af:bb:20:
                    be:6e:d4:df:43:ce:e6:be:ca:a9:61:51:1a:38:f8:
                    f7:d5:98:86:9f:bb:ac:10:fa:83:ad:76:a1:bf:89:
                    b5:ed:ad:3a:a2:53:8d:05:b9:74:fc:9a:aa:35:f5:
                    33:bb:4f:4a:77:e0:38:4b:2d:bc:0e:66:cf:50:c4:
                    2b:b3:05:57:bb:db:17:7d:f8:3f:20:14:dd:54:6d:
                    48:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BA:89:22:FB:C5:78:33:1B:07:6F:D7:20:B8:B2:B0:55:B8:6E:33
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a4:be:85:46:a4:a1:f4:4d:f6:94:1e:a1:db:a1:27:78:aa:
         0c:2c:3b:c5:8b:8e:c8:a0:83:7b:a5:46:5a:9f:d3:fb:78:e5:
         fd:65:cb:35:77:7c:0b:bb:ee:fb:09:20:ea:e8:6d:b1:c2:cf:
         05:0a:4c:97:47:a4:07:7b:70:51:55:67:0b:45:30:9f:cb:35:
         e9:7d:f8:61:5f:a8:50:91:af:c5:08:92:bd:a7:20:30:4a:82:
         a2:a7:9c:77:c6:77:a7:f2:cf:74:1f:21:ee:d7:a4:a2:4c:3c:
         6e:0b:37:11:4f:ec:4a:af:e1:32:0b:37:55:50:9b:e2:d7:43:
         a1:bc:80:75:ca:f4:35:8e:7a:fa:2f:9c:a5:07:05:b2:0b:b5:
         c7:1e:ae:a3:31:d9:7b:da:98:10:88:4a:1a:9f:60:e9:36:44:
         b2:ab:20:2c:cf:f5:36:3c:a8:6d:f9:f2:e5:4e:72:7c:b2:c9:
         e6:d2:8a:7f:a9:08:6c:5b:4f:50:8c:4e:39:4f:0d:ca:65:f3:
         dd:51:2b:f7:c0:60:e7:58:57:a8:38:5d:29:61:9d:0d:53:18:
         ff:5b:5f:10:ad:3b:11:10:a1:ea:8e:5e:67:f0:72:b1:ec:7f:
         c2:82:59:3b:fa:aa:c7:22:b8:d7:60:06:71:c2:3a:f8:cb:b8:
         33:e9:fe:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----