Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File:                     D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier:          DV4q1nw+jXxhC4xvEl0enEHXAUxqSJUSoVPrY4Soi80=
Subject key identifier:   13:AC:75:50:58:F2:38:87:1F:E6:87:D6:33:C7:A9:7F:45:B2:2C:12
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer:       /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial:       05439824335A2C003C5761880823DA7E62417C5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number:          0970
Signing time:             Thu 23 Jul 2026 14:59:46 +0000
Manifest this update:     Thu 23 Jul 2026 14:54:46 +0000
Manifest next update:     Fri 24 Jul 2026 18:55:46 +0000
Files and hashes:         1: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: CMHnL5izjCc2IvYwXUCHO2oQc9xOmVdYF9YAzQ3lOF8=)
                          2: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: rk6Y7tPy8Mo1oakuZi39/fIjJva75BwimkeClcNqXvw=)
                          3: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: UUZSLWq+XI/WHVaboJm1ogby6P5Ai2EZWO3AtQn+u/Y=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:43:98:24:33:5a:2c:00:3c:57:61:88:08:23:da:7e:62:41:7c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
        Validity
            Not Before: Jul 23 14:54:46 2026 GMT
            Not After : Jul 24 18:55:46 2026 GMT
        Subject: CN=13AC755058F238871FE687D633C7A97F45B22C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:f2:e8:d0:ad:b8:6d:83:fe:49:40:9c:87:
                    24:3d:82:91:13:37:9b:02:9a:88:4f:4c:54:b8:88:
                    90:42:56:fa:7b:e9:54:c4:e1:34:89:50:30:b6:92:
                    56:42:06:54:e2:78:66:68:cf:5d:8c:95:55:cb:67:
                    1a:e8:4f:cf:23:2b:5b:c4:18:ce:41:1a:d8:29:2f:
                    82:de:c3:86:6b:ce:27:c9:c8:24:29:b4:ea:35:1b:
                    bb:cf:3f:8e:d0:59:12:41:30:38:24:fc:b8:30:56:
                    90:a2:6b:5c:9d:2f:34:11:b8:e0:00:b9:46:3f:11:
                    e9:46:8a:0a:35:ff:86:b4:6b:01:ce:16:0e:6a:b0:
                    62:a2:8a:d5:eb:74:76:ee:42:f5:af:6a:ed:11:4a:
                    7d:72:65:77:08:c4:bc:3e:0f:0e:0f:ac:8b:ad:46:
                    b6:0e:77:b6:94:72:91:4f:71:13:7f:85:56:74:61:
                    e3:f9:83:83:81:31:b5:6d:ff:1e:3e:9a:2e:89:07:
                    7f:13:52:53:3d:bf:e0:89:73:8c:82:f4:63:7c:b2:
                    df:1b:2e:b9:e6:ef:c0:a9:3e:93:a1:00:41:0e:95:
                    a6:5a:3b:1e:ca:6a:19:e4:4c:d1:48:87:ca:a8:c2:
                    ed:f9:f8:a2:8d:02:73:ca:38:c3:c6:6e:a1:cc:4b:
                    f6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AC:75:50:58:F2:38:87:1F:E6:87:D6:33:C7:A9:7F:45:B2:2C:12
            X509v3 Authority Key Identifier:
                keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1f:79:7f:82:bb:11:6b:ae:f2:1a:07:de:14:76:cc:0d:35:
         17:fd:67:81:a1:c8:11:56:50:2b:39:67:4c:f3:97:fc:a3:c3:
         4b:20:72:df:a9:1a:fd:ff:ea:e2:ac:42:04:90:4f:e4:e1:62:
         7c:e2:0e:0f:a1:59:a9:7a:c8:31:4e:56:88:3d:a5:6b:fb:d8:
         1e:bf:c7:78:ff:1a:31:b1:09:ec:7d:b7:ee:82:d8:4b:4f:c9:
         eb:c0:40:7d:9f:f9:5b:41:e1:6b:d1:8c:be:5a:6a:ad:e9:4d:
         49:40:e6:a5:f6:45:d2:f7:81:b8:ed:d3:85:76:a6:ef:27:75:
         5e:ee:66:b2:b8:90:f7:2e:7f:22:6b:ac:a7:1d:59:c7:22:99:
         28:7d:5d:94:78:86:ee:b7:80:d5:6a:8e:a3:df:04:bc:c5:72:
         f4:11:2c:bc:83:91:cf:db:cf:8a:5b:95:2c:45:ca:b1:92:f0:
         4a:f3:14:18:4f:55:2d:0a:2d:31:a6:3e:98:00:52:ab:68:87:
         3d:4c:c6:ea:cc:99:33:f7:2c:23:44:96:e3:4b:b0:29:13:72:
         32:73:b3:6f:03:04:f1:05:bf:ab:c8:1b:02:59:2e:09:13:0c:
         fe:0e:0b:9b:0f:e5:bc:2d:e0:69:51:71:a7:57:58:e1:47:55:
         82:3e:42:21
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIUBUOYJDNaLAA8V2GICCPafmJBfF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDQwNTgxY2E5ZGRhY2E5ZTExMDE2NWIxMWRkMjgyMGRk
N2Y1MzJjMDAeFw0yNjA3MjMxNDU0NDZaFw0yNjA3MjQxODU1NDZaMDMxMTAvBgNV
BAMTKDEzQUM3NTUwNThGMjM4ODcxRkU2ODdENjMzQzdBOTdGNDVCMjJDMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzfLo0K24bYP+SUCchyQ9gpET
N5sCmohPTFS4iJBCVvp76VTE4TSJUDC2klZCBlTieGZoz12MlVXLZxroT88jK1vE
GM5BGtgpL4Lew4ZrzifJyCQptOo1G7vPP47QWRJBMDgk/LgwVpCia1ydLzQRuOAA
uUY/EelGigo1/4a0awHOFg5qsGKiitXrdHbuQvWvau0RSn1yZXcIxLw+Dw4PrIut
RrYOd7aUcpFPcRN/hVZ0YeP5g4OBMbVt/x4+mi6JB38TUlM9v+CJc4yC9GN8st8b
Lrnm78CpPpOhAEEOlaZaOx7KahnkTNFIh8qowu35+KKNAnPKOMPGbqHMS/b9AgMB
AAGjggIBMIIB/TAdBgNVHQ4EFgQUE6x1UFjyOIcf5ofWM8epf0WyLBIwHwYDVR0j
BBgwFoAU1AWByp3ayp4RAWWxHdKCDdf1MsAwDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzEvRDQwNTgxQ0E5RERBQ0E5RTExMDE2NUIxMUREMjgy
MEREN0Y1MzJDMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu
YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFBV0J5cDNheXA0
UkFXV3hIZEtDRGRmMU1zQS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzAL
hmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTkyQTk4
MDAwMC8xL0Q0MDU4MUNBOUREQUNBOUUxMTAxNjVCMTFERDI4MjBERDdGNTMyQzAu
bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQAWH3l/grsRa67yGgfeFHbMDTUX/WeBocgRVlArOWdM85f8o8NL
IHLfqRr9/+rirEIEkE/k4WJ84g4PoVmpesgxTlaIPaVr+9gev8d4/xoxsQnsfbfu
gthLT8nrwEB9n/lbQeFr0Yy+Wmqt6U1JQOal9kXS94G47dOFdqbvJ3Ve7mayuJD3
Ln8ia6ynHVnHIpkofV2UeIbut4DVao6j3wS8xXL0ESy8g5HP28+KW5UsRcqxkvBK
8xQYT1UtCi0xpj6YAFKraIc9TMbqzJkz9ywjRJbjS7ApE3Iyc7NvAwTxBb+ryBsC
WS4JEwz+DgubD+W8LeBpUXGnV1jhR1WCPkIh
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:48 2026 by rpki-client