Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File:                     211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier:          Ywl9womoWM1X7nFSKSLuSpC5WVfNpalQ1UcWDeBLPOc=
Subject key identifier:   85:8E:DE:E5:5F:7B:5A:6C:58:ED:75:7D:9A:A6:F8:A4:8D:91:90:95
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer:       /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial:       5F261A493545D385CB01CDE9E62916813599E96D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number:          09C8
Signing time:             Mon 21 Sep 2026 13:16:44 +0000
Manifest this update:     Mon 21 Sep 2026 13:11:44 +0000
Manifest next update:     Tue 22 Sep 2026 16:54:44 +0000
Files and hashes:         1: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: tvXhFsRYtiC3kIwxPbAszsmESvosb1sxqOklTTpLUA4=)
                          2: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: Shflmw47f/M08AdH9AVMRrDOyY+8FNWh8sdfintkJxM=)
                          3: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: q017TX6DmgwzPxxi9GThQ2kGNp2z5lVWdZZuLeMmgA8=)
                          4: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: XQtG13qUPKscYxJ92+KDN0tgLgktYMy50emVYCNf78E=)
                          5: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: gHNzka6wDH+SUzb8zmjdzjN6qCdxrntFR5/C2WOb9+k=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:26:1a:49:35:45:d3:85:cb:01:cd:e9:e6:29:16:81:35:99:e9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
        Validity
            Not Before: Sep 21 13:11:44 2026 GMT
            Not After : Sep 22 16:54:44 2026 GMT
        Subject: CN=858EDEE55F7B5A6C58ED757D9AA6F8A48D919095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:52:ed:bb:8e:2f:a4:07:6e:9a:b1:91:b9:48:
                    45:69:7d:7c:e9:1d:b6:0b:a7:00:3e:15:15:12:fa:
                    aa:ae:a1:50:be:88:40:9a:c1:d8:64:3f:aa:a9:8d:
                    2b:dc:70:67:3e:e1:82:c7:46:91:9d:36:09:3f:e3:
                    f0:ad:c7:bf:f8:11:81:97:05:1a:b7:85:d5:54:3c:
                    8c:7c:ee:b6:a4:a7:40:84:be:af:e3:88:32:e1:e1:
                    4d:7c:5a:2d:9e:71:48:9c:00:c7:d2:a0:66:a2:05:
                    cc:36:b8:03:81:a5:58:cb:5e:0d:2c:de:91:f4:70:
                    09:66:c7:09:85:41:fa:1d:70:44:bf:ec:2e:fc:45:
                    ed:1c:5a:0f:35:bb:46:6e:71:61:17:07:9b:4c:c9:
                    96:21:c2:8d:d8:0b:94:2d:45:68:a9:75:66:72:90:
                    db:d3:31:10:23:02:2a:05:e8:bc:ab:a1:f7:b2:05:
                    b1:bd:24:fe:6a:3d:88:33:e5:c1:d8:eb:32:ab:5c:
                    50:93:e5:89:ab:98:c3:c4:51:db:41:7b:38:8e:bd:
                    76:04:18:2b:6d:46:f4:02:38:af:1c:5e:67:6f:3d:
                    b6:6a:cb:4f:d4:73:45:62:24:46:f9:30:ef:25:6e:
                    9e:1e:0d:51:22:54:cb:60:21:2f:b2:57:91:1a:b2:
                    2a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8E:DE:E5:5F:7B:5A:6C:58:ED:75:7D:9A:A6:F8:A4:8D:91:90:95
            X509v3 Authority Key Identifier:
                keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:73:6c:69:e4:82:26:e5:a7:70:24:0e:f0:01:d1:09:d9:77:
         96:32:5f:d5:84:d1:ad:75:7d:fa:11:de:b5:c3:fd:79:11:9b:
         6d:a4:37:45:ee:f3:c8:8f:18:f0:49:5b:f5:b6:8d:28:a7:40:
         d7:6b:ce:41:70:f5:64:87:8e:18:0f:69:64:77:5f:ff:eb:88:
         e7:0d:f8:7e:f3:31:33:08:43:80:11:f1:bd:ce:d4:d5:2e:1b:
         30:b5:9c:bd:7c:8a:5d:7e:3c:2e:ed:b3:d5:61:85:3b:93:5a:
         d1:e0:87:9d:9a:5f:7a:62:63:fc:9a:85:81:c1:c5:71:77:b0:
         f2:f0:a0:a7:55:e6:0b:a6:3c:d6:de:c4:e3:8e:5e:8a:3a:20:
         2c:bd:89:48:a3:8d:07:3a:2c:16:4e:8f:70:fc:cc:b9:0f:67:
         fd:a5:a7:50:f8:81:da:40:9f:e6:b2:6a:34:da:04:0e:07:a8:
         dd:81:e2:d1:de:53:d5:30:74:f5:de:af:86:12:39:f7:af:b2:
         ff:b6:0e:28:10:01:2e:50:1c:32:66:b8:88:fe:44:fc:96:0e:
         6c:59:6a:25:78:33:96:46:fe:e9:e4:67:7b:a9:9c:e3:2e:79:
         f0:68:d1:85:d4:aa:ca:76:da:fd:e0:0c:bf:83:9b:f6:78:bc:
         11:32:33:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----