Manifest

$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
File:                     DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft (raw, json)
Hash identifier:          XvKRQsp9zMrySAQ1jwVUfiAL/Qf4v7jc9Xx8gJ579E0=
Subject key identifier:   88:07:4A:2E:87:E1:CF:DB:B8:67:FD:3B:ED:19:91:0E:73:DB:4D:E0
Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
Certificate issuer:       /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
Certificate serial:       5B2B4438FEB9725E79705854819096D532AA6E98
Authority info access:    rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
Subject info access:      rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
Manifest number:          85
Signing time:             Thu 26 Mar 2026 07:06:47 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:47 +0000
Manifest next update:     Fri 27 Mar 2026 10:58:47 +0000
Files and hashes:         1: 323430313a323036303a623030323a3a2f34382d3438203d3e203234333831.roa (hash: lXc0eV4FfLxr7QyLKNsbJLXUNMB04fs7kpQDovC34FM=)
                          2: DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl (hash: hjWykP2cgVFQILEFTr61g/fM6+SIMBP5uDG6GAoA6pU=)
                          3: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (hash: xLbTWGSR0HvTnUdYp2nr/La6L8Rr5k/ezhkiW+Q3tmM=)
                          4: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (hash: VmIkUnZdOEjdRj9sOfiNi5GekVaoRBas6LxAq9Y6qTU=)
                          5: 323430313a323036303a623030333a3a2f34382d3438203d3e203234333831.roa (hash: J0di9kPzuSxqtVKjyk3HKPng7QlOXjQ5p66cPtKaTQg=)
                          6: AS24381.asa (hash: 1boloodfS0nsEQoFQKonidrDaGC7VyTJt9gACgpRBfs=)
Validation:               OK
Signature path:           rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl
                          rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 19:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2b:44:38:fe:b9:72:5e:79:70:58:54:81:90:96:d5:32:aa:6e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
        Validity
            Not Before: Mar 26 07:01:47 2026 GMT
            Not After : Mar 27 10:58:47 2026 GMT
        Subject: CN=88074A2E87E1CFDBB867FD3BED19910E73DB4DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:29:5c:c0:12:cd:1e:6c:f8:a5:df:36:fa:c4:
                    ff:da:df:3f:e2:b9:d2:01:f5:36:6d:e4:0d:3f:7f:
                    71:73:77:26:ec:7d:fe:6a:ef:33:a0:e4:b0:42:bc:
                    06:bb:25:6d:98:1d:04:54:d3:09:70:77:57:a2:1f:
                    ee:18:23:62:89:26:59:ab:ce:e2:bf:24:f3:1e:21:
                    d5:a4:d5:d7:28:61:0e:46:ce:50:83:50:f8:f5:66:
                    2e:45:8f:31:0a:3d:00:9e:85:ae:10:56:da:b4:ba:
                    44:7d:fd:f4:36:66:22:52:c7:f2:3f:ee:df:e8:cc:
                    59:a4:e5:03:9b:0d:74:73:da:f3:3b:49:5c:5c:a2:
                    7c:59:fd:c3:57:82:f0:e3:e0:56:52:03:0b:ba:67:
                    12:37:cb:82:bc:da:db:56:4d:45:f9:19:13:a8:b6:
                    01:23:1c:0e:cc:a1:56:9e:40:ed:65:5e:52:6d:bb:
                    07:87:ac:f7:0f:5e:37:5f:40:d2:b2:b8:80:ef:34:
                    03:91:e2:46:fd:fc:47:0c:b1:a4:ef:de:0b:ef:a2:
                    5c:f2:94:9c:1f:90:c5:46:ef:73:e8:a6:76:30:3a:
                    e1:0e:b4:24:d5:2a:f5:97:ef:ca:86:7e:60:14:de:
                    6e:48:82:16:80:f6:b2:4c:12:87:8f:f3:74:df:08:
                    d5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:07:4A:2E:87:E1:CF:DB:B8:67:FD:3B:ED:19:91:0E:73:DB:4D:E0
            X509v3 Authority Key Identifier:
                keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c3:64:7e:8d:25:0d:40:67:6b:9b:68:92:8d:74:f5:ea:9f:
         99:48:6d:f9:3b:68:b4:a9:7a:cd:b8:3e:2f:1e:a2:4c:4a:08:
         62:59:75:36:1c:93:6c:f7:96:1a:65:c6:8a:ba:ed:69:9d:c5:
         3e:38:41:27:41:19:7d:dd:1b:09:e1:e5:06:81:49:ab:9f:f7:
         61:25:cb:d1:1e:92:ca:7b:00:5d:de:c3:23:cb:43:06:52:f0:
         e2:25:bf:5b:2c:ad:fa:39:5b:26:81:20:eb:d2:5e:b4:ed:d2:
         c3:13:14:64:31:04:1a:9a:96:e8:f9:8d:90:50:5e:f9:d6:d4:
         ef:a1:dc:a2:fb:67:95:49:96:ec:db:e7:fb:18:f5:ab:5d:e7:
         45:b5:f2:d0:6a:09:99:73:24:c2:87:92:d7:5c:ac:19:03:4d:
         d5:19:5e:db:48:56:aa:19:e9:5b:1a:7b:f8:2c:e3:78:32:58:
         00:49:59:a9:41:3d:25:3d:7b:c2:3d:d3:47:32:8d:56:ab:f7:
         8c:1c:f1:8b:28:34:ad:63:f4:ed:3b:4a:49:03:3a:31:e6:80:
         58:ff:b5:7c:a7:cb:65:ab:d5:42:40:bf:b7:ad:62:4e:47:4d:
         cd:10:a9:4f:61:23:2f:55:2c:19:b7:5e:0f:3c:5a:4a:9b:c9:
         53:fd:a9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:46 2026 by rpki-client