Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier: 5t8iB+C/GUeCzOLmqU3qtEY91yMpAyf/anrdn5Jz8LU=
Subject key identifier: A3:43:BD:20:12:19:F9:FB:6D:9C:81:95:58:58:65:3F:7C:E7:D4:FE
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 55D2D345043A40B047A8B6F772768D33768FAB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number: 0718
Signing time: Mon 12 May 2025 11:58:59 +0000
Manifest this update: Mon 12 May 2025 11:53:59 +0000
Manifest next update: Tue 13 May 2025 14:46:59 +0000
Files and hashes: 1: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: XNpTfw0GR0xZwJyCQLIkDsV7NTLx+baYV6zLrseLr90=)
2: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: s6GpFm++Td2vziv7b8evt+nq8qsZvz/bpd1yFaiS6N4=)
3: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: 9llWKdEV4Gas6w79nTkLQbqxWV7/9+6BFRHe6+wVVNk=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d2:d3:45:04:3a:40:b0:47:a8:b6:f7:72:76:8d:33:76:8f:ab:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: May 12 11:53:59 2025 GMT
Not After : May 13 14:46:59 2025 GMT
Subject: CN=A343BD201219F9FB6D9C81955858653F7CE7D4FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:d3:c6:3d:ed:a9:86:75:e9:e0:2b:4a:3e:
ef:e7:68:f3:16:60:b4:50:1a:a2:45:65:dc:41:f6:
bc:e4:04:e7:6c:a6:7c:de:a6:75:3a:39:c0:65:99:
4d:6f:bc:04:84:7e:26:3d:3a:e1:41:20:a9:a6:8c:
ec:05:ad:30:98:4b:8b:81:d1:8b:8b:f1:2c:64:76:
48:57:73:c8:4b:e9:d0:0d:94:bb:c1:06:a2:88:ad:
09:b8:93:58:7c:e0:e2:fe:9d:a3:ca:f8:fa:bc:61:
79:37:14:55:35:38:6b:6c:ee:5e:79:e7:1d:e6:66:
d3:49:87:5a:7d:95:7e:82:1a:ff:d1:8b:ea:94:76:
74:80:72:de:3d:5d:9c:aa:30:6c:5e:f1:89:eb:a2:
46:ac:c3:15:0e:36:a7:58:38:e8:26:40:ef:52:78:
15:de:cc:13:dd:fd:bb:39:5c:e7:26:05:2f:5b:26:
02:65:c1:2d:af:b1:73:6b:50:c4:b7:f6:61:14:39:
ec:6f:93:33:a7:5d:16:c0:44:7e:53:5c:9c:8f:4e:
97:53:1f:c6:39:cb:34:99:ff:20:05:94:8f:06:b3:
f8:23:53:36:3b:0b:21:7c:72:4d:6f:da:8d:a5:94:
b5:f3:55:1d:64:ed:3c:23:65:bd:58:81:10:0f:66:
11:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:43:BD:20:12:19:F9:FB:6D:9C:81:95:58:58:65:3F:7C:E7:D4:FE
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ff:b5:8d:08:37:4a:89:1a:11:4c:a2:77:e2:bc:f8:3a:31:
eb:7e:89:cd:4c:d3:9f:44:41:ec:9f:b1:8a:b1:a3:c6:26:84:
b3:8a:a2:55:f8:ba:69:93:c1:50:fe:3e:f4:36:b5:17:b6:92:
53:cf:14:7e:ca:fb:f7:48:d4:c4:15:02:e6:39:c4:bf:b7:6d:
9c:43:b2:e9:bb:e6:b7:cc:9c:a8:73:90:8a:29:56:a9:95:f4:
13:83:d9:a5:f3:fd:e4:16:80:37:95:36:7f:bd:1f:4c:a4:22:
26:8f:87:fc:0c:2f:e3:5b:bb:97:1c:15:18:61:df:78:28:a9:
7b:55:a5:b5:bd:a1:7d:00:35:4e:9c:30:75:ab:c3:5f:29:b9:
5f:58:8a:c7:f6:c9:19:a1:03:df:15:2e:7e:41:a1:64:07:2f:
6a:2f:d7:55:80:8d:75:e9:cd:da:b6:fe:ac:fb:62:c4:91:a4:
48:3d:10:a8:aa:0a:e0:8e:8a:40:c6:f9:a1:ce:e8:e1:73:5f:
a0:0a:a2:58:2e:27:58:20:d7:f3:ec:af:26:8a:0c:da:8e:34:
4c:1e:e2:35:55:9e:da:e7:07:f3:1e:a5:a3:2e:ba:d7:10:24:
f7:8e:be:2a:7c:23:75:65:b8:b4:85:76:38:30:02:cf:66:46:
d8:cd:bf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:54:52 2025 by rpki-client