Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier: x9kzHF978/xfYbv4C4cIS26Hfa4PySr+RfX6jMaHo9Q=
Subject key identifier: CA:55:58:BF:EC:C7:36:2C:E0:D7:31:16:BA:3E:E4:8A:BC:FB:BD:AB
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 7DB9F8B392E857B148706E8FC8BE53ED88E340DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number: 08E7
Signing time: Fri 17 Apr 2026 01:41:39 +0000
Manifest this update: Fri 17 Apr 2026 01:36:39 +0000
Manifest next update: Sat 18 Apr 2026 04:41:39 +0000
Files and hashes: 1: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: Ncgu1a2T21OhbN3oNHBmUzskub5uVy54SmGOJ7OwCMw=)
2: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: UC4fcIxC57X0WQOWt1PA/l9hsi16QhPa9mORMeVjnmM=)
3: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: JMTK/ixooA7/CuaFhhb0VfCiBAjSx1uIdSadkIu75P0=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b9:f8:b3:92:e8:57:b1:48:70:6e:8f:c8:be:53:ed:88:e3:40:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: Apr 17 01:36:39 2026 GMT
Not After : Apr 18 04:41:39 2026 GMT
Subject: CN=CA5558BFECC7362CE0D73116BA3EE48ABCFBBDAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c1:a2:15:b8:54:75:8f:38:e4:aa:2c:90:40:
e7:5b:fa:48:fd:e1:ee:ef:11:6e:63:6c:16:8e:4d:
b7:3c:83:f8:7e:bf:b9:11:0a:d3:ea:c7:db:98:ee:
48:f6:04:51:c8:69:97:22:cc:eb:8b:d6:b0:43:8b:
ad:74:09:f1:d0:2a:c8:33:a4:8c:75:aa:4e:2b:d4:
f5:37:ad:f8:1c:21:cc:90:ad:71:a4:e8:97:32:ae:
fd:9d:86:21:b0:9b:4e:27:f9:34:5c:e5:21:c2:39:
5a:4b:61:73:7b:7d:eb:aa:42:8d:bf:c4:92:09:35:
56:24:aa:7d:30:d6:85:7d:b8:62:e9:a6:03:38:ab:
50:53:2b:0e:17:d5:24:7b:ba:da:08:8e:d9:f7:ed:
45:b5:04:1d:55:1a:da:54:2f:4b:ec:f1:c0:e9:67:
9e:f7:5b:85:c5:85:fb:ff:d7:c0:0d:3d:2a:ab:57:
52:9d:a1:7c:0e:51:37:0c:b2:24:09:c4:07:38:3d:
05:b7:ab:da:60:13:45:a1:f6:ce:8a:b0:bb:aa:34:
f8:94:9e:d5:a4:18:b5:e9:b0:fa:31:b0:c2:ee:fc:
4b:cd:93:64:57:4d:a0:48:ea:ee:c7:4f:d4:05:c8:
4f:96:e4:06:f9:2a:12:74:ae:1b:72:56:a4:f8:5e:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:55:58:BF:EC:C7:36:2C:E0:D7:31:16:BA:3E:E4:8A:BC:FB:BD:AB
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9a:cb:c9:54:a0:6c:e8:de:24:90:ae:ce:3c:11:c5:de:20:
c8:d8:0a:65:52:57:55:8c:9d:8c:44:eb:7d:97:c1:0b:f7:c1:
e1:82:2e:f7:0c:f8:a8:97:3a:15:2e:5c:6a:19:a2:f5:89:ca:
f7:f1:a4:5f:4d:3d:37:82:35:7a:32:67:2b:4a:96:1e:27:32:
91:da:be:37:8d:4f:80:1a:11:5d:77:4f:da:1d:f8:eb:5b:dc:
29:7d:d2:9a:6c:86:68:df:1f:c4:47:bd:19:12:1f:09:84:74:
3a:34:a7:ca:5c:da:b5:3c:f0:3f:1d:54:1e:4a:7c:60:3e:42:
cf:9a:e8:95:11:e9:24:7d:fa:4e:5b:7a:6f:1d:1b:db:a2:46:
9a:df:ee:f1:a1:44:ba:8f:cf:b3:0f:95:80:7c:29:2b:78:4d:
c3:89:b6:ee:2c:63:bc:d7:5f:53:87:ad:e9:32:04:e7:26:cf:
b7:a0:32:dd:79:1a:a9:45:ad:21:98:49:29:e7:ea:bf:eb:78:
32:f2:58:a1:0d:9a:7f:3f:c9:39:d9:0b:0c:91:63:3e:d1:dc:
64:91:3e:a0:f5:54:61:27:01:10:45:ea:b9:2b:bb:23:cd:70:
a5:d7:42:92:f0:10:5e:7a:94:3b:a8:fb:fc:ca:a4:f5:4b:ba:
4e:71:ad:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:59 2026 by rpki-client