Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier: SDT7pcNTC9F7ErFW1ueD+GM++UvgN4AsXFu4/Bu3DGQ=
Subject key identifier: 0D:B2:BC:DE:36:EA:45:4C:25:D6:E5:1F:6A:C1:E6:9A:A5:BA:53:33
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer: /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial: 44E6C70ACB7FBEC65BE0E399C283452D6EFB01CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number: 08CD
Signing time: Wed 25 Mar 2026 07:58:50 +0000
Manifest this update: Wed 25 Mar 2026 07:53:50 +0000
Manifest next update: Thu 26 Mar 2026 08:21:50 +0000
Files and hashes: 1: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: MmgIyR73WlehdKezTZ7m7o4J8sPfvOsWS399H8z7PMs=)
2: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: E9tvp90Kpr61hZSI7tBGjhyzBxdB/JF9I/2z8pLfS80=)
3: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: 3kgHFhx3RthVERDFxT/EsGeRl8L0/YVyrMuknKzRqfA=)
4: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: F4WabMGA3Pd6V5rJxa03gHF4t+esMEKIXZfZj0yADbc=)
5: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: EwscgITlrDsCHK3o301BDCmPKvlX5nuoIzeyFV9yOKQ=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 08:21:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:e6:c7:0a:cb:7f:be:c6:5b:e0:e3:99:c2:83:45:2d:6e:fb:01:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Validity
Not Before: Mar 25 07:53:50 2026 GMT
Not After : Mar 26 08:21:50 2026 GMT
Subject: CN=0DB2BCDE36EA454C25D6E51F6AC1E69AA5BA5333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:49:58:33:33:50:f4:ff:7e:1c:88:e1:6b:fd:
a8:f1:14:28:4b:07:14:dc:35:37:e3:58:f7:b1:50:
d7:5a:17:43:7c:8a:02:2f:87:52:76:4d:4d:73:d4:
6d:b0:c3:4d:05:19:2c:04:60:6e:ce:b0:c3:71:c1:
84:6e:df:77:0e:95:0d:05:6b:b9:59:e4:be:c2:16:
67:0e:27:3f:2e:3b:00:ec:0d:7b:9f:70:b6:ad:e4:
19:ab:d0:25:92:5d:4e:75:13:10:ce:4f:60:91:09:
73:25:8f:1e:ae:4a:82:1e:6f:6f:55:f5:c1:cd:c0:
b6:fd:af:77:ee:ec:97:4c:0f:fa:91:fd:fa:08:6a:
5e:e2:c9:4f:e3:fe:d6:31:50:c5:e3:ea:07:28:bf:
1d:4d:bf:64:f3:9b:dd:20:94:db:48:af:1d:39:bf:
bf:49:0d:f0:8f:33:45:91:ba:f6:8c:7a:64:0e:c9:
9d:38:8c:c4:7f:b7:94:c6:bb:0b:b4:7e:10:fe:08:
7b:19:b3:41:f1:96:9c:09:18:9b:7d:6d:d7:bf:c9:
50:06:a6:7a:09:4f:7c:ea:30:27:a0:17:4a:3f:3a:
38:65:33:2d:c4:81:75:77:d4:89:7c:78:1d:75:cc:
88:bd:87:5c:c2:67:93:a7:a2:5f:6a:59:26:b2:f7:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B2:BC:DE:36:EA:45:4C:25:D6:E5:1F:6A:C1:E6:9A:A5:BA:53:33
X509v3 Authority Key Identifier:
keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c5:4d:36:b3:22:a7:2e:5f:62:25:89:82:f6:f4:52:dd:6e:
93:c4:88:0d:67:e1:ae:0c:67:76:d6:43:7e:f7:49:ab:07:4a:
29:69:ee:7a:39:b9:0e:e1:3c:da:fa:67:b5:5e:d8:44:d2:0a:
7a:e4:bf:7d:66:74:8b:ba:14:7b:4a:23:a3:7d:ed:59:c2:2f:
35:63:c4:66:81:a5:55:dd:52:f1:0b:3d:96:48:11:f8:7e:cb:
27:4d:79:e8:bd:7f:db:9d:dc:29:ad:e9:ee:8b:5c:fa:1d:e7:
5c:2c:2e:ec:71:64:47:c7:7f:33:4d:6d:38:c2:21:72:e5:04:
87:8b:d5:15:de:37:b9:e6:5b:df:3d:32:9b:9c:56:5c:c2:6c:
5f:37:04:d1:14:72:b9:8f:0e:95:7a:41:c8:76:9b:11:21:c0:
e4:60:90:e8:9f:ee:74:29:5f:c2:cd:88:b1:e8:15:df:8f:ba:
04:ce:e9:c3:5c:43:67:95:05:b6:3d:1d:92:cb:bf:eb:93:11:
00:8b:5c:b2:c2:10:47:bc:13:30:50:c8:e6:13:6d:2b:5f:0f:
bc:d3:98:68:97:98:70:92:af:04:4a:6c:ba:af:f7:bb:6e:83:
54:66:6d:44:01:81:58:0b:d2:d4:46:ec:29:88:d9:0b:8b:7b:
80:4f:70:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:18:34 2026 by rpki-client