Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier: +5wLu/+bvZwJTLFRN59BgRC+TBZT9f23h3uoGwgAjPk=
Subject key identifier: 5C:FD:35:BC:9C:3F:B2:AE:49:14:72:56:52:8D:AD:5A:D8:9E:50:1F
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer: /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial: 167019B5AF51936B0CDB5770C5B0A0FC751E0E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number: 08AD
Signing time: Sun 01 Mar 2026 05:17:11 +0000
Manifest this update: Sun 01 Mar 2026 05:12:11 +0000
Manifest next update: Mon 02 Mar 2026 08:54:11 +0000
Files and hashes: 1: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: MmgIyR73WlehdKezTZ7m7o4J8sPfvOsWS399H8z7PMs=)
2: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: 3kgHFhx3RthVERDFxT/EsGeRl8L0/YVyrMuknKzRqfA=)
3: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: F4WabMGA3Pd6V5rJxa03gHF4t+esMEKIXZfZj0yADbc=)
4: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: EPRBAY9aRGdJhnsoOrCdj50kMYkbLurUHkj56IAfwP0=)
5: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: E9tvp90Kpr61hZSI7tBGjhyzBxdB/JF9I/2z8pLfS80=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:70:19:b5:af:51:93:6b:0c:db:57:70:c5:b0:a0:fc:75:1e:0e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Validity
Not Before: Mar 1 05:12:11 2026 GMT
Not After : Mar 2 08:54:11 2026 GMT
Subject: CN=5CFD35BC9C3FB2AE49147256528DAD5AD89E501F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:cd:40:03:ba:72:c3:a0:3e:35:aa:8c:cf:
7f:29:7f:0b:64:b0:3a:7e:94:74:6f:1e:89:fc:18:
15:fe:db:29:12:66:fb:d7:81:0e:2c:a3:35:5a:b8:
8b:3f:e5:87:09:18:24:62:f3:c3:77:91:9e:c5:61:
6a:40:33:83:66:2d:dc:c0:63:b3:26:27:f1:b3:3e:
70:14:4a:27:93:6e:cf:ff:8a:84:8a:01:bc:dd:ea:
a8:69:35:77:6f:33:7b:f7:82:9a:dd:a7:f7:b0:ad:
13:07:38:01:06:a8:b7:b8:d6:85:1f:27:ea:7e:4e:
ce:e7:56:5f:2c:b3:cd:69:b4:c8:34:2c:f3:a1:50:
c1:6e:77:55:04:87:6f:6a:6b:6b:c0:15:cb:ae:90:
91:00:fa:30:1a:cb:d7:2a:54:a0:29:7a:88:a5:42:
65:5d:ba:f6:d1:99:7f:dc:6b:b3:7c:b8:c0:27:b3:
41:3a:1f:ee:d8:17:6e:03:50:e3:32:e3:1f:86:cc:
3e:1a:5d:0d:d2:7a:98:8f:58:c2:70:6e:69:67:15:
8d:a9:4e:98:f5:d3:5f:b0:86:c7:c6:e1:b4:cf:5e:
c4:49:d5:9d:6c:43:89:b0:17:f5:d4:39:6d:be:be:
a3:8f:b6:fa:fd:03:2b:16:b2:7d:8b:bb:9a:4a:1d:
ba:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FD:35:BC:9C:3F:B2:AE:49:14:72:56:52:8D:AD:5A:D8:9E:50:1F
X509v3 Authority Key Identifier:
keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6d:e6:05:18:64:a6:17:db:d4:1d:4b:89:18:eb:6e:aa:f6:
75:a7:b8:b0:c8:f3:be:2f:44:5e:2f:0a:9e:0a:5d:ae:09:f0:
0c:35:12:65:5c:5d:33:1e:38:a9:90:12:95:1f:f7:35:e0:06:
a0:d2:fd:7c:63:61:13:d4:a0:bb:bf:a1:f3:18:9e:65:15:80:
cb:f7:30:3c:38:02:47:c2:84:e9:1a:3f:0b:57:36:6c:da:b7:
c7:46:ef:b5:3e:a8:c7:2f:da:b2:fc:c4:81:d4:35:70:ca:24:
d1:fa:c6:ef:96:da:61:57:d5:14:3a:36:4b:6c:dc:55:df:37:
59:38:1e:bb:be:1e:96:36:b4:79:11:d1:ed:56:16:17:4a:bc:
7f:a0:b7:c9:cb:7c:e9:e9:92:9b:26:a2:c1:55:a2:4a:fb:ee:
77:f0:ac:54:fe:48:1f:1e:30:20:0e:42:ae:b3:c1:f3:d8:c4:
2c:7d:fa:ef:0d:45:4f:f0:8a:28:f1:f0:b7:9a:77:0a:c5:54:
10:b9:25:2c:7b:76:22:f1:d4:46:63:24:49:f2:ec:92:c2:3a:
85:c7:e7:73:9a:60:db:4e:85:99:ab:6a:e3:c3:74:9b:f9:49:
f8:58:09:41:ed:61:a1:3e:1c:25:82:65:50:55:dd:76:78:b3:
21:5e:41:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:09 2026 by rpki-client