Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File:                     989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier:          DXzEX7FUyNL0Uil59Rc8iH9+7LYADp1maInFoqC32vg=
Subject key identifier:   5B:05:18:1D:50:43:DC:0C:36:A7:A7:86:2A:D6:1C:E1:89:25:FF:EC
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       5D53688C3931EABACDB93E821D3353FD34C8CFC2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number:          0714
Signing time:             Mon 28 Apr 2025 14:07:12 +0000
Manifest this update:     Mon 28 Apr 2025 14:02:12 +0000
Manifest next update:     Tue 29 Apr 2025 14:34:12 +0000
Files and hashes:         1: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: EILeVm2wqjdcdAxUUWHvxGy4DxMGxeBIJfbsJHdbTE4=)
                          2: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: hMoqRvtcHp5MAB1nMbAqi7DRxy2c4cpG5EiQHRdMR9U=)
                          3: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: vUPHwajFVtSlSZzlyEFNcbkYQ3QY2/RYc6v7HTELeRE=)
                          4: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: 9b7VFtbzcnnUx2J6rArFgrGPOOdWZcbJYsCzShwO+BA=)
                          5: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: IhaBjAH5AzMgzvRaQixC+njTbKcwrp3/F2CTwVuq0Jw=)
                          6: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: ZqgJMkEE+Gc01jyYKV6RIqm2fEEb3IP+zRkqR7gBnHs=)
                          7: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: M4i7p9No5fZoZbpjSFGgtG6zWQFJTESIcWrPguWH25k=)
                          8: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WLPwi3bQ5nn7bReBlArqTrU/FNBEK2cEiBr4W3SK8to=)
                          9: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: hw7ZG+W2FJRDOP/YJmI89LenLugszceN0n5PpL3aqpM=)
                          10: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: EpUsVOQyAsYw0HesoFdtkY5jTfWDz5cp/Z7rGqdyJlY=)
                          11: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: GXLgyQ7nu0rvfFM1r9PFPKlf+Di6lPWHOcSBNwp3/sw=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 14:34:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:53:68:8c:39:31:ea:ba:cd:b9:3e:82:1d:33:53:fd:34:c8:cf:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Apr 28 14:02:12 2025 GMT
            Not After : Apr 29 14:34:12 2025 GMT
        Subject: CN=5B05181D5043DC0C36A7A7862AD61CE18925FFEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7a:81:51:4b:39:ac:57:c7:dc:c2:6b:f0:16:
                    45:73:be:d1:31:3e:62:44:45:1d:1b:7c:ec:b8:37:
                    ab:84:48:23:7e:f6:1d:11:0b:f7:b9:33:9c:c7:13:
                    ad:29:33:7c:3a:ba:52:29:01:50:ce:a4:de:fc:e1:
                    68:05:38:b8:75:be:cb:90:1c:7f:94:d5:e9:74:4a:
                    7a:2f:1b:1b:cd:93:1a:ea:ed:01:96:ae:80:0c:9d:
                    e9:de:b4:e3:81:69:69:b7:bb:23:7b:d7:f9:26:4b:
                    98:46:7d:35:7a:96:09:0b:6a:25:a8:c7:e2:18:55:
                    f0:08:9c:3c:ad:0a:79:63:94:88:49:54:78:02:c5:
                    f7:0a:c5:9f:be:72:73:2a:0b:e7:4b:02:aa:ee:1c:
                    63:4a:34:fe:7e:8b:1c:58:cd:1c:f7:ef:35:ed:e6:
                    e5:ab:3b:fb:3b:05:a9:71:28:fa:f5:e7:de:2a:60:
                    32:62:47:52:60:86:d0:a0:6d:f1:ab:bd:49:be:3a:
                    14:90:04:b9:0c:4d:18:5c:eb:23:75:49:b3:39:ff:
                    3e:79:67:8a:ad:ca:1b:95:7f:df:1d:c8:60:0a:4c:
                    3a:ee:fb:23:35:0d:94:51:66:b8:47:48:62:73:cd:
                    08:6a:99:ba:8f:22:d5:ae:b6:23:b4:e4:f4:2d:67:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:05:18:1D:50:43:DC:0C:36:A7:A7:86:2A:D6:1C:E1:89:25:FF:EC
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ca:43:d6:cc:7c:cc:47:63:46:22:6b:d0:3c:34:39:ff:0e:
         55:39:17:84:28:09:60:a3:2e:e6:9a:ca:35:ed:17:6b:d3:d2:
         1a:be:5f:f7:83:62:80:ab:7f:7b:99:de:28:8a:ea:da:78:95:
         7a:af:c5:f8:37:fd:df:1d:54:3c:f1:aa:db:f3:d1:fa:24:7b:
         b7:22:4f:27:18:6c:d4:25:43:ad:80:11:82:91:ca:d9:2c:c3:
         e3:d5:13:08:84:d4:b5:c8:d1:14:47:4d:11:15:d6:7e:83:58:
         a4:93:dc:54:5b:0c:cd:e0:61:d6:f5:d4:bc:a7:7f:df:f0:5d:
         94:a5:2e:e2:8c:32:fb:5e:ae:96:19:73:8e:a1:5e:89:17:ed:
         83:a6:e9:b7:ed:b2:65:fe:4a:9a:28:dc:47:b2:48:58:99:c2:
         77:48:b4:d6:70:e3:35:81:2a:3e:79:23:9a:10:1c:f7:0d:52:
         f3:39:b1:21:eb:ac:b6:a1:46:28:b7:3d:fa:a4:24:c3:82:7d:
         63:d8:37:5f:38:42:d5:c5:5c:2d:b3:ac:d9:74:b7:32:c7:c0:
         f1:b5:37:2c:14:2b:1d:d9:00:bd:61:8b:15:27:b8:db:0b:35:
         bb:80:ee:54:69:f9:2a:b0:76:85:51:2c:21:c2:c1:6f:3a:bb:
         ff:8d:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:08 2025 by rpki-client on console.sobornost.net