Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File:                     D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier:          e3RKNXpmWDCaNKdEfWy5Uer7z2QUysT7Nl9+KRgbv8c=
Subject key identifier:   84:52:35:D7:74:49:6C:81:AD:79:92:04:A7:6C:40:4A:32:46:7E:D1
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer:       /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial:       69ECBF56ED8C2827B50FB9A7A62CF7FB1C4D53EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number:          09C2
Signing time:             Mon 21 Sep 2026 14:42:07 +0000
Manifest this update:     Mon 21 Sep 2026 14:37:07 +0000
Manifest next update:     Tue 22 Sep 2026 18:18:07 +0000
Files and hashes:         1: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: h8a427Ez9rzfqlaqtA6894ZSv+71T9bHx9uuOnGsCaE=)
                          2: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: rk6Y7tPy8Mo1oakuZi39/fIjJva75BwimkeClcNqXvw=)
                          3: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: UUZSLWq+XI/WHVaboJm1ogby6P5Ai2EZWO3AtQn+u/Y=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ec:bf:56:ed:8c:28:27:b5:0f:b9:a7:a6:2c:f7:fb:1c:4d:53:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
        Validity
            Not Before: Sep 21 14:37:07 2026 GMT
            Not After : Sep 22 18:18:07 2026 GMT
        Subject: CN=845235D774496C81AD799204A76C404A32467ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:d0:bd:c0:0c:35:bd:1b:7f:3b:13:ec:16:
                    a7:a6:6d:5a:8d:32:72:e2:89:48:3a:b2:7f:15:59:
                    7c:3c:7e:d6:a9:a8:dc:51:ac:ff:7e:f0:0e:e0:b4:
                    09:59:1a:40:99:fe:65:61:2b:e4:da:82:e0:7c:a9:
                    c4:f2:4d:11:8a:c5:0c:f1:3e:33:d6:dd:c7:ca:d8:
                    83:9d:62:80:30:7b:3a:02:31:4c:df:ce:f1:b3:07:
                    2c:10:00:ec:be:10:ab:5e:89:ee:2f:1a:bd:66:c4:
                    10:a0:27:04:07:80:80:2e:c5:f0:7d:c3:57:1c:50:
                    1a:8f:63:ff:27:4d:f8:be:3e:86:21:7e:55:95:f4:
                    01:93:bd:23:17:44:e4:c7:34:d0:bc:87:05:1e:25:
                    37:05:c7:ec:6b:f6:bd:c5:7f:00:d8:81:4e:fb:ef:
                    ed:35:e8:14:b6:f9:b6:a3:e6:3a:ff:94:cf:b3:d5:
                    b9:22:3a:e7:92:c8:9b:5b:34:88:6d:fb:85:be:68:
                    f0:f6:83:95:39:f2:0f:0b:0b:a4:15:8a:6c:c1:67:
                    cb:c0:5e:f2:3b:b9:d2:a5:91:72:f4:1a:5e:38:ab:
                    b1:ab:ee:85:36:ca:73:20:4f:23:59:6f:57:7e:86:
                    44:e3:bf:27:b3:f3:15:44:cb:20:88:b2:9f:c4:c2:
                    b6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:52:35:D7:74:49:6C:81:AD:79:92:04:A7:6C:40:4A:32:46:7E:D1
            X509v3 Authority Key Identifier:
                keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:89:42:e2:ab:1f:86:a4:6e:de:4d:73:47:0a:d6:4e:f3:aa:
         18:47:fd:ea:23:bc:91:11:e2:69:ee:85:65:3d:44:93:8c:7d:
         4f:8a:1a:d6:2e:2f:f5:ea:ab:5e:ec:ec:ce:56:25:62:94:d9:
         f2:d6:f8:6b:1c:97:d5:40:00:e5:c1:73:47:91:16:42:85:fe:
         92:ab:6c:53:90:74:09:73:ce:f1:43:b5:79:d1:71:6a:9f:bc:
         10:78:fe:7f:f6:d3:6b:e6:9c:1b:6b:83:48:83:ad:6c:8d:8f:
         88:d1:44:f0:ce:9d:84:b9:b2:61:f1:4f:c2:e1:6a:c7:e8:5a:
         c8:0e:96:9f:47:1c:31:8c:11:a4:9e:51:20:4f:1b:a7:b1:78:
         24:66:8d:d4:82:e4:f7:8e:77:68:be:71:f5:19:59:9a:af:4c:
         a0:7d:ad:a5:af:3b:ae:75:01:a1:f4:05:f3:e0:c9:82:8e:bc:
         d8:5f:56:ce:fb:67:bb:95:df:d0:6e:72:61:c9:da:25:98:1a:
         9c:49:29:92:56:74:fe:5e:cf:3f:35:6f:0d:e2:d0:f0:0c:45:
         b7:7c:dd:f5:06:ce:2b:80:2f:7c:03:27:d5:b2:38:54:83:3d:
         f6:57:f6:15:16:b1:07:2e:c1:ad:ba:a2:de:8d:71:90:0a:0d:
         a8:a6:23:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----