Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier: oupu49BfsAVFeylkFlYZRBm+s2MiqwcxDWDXTAbARd8=
Subject key identifier: E2:04:47:93:D5:7F:EC:78:FF:A1:8E:1A:41:63:C3:D5:9C:EB:94:A8
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 82A352352C6082F7833EB5D66A5CEDA54CE52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number: 0703
Signing time: Sat 26 Apr 2025 15:02:46 +0000
Manifest this update: Sat 26 Apr 2025 14:57:46 +0000
Manifest next update: Sun 27 Apr 2025 17:06:46 +0000
Files and hashes: 1: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: XNpTfw0GR0xZwJyCQLIkDsV7NTLx+baYV6zLrseLr90=)
2: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: V3v9Fio4YQh1iBsK2PSP4/fPhFok0AABQfSLBKIN5Mc=)
3: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: s6GpFm++Td2vziv7b8evt+nq8qsZvz/bpd1yFaiS6N4=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
82:a3:52:35:2c:60:82:f7:83:3e:b5:d6:6a:5c:ed:a5:4c:e5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: Apr 26 14:57:46 2025 GMT
Not After : Apr 27 17:06:46 2025 GMT
Subject: CN=E2044793D57FEC78FFA18E1A4163C3D59CEB94A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:2b:b5:df:43:aa:94:a3:da:44:2a:8e:44:
af:da:5e:97:8f:3a:d0:cd:4a:83:48:0a:ef:07:dd:
87:8e:df:f8:a5:33:55:5d:7b:db:94:39:e6:ce:9c:
d8:ee:88:e9:d3:93:7f:20:5f:86:0f:b3:18:b0:3f:
b2:f5:44:0e:49:dc:2d:d2:09:e3:7e:35:a1:1d:47:
86:cd:07:09:1b:cc:82:02:8f:2a:f0:a6:2b:8c:82:
b1:53:30:ff:3d:61:22:88:a1:87:c5:f2:c6:1f:73:
5e:4a:61:e3:ea:9c:c3:2c:1f:2d:45:dd:7f:a3:29:
b1:a0:f8:00:08:f0:85:35:60:33:04:9d:81:31:14:
62:c7:42:94:f3:e5:0b:b2:de:82:fd:37:f0:8a:49:
08:39:3d:22:90:ab:db:79:89:be:e3:fb:9e:e4:b8:
82:b7:47:11:37:d8:63:98:12:45:cb:9c:ff:f4:17:
f1:90:29:50:3b:5e:5b:d5:d8:5c:e6:1c:f8:b8:68:
25:38:ee:28:6d:5b:6d:69:fc:39:6f:ed:30:93:59:
a3:d6:75:4b:0d:41:7a:28:48:64:1c:42:1e:51:b0:
84:f1:46:97:3a:07:60:9c:14:15:bc:e8:ed:4d:72:
7f:f2:6f:2b:d7:ca:d4:90:e7:2e:d8:88:ee:32:c9:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:04:47:93:D5:7F:EC:78:FF:A1:8E:1A:41:63:C3:D5:9C:EB:94:A8
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:59:ff:3c:14:6b:30:f9:4f:aa:2b:23:02:10:50:89:7e:e0:
2a:8d:59:8b:c3:f5:df:8f:d1:dd:56:e5:e7:90:53:3d:f0:fe:
66:81:9c:c4:6e:44:1b:2e:5e:75:6b:07:d3:77:ee:4f:82:9a:
b5:1b:f7:a4:ca:8f:14:9a:a5:52:bf:de:b9:4e:79:4f:57:fb:
66:dc:9e:93:6a:73:82:9d:f9:8e:d2:31:3b:5d:68:cd:a9:ef:
8c:9e:d6:c5:61:95:8e:23:e1:74:28:67:b7:e9:0e:d0:70:37:
b2:35:ed:27:5f:39:d1:01:d1:f9:6d:8c:8f:0e:a9:7f:ec:94:
87:0e:85:21:ed:e5:df:8d:a7:29:2e:75:c2:06:5f:59:74:b9:
8d:9e:90:98:ed:9d:f6:7e:c9:12:d4:56:3a:01:93:e4:89:7d:
3a:b4:50:e7:ce:85:0f:70:17:cd:a4:ca:a2:eb:f3:bd:69:39:
d6:72:c6:e0:76:87:bb:7b:bc:ce:d0:63:bf:f8:f3:b1:83:d6:
fa:4a:ae:33:5b:39:de:94:2e:05:01:23:04:54:e1:dc:b6:e9:
e5:81:4f:e5:7a:49:85:a8:d5:17:d0:e1:8f:91:36:d8:fb:cf:
fa:93:c5:c7:f6:23:49:18:02:05:cc:ec:a3:6b:ec:0f:06:71:
b5:41:22:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:02:27 2025 by rpki-client