Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier: jgUAwwTDLa0Y6mx+ZmkjbnmAHgj65qHwPswBhtYTsag=
Subject key identifier: 13:C3:1B:96:5B:D9:B0:CF:7E:5F:A8:81:67:19:DD:B8:C8:6B:21:73
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer: /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial: 704E23F6F44CADFAF9AA4F98D41A5359108C2B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number: 08EF
Signing time: Fri 17 Apr 2026 03:32:01 +0000
Manifest this update: Fri 17 Apr 2026 03:27:01 +0000
Manifest next update: Sat 18 Apr 2026 03:36:01 +0000
Files and hashes: 1: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: E9tvp90Kpr61hZSI7tBGjhyzBxdB/JF9I/2z8pLfS80=)
2: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: MmgIyR73WlehdKezTZ7m7o4J8sPfvOsWS399H8z7PMs=)
3: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: 3kgHFhx3RthVERDFxT/EsGeRl8L0/YVyrMuknKzRqfA=)
4: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: XsqA+TFyw4R30fQ6BqGKJWJhonWMXiFw7yJP0Doqp4I=)
5: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: F4WabMGA3Pd6V5rJxa03gHF4t+esMEKIXZfZj0yADbc=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:4e:23:f6:f4:4c:ad:fa:f9:aa:4f:98:d4:1a:53:59:10:8c:2b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Validity
Not Before: Apr 17 03:27:01 2026 GMT
Not After : Apr 18 03:36:01 2026 GMT
Subject: CN=13C31B965BD9B0CF7E5FA8816719DDB8C86B2173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:6c:e2:9e:0e:23:bf:7e:fa:71:c6:98:57:
68:00:a3:8f:4b:93:1a:8b:55:c7:cc:1f:6a:26:a6:
ed:ca:b0:7a:66:35:6f:27:66:82:a7:fd:32:56:8a:
f8:cc:0f:9c:f8:48:c3:65:d9:cd:3e:a5:c0:a5:01:
f6:69:84:2f:85:ca:c8:c1:36:32:d2:e4:3a:d9:93:
5a:be:5d:af:f3:50:23:ca:48:d9:01:2f:29:24:87:
3f:af:24:c4:0c:85:22:50:5c:9a:c5:44:32:29:cd:
ca:43:7f:e5:1f:42:a2:6a:d8:f2:81:56:d7:08:d3:
d2:2d:c9:d8:a0:75:92:de:01:3e:19:49:4f:95:87:
4a:c8:50:4a:0c:4d:05:93:47:82:06:39:8b:e5:f2:
6f:e8:30:06:e9:a4:52:e0:1e:4d:2c:ad:e1:18:15:
84:a7:cf:63:e8:91:0b:98:e6:bb:ff:67:d6:cc:5d:
78:90:51:df:e7:5f:ac:ec:d3:12:81:dc:e4:c7:26:
9e:d4:5f:50:85:94:8e:d3:bb:82:1d:6a:17:c1:ce:
33:33:f4:31:dd:ab:1a:27:19:43:74:c4:f2:d5:d4:
d3:d4:c6:3a:d6:f7:55:c5:1b:2d:88:a0:32:27:4c:
74:02:14:ef:0e:82:a2:23:3d:55:ed:ad:12:bc:4a:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C3:1B:96:5B:D9:B0:CF:7E:5F:A8:81:67:19:DD:B8:C8:6B:21:73
X509v3 Authority Key Identifier:
keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bc:7e:bf:b2:45:23:c8:93:62:d1:89:ca:a7:e4:be:0e:11:
