Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier: CvJLWqlwV+VsOeTOD+7SnwsBdMfojegM9C1e2C58XNY=
Subject key identifier: 0F:BB:A0:64:AC:F5:DD:AF:C6:AE:02:A5:1F:72:51:00:18:3A:C5:32
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 7065D42F8E58536E5B61ACA399D28EDACDFB1D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number: 0976
Signing time: Tue 28 Jul 2026 07:59:35 +0000
Manifest this update: Tue 28 Jul 2026 07:54:35 +0000
Manifest next update: Wed 29 Jul 2026 08:40:35 +0000
Files and hashes: 1: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: XrqOFpBeVLsd4Rh+ODZ6cVV26L0w2Qv3nXv0QpTo9jw=)
2: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: UUZSLWq+XI/WHVaboJm1ogby6P5Ai2EZWO3AtQn+u/Y=)
3: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: rk6Y7tPy8Mo1oakuZi39/fIjJva75BwimkeClcNqXvw=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:65:d4:2f:8e:58:53:6e:5b:61:ac:a3:99:d2:8e:da:cd:fb:1d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: Jul 28 07:54:35 2026 GMT
Not After : Jul 29 08:40:35 2026 GMT
Subject: CN=0FBBA064ACF5DDAFC6AE02A51F725100183AC532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:b8:b7:70:b7:d4:11:82:06:9b:b9:63:bf:
40:2f:82:be:fc:b3:6d:eb:de:89:e7:cc:94:8f:1f:
9c:b1:ce:50:03:52:63:44:e7:45:06:e3:70:81:3c:
08:55:a1:2b:f7:fc:cf:f0:e4:cb:9e:8c:88:9f:7e:
b3:93:14:8e:e9:7f:d0:42:fc:cf:6f:17:57:c9:72:
e4:0e:3d:1f:fe:97:b5:85:0a:a2:3f:9d:cf:80:d9:
4b:0e:41:50:a0:db:21:3b:a8:04:4c:57:86:c9:00:
80:b2:af:e3:6d:af:45:98:b5:ca:79:f6:1a:2f:17:
37:53:56:f5:13:5d:cf:db:8f:43:ef:07:93:aa:b6:
ad:2a:57:d6:34:c4:2f:f7:95:30:2a:62:80:fd:9b:
d1:6b:97:b5:3e:97:72:94:0a:b5:42:09:87:28:0e:
db:3d:ad:a3:f9:14:0c:9c:25:f7:8f:4f:f9:52:2a:
04:d6:a1:c2:ce:9a:44:8c:48:55:a7:b6:88:c5:d9:
ef:5b:0a:66:80:7c:5b:3c:27:f2:bd:c1:82:10:64:
d5:8d:93:11:55:83:57:4a:dc:86:ed:0b:16:1b:5b:
e4:0d:75:82:cd:c7:3b:ca:87:1d:17:69:1b:1c:6d:
12:88:05:68:c6:f1:1a:18:0a:a3:1a:a9:82:a2:e2:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BB:A0:64:AC:F5:DD:AF:C6:AE:02:A5:1F:72:51:00:18:3A:C5:32
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ca:75:6b:25:71:8d:f4:4e:13:5a:fe:08:bf:a3:d0:46:19:
3d:1c:d7:38:12:cf:9a:1f:64:d8:11:2e:64:26:91:bf:ab:8c:
71:75:1d:41:6e:7e:71:cb:3b:d1:b3:1d:03:c6:2b:8b:f6:9d:
6c:25:1f:cd:e5:a9:a1:bc:49:54:0b:70:18:e0:79:5c:b8:f4:
be:3f:86:8b:7f:af:90:6e:ab:22:59:12:96:10:a5:07:fe:22:
14:0a:2d:d6:26:d5:98:1d:f8:25:d1:87:40:3b:21:95:b9:7f:
37:48:6b:ab:2f:47:13:58:13:ff:5f:17:9a:0e:bd:c2:5f:13:
e5:3b:4d:6f:b9:02:aa:92:98:5a:57:d4:02:36:62:ae:7f:98:
98:58:de:63:04:d3:65:10:dd:06:46:dc:c4:0d:3e:e1:16:1e:
87:f7:8c:51:7f:16:c7:3c:52:62:e9:00:9f:37:fc:e7:7f:53:
08:07:54:5f:e6:83:b9:7f:cd:df:dd:70:d7:bd:b9:60:4b:0e:
8c:5d:46:d4:0b:c8:f8:5b:3f:ac:00:a6:da:8a:58:08:05:e0:
9f:dc:45:2c:89:3f:bf:92:a7:67:46:5b:7b:ac:f9:4d:ae:c7:
6a:24:45:64:73:5f:61:34:83:f8:4c:a7:31:49:5b:e8:d5:9e:
30:1e:75:d3
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIUcGXUL45YU25bYayjmdKO2s37HYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDQwNTgxY2E5ZGRhY2E5ZTExMDE2NWIxMWRkMjgyMGRk
N2Y1MzJjMDAeFw0yNjA3MjgwNzU0MzVaFw0yNjA3MjkwODQwMzVaMDMxMTAvBgNV
BAMTKDBGQkJBMDY0QUNGNUREQUZDNkFFMDJBNTFGNzI1MTAwMTgzQUM1MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ELi3cLfUEYIGm7ljv0Avgr78
s23r3onnzJSPH5yxzlADUmNE50UG43CBPAhVoSv3/M/w5MuejIiffrOTFI7pf9BC
/M9vF1fJcuQOPR/+l7WFCqI/nc+A2UsOQVCg2yE7qARMV4bJAICyr+Ntr0WYtcp5
9hovFzdTVvUTXc/bj0PvB5Oqtq0qV9Y0xC/3lTAqYoD9m9Frl7U+l3KUCrVCCYco
Dts9raP5FAycJfePT/lSKgTWocLOmkSMSFWntojF2e9bCmaAfFs8J/K9wYIQZNWN
kxFVg1dK3IbtCxYbW+QNdYLNxzvKhx0XaRscbRKIBWjG8RoYCqMaqYKi4mPDAgMB
AAGjggIBMIIB/TAdBgNVHQ4EFgQUD7ugZKz13a/GrgKlH3JRABg6xTIwHwYDVR0j
BBgwFoAU1AWByp3ayp4RAWWxHdKCDdf1MsAwDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzEvRDQwNTgxQ0E5RERBQ0E5RTExMDE2NUIxMUREMjgy
MEREN0Y1MzJDMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu
YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFBV0J5cDNheXA0
UkFXV3hIZEtDRGRmMU1zQS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzAL
hmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTkyQTk4
MDAwMC8xL0Q0MDU4MUNBOUREQUNBOUUxMTAxNjVCMTFERDI4MjBERDdGNTMyQzAu
bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQAvynVrJXGN9E4TWv4Iv6PQRhk9HNc4Es+aH2TYES5kJpG/q4xx
dR1Bbn5xyzvRsx0DxiuL9p1sJR/N5amhvElUC3AY4HlcuPS+P4aLf6+QbqsiWRKW
EKUH/iIUCi3WJtWYHfgl0YdAOyGVuX83SGurL0cTWBP/XxeaDr3CXxPlO01vuQKq
kphaV9QCNmKuf5iYWN5jBNNlEN0GRtzEDT7hFh6H94xRfxbHPFJi6QCfN/znf1MI
B1Rf5oO5f83f3XDXvblgSw6MXUbUC8j4Wz+sAKbailgIBeCf3EUsiT+/kqdnRlt7
rPlNrsdqJEVkc19hNIP4TKcxSVvo1Z4wHnXT
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:59:56 2026 by rpki-client