Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier: 9o2lu6FhJV77tGTh5pE1j9cFuhZSF/M+HrPmI5n0LjM=
Subject key identifier: 47:A9:28:41:7B:C4:64:A1:BB:FD:ED:E1:17:BA:19:34:0E:F8:A1:06
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 2D4A253B70D78B1B09B5355FC0D84542A4F5EEA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number: 075A
Signing time: Sat 28 Jun 2025 14:31:52 +0000
Manifest this update: Sat 28 Jun 2025 14:26:52 +0000
Manifest next update: Sun 29 Jun 2025 17:14:52 +0000
Files and hashes: 1: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: s6GpFm++Td2vziv7b8evt+nq8qsZvz/bpd1yFaiS6N4=)
2: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: XNpTfw0GR0xZwJyCQLIkDsV7NTLx+baYV6zLrseLr90=)
3: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: YO5BzRY0TynV35WULTCnBCVOoQEqYHp6dI+oHVhgpw4=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:4a:25:3b:70:d7:8b:1b:09:b5:35:5f:c0:d8:45:42:a4:f5:ee:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: Jun 28 14:26:52 2025 GMT
Not After : Jun 29 17:14:52 2025 GMT
Subject: CN=47A928417BC464A1BBFDEDE117BA19340EF8A106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:ca:59:6a:5e:84:81:17:28:d4:a6:df:b5:
e9:4e:2d:24:d8:b6:25:4a:12:cd:8c:11:8f:2d:47:
05:c8:22:5a:66:dc:62:3f:33:c6:91:34:dd:d8:e0:
44:67:13:51:68:52:af:b0:36:43:a4:32:a2:d0:d3:
4f:fd:66:c4:81:e0:b2:4c:65:b7:df:f8:31:fb:e7:
06:ea:c1:d6:99:87:d2:68:5e:72:69:8b:e2:05:c4:
a2:90:2e:f9:70:3c:6b:ab:f3:dc:dc:62:1d:c0:b9:
04:b0:f9:25:bc:c9:e6:a0:03:40:c5:ba:76:af:ae:
39:98:4f:d2:9d:aa:3c:13:b9:f5:7c:0d:8e:80:4a:
f6:4e:f7:f5:df:59:3f:12:1f:06:e1:a7:53:b9:f2:
34:d7:97:cd:f2:49:55:bf:4b:0a:7b:76:c8:00:26:
da:aa:79:a9:db:43:47:29:6b:b9:05:b6:22:e5:5a:
7d:fc:1a:18:36:4a:39:2b:bc:40:fb:c6:a3:cc:89:
a6:69:9d:29:14:22:05:9b:21:7e:2b:7b:e8:ba:cd:
83:bb:ac:8c:48:70:5e:f5:eb:e1:4f:d7:65:9c:14:
f1:0b:1f:8e:63:2e:cf:9e:c5:03:bc:30:3a:47:a9:
ec:92:53:56:8c:98:c3:b3:e0:fa:c6:7a:62:ed:a7:
d6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A9:28:41:7B:C4:64:A1:BB:FD:ED:E1:17:BA:19:34:0E:F8:A1:06
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ce:8b:15:fd:e9:bc:b2:63:10:55:4e:c1:aa:6f:2c:da:72:
7e:1e:26:cb:2d:8e:9d:aa:6c:1f:63:b4:25:e8:83:16:d8:73:
98:59:ea:e8:b7:04:76:5c:3b:f3:41:30:78:48:c0:19:a6:06:
50:33:df:5e:96:06:d4:62:bd:46:5a:74:98:d6:56:b5:2a:72:
39:66:e4:00:76:2e:9d:c8:94:d9:bf:fa:29:f6:53:d5:91:a3:
23:20:da:6e:d3:26:75:31:01:11:41:27:3f:f3:b0:1a:c5:02:
49:5a:1e:58:2c:f9:8d:3e:36:bf:c3:ff:74:29:52:fd:bf:01:
85:a7:af:25:2f:61:ca:aa:5d:95:67:f2:db:5a:95:b4:07:4c:
ef:f0:dd:36:d2:12:24:c9:43:47:9d:55:28:93:e7:ec:b5:30:
03:74:91:f5:c1:7c:82:b7:e6:fd:ab:ab:0e:39:4f:04:53:21:
d2:57:0a:74:e2:25:de:60:2e:5a:7f:e1:c0:39:27:58:c4:4c:
4e:22:70:2e:13:48:2b:07:21:9f:6c:57:e5:00:56:d0:d4:8e:
b9:a7:ba:ec:cb:ee:5e:1a:f0:94:c1:dd:de:df:3f:34:38:13:
3f:f1:5b:e1:46:d4:5a:6d:48:0d:ce:c6:85:d1:68:e6:3d:e6:
65:9d:56:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:12 2025 by rpki-client