bd:64:8d:fe:34:1b:1e:bf:8c:a0:43:aa:66:05:c2:ac:fc:7f:
db:b6:e4:5e:00:51:bf:59:58:42:e1:2e:0d:1c:16:b3:5d:3a:
ae:18:29:a2:43:ff:a8:8e:e9:bb:34:46:b0:df:c8:72:19:a1:
76:49:c9:55:ed:31:00:67:32:c9:00:4f:c6:ba:df:79:98:a3:
ac:cb:ae:a8:28:88:ef:26:c0:c9:e2:e9:6c:38:67:3f:c1:9a:
c5:7b:d5:cb:e8:f2:be:89:17:97:fb:f7:09:ce:93:f6:3b:99:
a6:be:9c:5a:ef:26:5f:89:24:0c:c0:df:af:cc:08:b5:2f:1b:
79:6f:c2:91:92:4e:d3:a8:36:14:95:1f:a3:7d:28:64:82:a0:
e3:89:dd:1f:7f:c0:29:51:0c:44:8d:88:90:8d:c0:75:37:26:
66:be:04:ba:00:b3:fc:f1:93:d5:d0:b8:f6:11:cd:68:6d:81:
f2:e1:40:d3:e2:25:2f:84:b7:88:c3:17:b8:e7:35:38:98:95:
92:93:6b:e3:18:a5:ae:36:ca:50:26:c8:c0:78:8c:0c:37:c7:
b5:80:6c:ac:41:10:ec:9d:2e:ed:43:65:90:aa:fc:4f:d9:fe:
dd:d3:05:28
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIUcE4j9vRMrfr5qk+Y1BpTWRCMK0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExYTA0ODg5MDk2OWZhN2Q0YjZhZWY4YzAyMGNkYTQ0
NDRlYzJlNTAeFw0yNjA0MTcwMzI3MDFaFw0yNjA0MTgwMzM2MDFaMDMxMTAvBgNV
BAMTKDEzQzMxQjk2NUJEOUIwQ0Y3RTVGQTg4MTY3MTlEREI4Qzg2QjIxNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwjWzing4jv376ccaYV2gAo49L
kxqLVcfMH2ompu3KsHpmNW8nZoKn/TJWivjMD5z4SMNl2c0+pcClAfZphC+FysjB
NjLS5DrZk1q+Xa/zUCPKSNkBLykkhz+vJMQMhSJQXJrFRDIpzcpDf+UfQqJq2PKB
VtcI09ItydigdZLeAT4ZSU+Vh0rIUEoMTQWTR4IGOYvl8m/oMAbppFLgHk0sreEY
FYSnz2PokQuY5rv/Z9bMXXiQUd/nX6zs0xKB3OTHJp7UX1CFlI7Tu4IdahfBzjMz
9DHdqxonGUN0xPLV1NPUxjrW91XFGy2IoDInTHQCFO8OgqIjPVXtrRK8StMvAgMB
AAGjggIBMIIB/TAdBgNVHQ4EFgQUE8MbllvZsM9+X6iBZxnduMhrIXMwHwYDVR0j
BBgwFoAUIRoEiJCWn6fUtq74wCDNpEROwuUwDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzIvMjExQTA0ODg5MDk2OUZBN0Q0QjZBRUY4QzAyMENE
QTQ0NDRFQzJFNS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu
YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lSb0VpSkNXbjZm
VXRxNzR3Q0ROcEVST3d1VS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzAL
hmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTkyQTk4
MDAwMC8yLzIxMUEwNDg4OTA5NjlGQTdENEI2QUVGOEMwMjBDREE0NDQ0RUMyRTUu
bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQBVvH6/skUjyJNi0YnKp+S+DhG9ZI3+NBsev4ygQ6pmBcKs/H/b
tuReAFG/WVhC4S4NHBazXTquGCmiQ/+ojum7NEaw38hyGaF2SclV7TEAZzLJAE/G
ut95mKOsy66oKIjvJsDJ4ulsOGc/wZrFe9XL6PK+iReX+/cJzpP2O5mmvpxa7yZf
iSQMwN+vzAi1Lxt5b8KRkk7TqDYUlR+jfShkgqDjid0ff8ApUQxEjYiQjcB1NyZm
vgS6ALP88ZPV0Lj2Ec1obYHy4UDT4iUvhLeIwxe45zU4mJWSk2vjGKWuNspQJsjA
eIwMN8e1gGysQRDsnS7tQ2WQqvxP2f7d0wUo
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:34:02 2026 by rpki-client