Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier: DPtdIPXMcCEzRv75PD1F2az+94Fhj5sXjbQIn/HQQEQ=
Subject key identifier: 32:5B:B9:27:8E:BF:27:FA:9F:C1:0D:38:0C:4E:AA:64:D0:A7:AE:8A
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 1BB6D4B211983F451906A1F0297546D49EF28F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number: 0743
Signing time: Sat 14 Jun 2025 02:48:42 +0000
Manifest this update: Sat 14 Jun 2025 02:43:42 +0000
Manifest next update: Sun 15 Jun 2025 03:25:42 +0000
Files and hashes: 1: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: s6GpFm++Td2vziv7b8evt+nq8qsZvz/bpd1yFaiS6N4=)
2: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: ppqNksF3n7fPwO5WgYTzKi2YGU48/L6v9GrG4sjn038=)
3: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: XNpTfw0GR0xZwJyCQLIkDsV7NTLx+baYV6zLrseLr90=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b6:d4:b2:11:98:3f:45:19:06:a1:f0:29:75:46:d4:9e:f2:8f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: Jun 14 02:43:42 2025 GMT
Not After : Jun 15 03:25:42 2025 GMT
Subject: CN=325BB9278EBF27FA9FC10D380C4EAA64D0A7AE8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:85:65:eb:0a:fd:0b:5c:e0:86:64:3c:fb:
e8:a7:b8:eb:c4:65:cc:e1:0b:9e:26:80:a4:f7:01:
31:28:44:a7:be:a8:fd:a4:20:6d:a4:5a:79:76:3a:
49:dc:6c:b9:a6:72:5d:f5:87:cb:15:1a:7e:3c:2b:
a0:d3:5e:30:46:d1:ed:aa:fa:39:14:8a:61:0c:12:
18:81:e8:77:3d:c7:11:49:7b:3c:e8:42:d9:63:bc:
bc:f2:d8:de:0f:f1:5a:97:89:c1:fe:9d:c8:1a:2f:
fe:13:b7:fa:4c:97:f5:f7:43:12:05:42:ef:57:16:
73:d7:da:2e:96:6a:11:39:69:5c:69:e5:45:45:d9:
d3:f8:7c:80:6e:37:c9:04:1f:3d:97:72:21:90:6f:
62:60:d1:51:ad:59:f6:bd:0a:23:6c:6a:f1:c6:35:
a8:d8:93:41:f4:a0:61:06:7c:5f:8b:c9:28:dc:ba:
52:c7:ce:11:bd:08:93:f4:9e:f7:e0:12:36:a2:4f:
d1:fa:7e:65:c0:3c:b8:40:52:d9:e6:bc:3b:3b:e7:
76:c1:1f:6b:fe:64:c9:61:aa:83:cd:ab:3a:9d:6a:
df:bb:ed:a1:2d:af:7c:40:f2:5c:25:b6:fb:d6:1f:
81:38:49:96:60:03:9c:e9:27:b3:5a:7a:05:33:52:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5B:B9:27:8E:BF:27:FA:9F:C1:0D:38:0C:4E:AA:64:D0:A7:AE:8A
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b2:42:af:8c:fe:99:06:e5:e0:15:0c:da:9d:21:35:82:bd:
6d:ee:80:7a:12:58:6a:44:0c:4e:df:ac:87:96:4e:7c:42:bf:
41:59:16:96:f9:21:d1:a5:41:1b:6a:f9:be:c7:01:6d:75:77:
94:fa:ef:bd:61:ef:5c:5e:42:65:a7:3a:da:cc:47:5c:83:63:
67:c7:03:5f:88:c6:e7:e1:4a:5b:8d:81:18:73:7d:a8:b3:67:
65:da:2d:b7:c2:86:57:15:be:26:0d:87:d3:4b:fd:1b:47:d7:
0d:9f:52:4c:8c:51:ff:44:b4:b5:8d:4d:32:10:23:f5:4a:2e:
f5:1e:f1:d8:87:57:eb:be:34:9d:c4:3e:72:4a:78:24:51:a0:
a7:8f:57:a1:73:e8:94:3a:94:e0:ec:d5:d2:af:1d:30:9c:27:
6a:72:65:b8:f3:e6:61:de:54:bb:4c:78:96:fb:d9:20:cb:d9:
64:88:85:0b:e5:af:3d:00:64:76:6c:3a:da:32:c3:8f:97:6c:
25:dc:85:d9:cb:72:93:63:4f:ba:2e:e1:8c:5d:54:2b:71:ce:
3d:73:6b:85:3e:05:e2:20:bd:74:55:2e:0b:67:04:cb:c4:50:
d2:93:00:66:66:98:dc:c9:e7:98:e1:ce:d7:b7:57:a7:1e:ef:
76:f9:b9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:45:53 2025 by rpki-client