Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier: ZFbYh+qbY6Ks1xx5a79tuSYWb64qGZOC5wU8L7k1Sxg=
Subject key identifier: 86:D9:ED:B9:81:6B:6C:83:DC:A7:D6:F8:4A:02:EB:08:D3:31:24:FD
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 3C48AE4E0410B7E38B23B446EDD550F0E452E41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number: 090A
Signing time: Tue 12 May 2026 19:16:49 +0000
Manifest this update: Tue 12 May 2026 19:11:49 +0000
Manifest next update: Wed 13 May 2026 20:55:49 +0000
Files and hashes: 1: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: Ncgu1a2T21OhbN3oNHBmUzskub5uVy54SmGOJ7OwCMw=)
2: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: UC4fcIxC57X0WQOWt1PA/l9hsi16QhPa9mORMeVjnmM=)
3: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: 5jUI3OSFcIGvRghPUaY/eQswtamtkdpyYs/9NPuH1bA=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:48:ae:4e:04:10:b7:e3:8b:23:b4:46:ed:d5:50:f0:e4:52:e4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: May 12 19:11:49 2026 GMT
Not After : May 13 20:55:49 2026 GMT
Subject: CN=86D9EDB9816B6C83DCA7D6F84A02EB08D33124FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:ba:a3:ed:11:09:74:a7:9a:22:19:1c:94:
8a:4f:a2:f6:4e:17:f7:81:ea:4d:b9:6f:9b:b9:7a:
6e:63:35:8c:2a:90:0b:48:82:21:7c:3a:a6:06:e4:
0b:15:ce:b3:91:23:bb:95:ff:ce:fe:4a:0b:7d:45:
89:20:2b:c9:ac:c5:48:9f:88:64:f9:e7:84:5b:7a:
2c:04:39:05:c3:ce:23:c8:fb:6c:12:af:8f:d6:7d:
b0:6f:52:50:d4:d5:c8:af:05:80:12:6c:11:9e:dc:
7e:5d:6c:ec:b7:52:2f:00:cd:1f:af:24:b0:80:dd:
9d:83:d7:2c:d3:d5:67:8b:df:65:14:b1:17:af:fa:
2b:c0:f5:fc:81:20:86:3b:01:3d:05:50:85:e6:05:
1c:29:8c:73:f0:49:32:db:cb:82:f7:07:f0:03:64:
92:67:15:54:9d:58:a6:6c:ca:19:f4:59:c5:00:ac:
31:91:37:c2:e8:f0:88:10:68:0a:79:35:d7:4b:7b:
6e:fa:47:b8:70:da:a8:f2:5f:06:95:6a:f7:50:3c:
50:ac:50:86:4b:41:6a:47:4c:b6:0c:11:2a:2a:f8:
8d:17:e8:98:5c:09:69:29:65:27:17:fd:3a:ac:44:
3f:b6:6e:b3:f1:a1:ec:d3:3b:54:e4:75:87:2a:a5:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D9:ED:B9:81:6B:6C:83:DC:A7:D6:F8:4A:02:EB:08:D3:31:24:FD
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:01:cf:5d:62:4e:c7:61:93:92:a1:92:47:c5:9c:7d:57:38:
b5:0d:b6:79:3c:d5:49:6f:69:a4:94:33:13:1e:aa:aa:af:cc:
70:cf:b0:81:3f:f6:d2:f5:ee:b9:78:13:4b:a1:39:a1:01:a6:
32:85:19:11:07:92:5f:57:89:a5:7b:da:d1:f6:fe:48:08:4a:
ce:f7:2e:a7:c9:77:38:8e:60:ae:a2:6d:af:33:44:07:f6:86:
b9:c0:90:25:a6:a1:7f:56:97:f6:30:b2:ac:a7:84:80:f5:cd:
64:66:c1:4c:ce:6b:cf:e7:ef:cf:da:20:b1:39:27:af:d0:a3:
13:05:6b:f9:98:f6:07:ee:f9:c2:61:03:17:b3:91:6a:2b:a1:
9a:29:8d:e0:84:69:fe:11:bf:c2:9d:4a:54:5c:19:75:fa:72:
0e:42:b8:4c:0a:e3:c4:82:f6:4d:09:cd:3c:5c:f1:e6:a1:81:
9c:bd:3b:6b:5a:93:d0:1c:5c:88:60:07:fa:1c:d8:d9:48:9c:
7e:33:2b:f6:d2:9c:ba:49:04:32:9e:3a:f6:1c:88:35:55:72:
2a:d5:35:e9:53:da:78:8e:ae:e7:54:f2:89:a1:cb:e8:42:1d:
2a:0c:4f:a2:35:fd:87:c9:0e:e8:0e:c9:87:ff:d3:0a:45:72:
93:2c:8e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:40 2026 by rpki-client