Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File:                     989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier:          Q0Yu5RXVDu0C/RvXR+ZUbIXGmnMYdTgAsgcIQoXCOt4=
Subject key identifier:   60:E9:D2:F7:63:CB:75:B4:E7:6D:1E:27:26:F6:EE:58:CA:BA:29:F0
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       6514765543CA4236A8BBDFC0C2A29420F989B8A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number:          0753
Signing time:             Sat 14 Jun 2025 16:33:16 +0000
Manifest this update:     Sat 14 Jun 2025 16:28:16 +0000
Manifest next update:     Sun 15 Jun 2025 20:24:16 +0000
Files and hashes:         1: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: EpUsVOQyAsYw0HesoFdtkY5jTfWDz5cp/Z7rGqdyJlY=)
                          2: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: hMoqRvtcHp5MAB1nMbAqi7DRxy2c4cpG5EiQHRdMR9U=)
                          3: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: EILeVm2wqjdcdAxUUWHvxGy4DxMGxeBIJfbsJHdbTE4=)
                          4: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: M4i7p9No5fZoZbpjSFGgtG6zWQFJTESIcWrPguWH25k=)
                          5: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: IhaBjAH5AzMgzvRaQixC+njTbKcwrp3/F2CTwVuq0Jw=)
                          6: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: o4mfcnp7NNFZw1R7bbKQlyv8sP3Pb0pc6x7ZT/ZpxUg=)
                          7: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: 9b7VFtbzcnnUx2J6rArFgrGPOOdWZcbJYsCzShwO+BA=)
                          8: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: ZqgJMkEE+Gc01jyYKV6RIqm2fEEb3IP+zRkqR7gBnHs=)
                          9: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WLPwi3bQ5nn7bReBlArqTrU/FNBEK2cEiBr4W3SK8to=)
                          10: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: hw7ZG+W2FJRDOP/YJmI89LenLugszceN0n5PpL3aqpM=)
                          11: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: GXLgyQ7nu0rvfFM1r9PFPKlf+Di6lPWHOcSBNwp3/sw=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 20:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:14:76:55:43:ca:42:36:a8:bb:df:c0:c2:a2:94:20:f9:89:b8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Jun 14 16:28:16 2025 GMT
            Not After : Jun 15 20:24:16 2025 GMT
        Subject: CN=60E9D2F763CB75B4E76D1E2726F6EE58CABA29F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:6c:25:22:0a:2b:b9:f9:71:af:e7:5c:1d:
                    c1:17:9b:96:3d:be:66:a9:12:f9:86:f8:42:86:27:
                    89:10:84:ae:54:af:72:57:e7:11:f1:f7:4d:a0:1a:
                    10:af:e6:ba:a6:16:ee:b8:2e:7d:38:9c:34:80:94:
                    68:9b:75:0d:c6:fc:df:ef:3e:23:56:2b:4c:a5:14:
                    59:fd:3d:a9:93:2f:c4:0d:9a:7a:b7:89:96:3f:85:
                    4b:ce:f6:61:17:ac:c3:fa:30:95:46:5c:54:4c:0a:
                    f4:6f:2b:f3:e4:e6:42:c4:68:ba:c2:ff:2d:95:fe:
                    98:41:2e:20:ae:13:df:6a:4f:05:5b:84:71:f1:6d:
                    39:9d:26:d3:e3:cc:77:5a:80:b1:ef:27:8b:24:0e:
                    35:00:de:67:df:5a:7e:c2:2d:51:bb:f2:67:04:33:
                    8e:4f:e4:37:27:4e:e1:85:c9:a5:ba:f6:ce:41:54:
                    e0:a5:05:de:66:74:e6:ae:4b:fa:e7:42:23:2a:2a:
                    23:e4:b3:34:55:9e:e4:41:2a:ad:42:36:37:98:76:
                    d8:df:7b:44:d0:48:7e:e6:42:0f:6a:ee:0b:7d:35:
                    06:58:4d:d2:fd:c6:35:87:d3:76:33:b8:cd:14:73:
                    29:aa:d1:b4:a1:80:67:07:19:c1:2a:88:9f:80:5e:
                    28:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E9:D2:F7:63:CB:75:B4:E7:6D:1E:27:26:F6:EE:58:CA:BA:29:F0
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:51:20:c8:2e:34:57:d6:d5:29:12:c3:1c:e6:98:eb:8b:1f:
         51:bf:7a:0c:0a:ac:37:ee:fa:bc:4d:8b:f5:f7:3c:fe:9e:52:
         b8:16:a5:6c:a8:53:fe:7e:c3:89:47:49:b7:30:a7:82:58:46:
         8d:4f:c1:d8:33:1a:45:33:70:b5:f5:ac:9d:66:52:59:fc:67:
         66:14:64:97:55:32:ce:d4:fb:5c:ec:c8:07:b2:bc:e1:5e:83:
         dc:2f:4b:e7:ea:f0:bb:1e:16:a4:c6:2a:a4:1d:e6:7b:c1:7c:
         44:a5:b2:22:4d:11:d5:f5:09:be:16:b4:a6:6b:01:dd:01:ac:
         dd:e4:e9:f5:57:d3:db:29:8e:6b:ea:a9:30:dd:9b:00:78:81:
         e6:6f:1a:3b:fc:0d:21:b4:8e:a0:51:60:5a:ef:f1:11:bb:13:
         e4:e3:9f:d2:c1:6b:c1:1c:66:16:86:4d:02:e9:4d:5f:f3:29:
         9d:7d:99:46:63:24:15:10:88:4c:55:61:cb:36:c8:3b:37:73:
         8f:2b:0f:ed:f1:7f:02:89:e3:70:55:fd:2f:ca:fb:6c:4a:27:
         96:0a:c8:b2:1a:e3:65:31:a4:6f:a4:7c:c0:3a:fc:cb:52:38:
         26:4b:ab:76:8b:98:53:88:5f:01:c7:8f:bc:70:c3:33:02:4e:
         68:88:43:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:34:39 2025 by rpki-client