Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File:                     989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier:          grcmd1hAt5iJcl0rSIGVkmOlspScBIOQa0VV5K0AVK0=
Subject key identifier:   0F:D3:BF:0E:06:4D:98:95:EA:14:62:43:8B:69:73:99:0B:E2:12:7C
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       728FF1D1C88C1CAE39BB0799D82F23636F6BF633
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number:          08F4
Signing time:             Fri 17 Apr 2026 03:52:06 +0000
Manifest this update:     Fri 17 Apr 2026 03:47:06 +0000
Manifest next update:     Sat 18 Apr 2026 07:30:06 +0000
Files and hashes:         1: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WYpwG0m5rYoph5qvV7ozJr+AyGbjlYlNMkCHWXyrbOc=)
                          2: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: Mm2Q/pLpu7nZeX6YcfUZK6f/DObsvCX5rLONYL2/UAM=)
                          3: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=)
                          4: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: xRrGpLwfZJRCjIbgMGjrDAMfc7dsoYw7T+d6iyUHT0A=)
                          5: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: kuKc/Fzq1k45n+B7QPJtKPHfxv/uauW5SLLyn69G0pE=)
                          6: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=)
                          7: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=)
                          8: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: d2LNoP5CbqXhXbaEA/3gYrwmjESmuB+Pxer+WLv32Ww=)
                          9: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: yaa8ol4LgB22fW2W1ZJmKPPE5Gh61YXf2HgbAKpQtds=)
                          10: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: qr6zGc4NdTGG5ScRahYWoyNf6IHmCSZEkDUdA2n4VP8=)
                          11: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: 5PgiiiiFYNDr0qs/1VjQ6eOM2giYK57TUp6h32K/GQI=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8f:f1:d1:c8:8c:1c:ae:39:bb:07:99:d8:2f:23:63:6f:6b:f6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Apr 17 03:47:06 2026 GMT
            Not After : Apr 18 07:30:06 2026 GMT
        Subject: CN=0FD3BF0E064D9895EA1462438B6973990BE2127C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:37:95:5d:b0:d9:20:37:72:59:4b:94:0e:c6:
                    3e:2b:46:c7:3d:3a:15:f6:73:92:0d:1c:b7:52:27:
                    a4:2f:45:48:7c:ca:e2:4c:ec:23:b4:2a:ba:eb:bc:
                    ed:f5:35:aa:77:b5:9b:96:b4:09:47:47:0e:2d:32:
                    96:01:f9:aa:ab:5a:64:2f:92:f6:67:c3:f3:48:fc:
                    6e:ff:0a:9b:c9:5d:57:1f:6b:ee:d9:c1:a5:d0:32:
                    bf:6d:44:db:e2:1b:75:ce:da:1b:b5:aa:d8:c2:11:
                    7b:ff:e5:e4:8a:2b:f9:42:bb:8f:97:67:82:07:9f:
                    ee:31:b5:bd:81:3c:8f:89:a2:de:be:51:d1:56:f8:
                    50:ff:a1:c9:a1:5f:7c:b6:eb:ac:62:ed:31:93:fe:
                    d9:34:85:e7:fd:ac:3d:5a:dc:13:81:96:58:7e:b7:
                    a9:8f:4f:23:e7:07:14:b1:89:a1:4e:f8:f5:38:45:
                    be:4f:ac:86:b1:f1:85:4b:36:25:82:4a:c7:52:a5:
                    87:7b:27:9f:45:b6:0d:40:af:cc:a9:20:f4:06:d2:
                    59:c0:94:cd:ad:22:6e:6d:17:47:a8:dc:fa:30:78:
                    30:0d:08:a8:58:5d:77:3c:10:4b:f6:29:bb:fb:4c:
                    bf:33:b0:71:6b:bc:3a:6b:07:0f:e7:8d:0f:12:a8:
                    dd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D3:BF:0E:06:4D:98:95:EA:14:62:43:8B:69:73:99:0B:E2:12:7C
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:bf:b1:6e:78:01:4b:66:21:38:aa:83:58:87:7b:c5:81:aa:
         67:2c:e9:0b:55:03:27:16:65:5c:56:80:78:56:9c:22:df:cc:
         a3:84:db:4a:a0:44:24:3f:32:18:16:b8:7a:ef:6d:4f:0b:4f:
         62:19:68:ff:48:66:60:72:7b:3a:f5:87:97:03:64:55:f2:ee:
         8f:2d:f7:88:97:cd:d8:9c:67:5e:dd:47:df:b4:78:2f:2a:46:
         9e:b8:a7:ec:c8:68:3e:a6:26:20:3c:47:06:b1:ac:1f:a8:7a:
         6e:ee:ac:07:80:5a:37:10:b8:8d:05:c9:12:5f:00:5a:3a:3c:
         54:6b:06:b3:8c:ea:3d:30:6e:16:88:17:10:94:1c:1b:ab:00:
         2c:a1:69:8a:48:7a:1d:a3:e3:c2:46:da:2c:a8:b8:f4:03:94:
         5d:ff:5b:bd:55:19:bc:e1:c2:66:44:39:57:38:7e:ab:5f:90:
         e4:37:9f:96:10:03:6f:2e:24:d2:b0:fd:24:d5:e8:f2:0b:55:
         cb:82:d5:06:e9:97:ff:89:ff:4e:0b:83:6a:f3:c4:0d:e7:ae:
         1e:c9:6c:0c:aa:97:ec:b1:f1:4d:f9:8c:4c:67:b9:93:a8:84:
         66:b7:fa:77:66:96:ed:4f:bc:35:8f:62:5b:c1:a5:51:ee:41:
         a5:fb:fd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:25:51 2026 by rpki-client