Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier: 6d75HIKnxvGnq9mxXPPfzJVRh18BAjsKOiOZZcKl/TQ=
Subject key identifier: FE:A6:02:B8:58:59:3F:39:DF:B3:12:7E:E6:DA:37:B1:F6:65:93:04
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 7686F8D800A87BB26FE818A148B28B7E457801D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number: 08C6
Signing time: Thu 26 Mar 2026 04:16:53 +0000
Manifest this update: Thu 26 Mar 2026 04:11:53 +0000
Manifest next update: Fri 27 Mar 2026 05:07:53 +0000
Files and hashes: 1: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: UC4fcIxC57X0WQOWt1PA/l9hsi16QhPa9mORMeVjnmM=)
2: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: Ncgu1a2T21OhbN3oNHBmUzskub5uVy54SmGOJ7OwCMw=)
3: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: VsC1gUjn0pF4J4iwuj36mFUEJ79Q2wQuaqTYJVpFzOo=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:86:f8:d8:00:a8:7b:b2:6f:e8:18:a1:48:b2:8b:7e:45:78:01:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: Mar 26 04:11:53 2026 GMT
Not After : Mar 27 05:07:53 2026 GMT
Subject: CN=FEA602B858593F39DFB3127EE6DA37B1F6659304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:51:a1:60:79:5f:b1:3c:66:9d:40:6c:98:
a1:35:c1:9a:19:52:61:54:b0:4d:15:d1:bd:b5:8e:
6e:a1:4a:d6:d9:f1:c9:9b:c9:e0:10:77:2e:d9:d4:
23:46:12:23:0c:e2:6c:ae:fa:8e:4b:ee:f4:c6:71:
93:0b:71:14:26:54:ac:8b:b7:74:9e:6e:61:c9:03:
5c:3c:51:39:d1:52:bf:41:f9:e6:7a:42:41:bc:44:
98:32:20:d0:51:7b:d7:46:12:29:59:b1:ba:6b:37:
ed:97:94:b2:a5:bf:a0:4c:5c:1f:73:10:db:70:ae:
d2:56:3e:d7:ef:f3:58:59:72:f6:55:fa:9e:fa:7e:
46:71:71:68:05:c8:1c:2d:68:a8:70:97:68:93:ed:
9d:96:f8:a1:05:18:27:81:79:da:d1:c7:24:f5:89:
8a:c3:02:79:92:13:73:a0:01:87:25:fc:8b:91:e7:
43:27:af:9f:61:8c:e9:2d:a5:d6:43:3b:13:21:81:
92:bb:5f:66:ed:db:cc:5b:62:c1:76:77:c5:9b:d2:
e5:41:bb:7e:db:ed:f7:ab:4d:1a:9a:be:c0:03:02:
47:49:f6:1d:c3:a9:9a:1c:b0:c8:81:c5:3c:4a:76:
35:26:84:37:21:4e:1b:8f:7e:e6:2e:b9:e4:d5:8a:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A6:02:B8:58:59:3F:39:DF:B3:12:7E:E6:DA:37:B1:F6:65:93:04
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c2:8d:3e:7b:f6:d3:50:b9:7e:2f:60:7e:ea:a3:ed:5a:76:
c2:8a:f0:7b:85:23:97:87:cc:1e:a1:5e:74:e7:7c:07:42:d5:
58:65:14:7b:a2:f1:65:08:7f:66:84:80:d0:83:7e:e0:89:c3:
e2:79:11:35:33:06:32:a2:64:ff:52:52:86:dc:73:b7:1c:b8:
b2:af:1c:40:9d:87:4a:09:d1:b2:55:ba:59:a1:06:62:78:60:
27:80:13:f1:49:44:46:d5:fd:75:7a:b0:3e:2a:65:12:c9:e1:
15:86:5a:9f:5e:41:7c:25:a7:61:e4:05:5b:3b:27:39:fc:16:
94:99:7d:b5:8c:dc:e3:b4:22:97:5a:a4:df:ae:6f:20:e9:6c:
33:37:2b:3f:67:bb:8f:fb:e3:36:d6:fe:58:dc:5f:98:80:ef:
31:77:73:e7:0f:2b:74:82:66:75:91:18:6a:56:8c:51:2e:f6:
ef:70:35:c8:60:24:b1:85:33:8b:29:57:ea:6a:b9:d0:aa:d8:
ae:1e:fd:43:c0:e7:31:5d:2a:77:37:8f:67:e0:a5:4e:70:2c:
76:9e:b5:11:19:93:f8:78:6f:55:66:c8:89:ec:7c:32:fe:80:
a6:21:1a:e0:be:02:79:a2:57:56:54:f0:08:39:95:60:c5:c8:
57:92:be:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:16 2026 by rpki-client