
Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier: gOJ/84Sr77mm5NhHqx5kSQsav/tGSehA0CzmM36MNq4=
Subject key identifier: 52:26:10:EB:3F:DF:20:A7:AE:CD:82:25:0F:3B:44:49:B2:D4:A9:73
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer: /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial: 2B082A0AA9CD3A73E47E199DF756FB43EF352D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number: 0762
Signing time: Sat 28 Jun 2025 04:58:43 +0000
Manifest this update: Sat 28 Jun 2025 04:53:43 +0000
Manifest next update: Sun 29 Jun 2025 06:11:43 +0000
Files and hashes: 1: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: pI40+jjdEUJPL2otpp8VOvK6iMqeW7apPFhhhkUq2lM=)
2: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: T7P+TKqF1EydfF+/Was8vNpPhZ1s6n4jZQLCiw8GLVU=)
3: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: RbnmOQqlmFXkKSadJfz09xEzRsgJd8lvVMOfvnarIJY=)
4: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: 3ovpGOt8Z/loW4U3gJMJXsm91mVTK7y0fkPalfGS0w8=)
5: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: ldJu5L3FZrq+v5EO0j3Bgz2Qf3cW0RGCFf99rYq9lJs=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:08:2a:0a:a9:cd:3a:73:e4:7e:19:9d:f7:56:fb:43:ef:35:2d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Validity
Not Before: Jun 28 04:53:43 2025 GMT
Not After : Jun 29 06:11:43 2025 GMT
Subject: CN=522610EB3FDF20A7AECD82250F3B4449B2D4A973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:e7:42:c9:10:1f:7c:2b:1f:79:89:58:23:
ee:5c:d3:f2:fc:32:2b:85:93:c1:44:55:a7:f9:91:
bf:58:da:14:24:92:fb:c5:1f:ed:4f:10:8d:3e:8e:
e2:a5:96:83:87:ce:3e:9c:c8:bc:4f:37:aa:72:88:
8f:94:e8:25:0d:95:25:70:6b:1e:8e:55:4e:80:45:
53:f2:86:25:f1:35:72:6b:a4:9a:fb:74:97:38:f6:
76:f5:d6:a0:87:d9:3d:7c:b2:4a:80:cc:89:11:88:
58:7a:dd:d3:83:68:43:d5:3a:f1:11:bf:79:00:19:
93:ee:57:ee:da:54:7b:c2:ca:85:28:71:98:9f:41:
b6:d7:c7:1a:90:4a:64:75:e6:bd:a5:3a:85:71:81:
de:fc:07:fa:0c:42:58:42:18:b1:e6:d9:3d:67:ed:
33:df:ea:6b:da:75:c8:83:5e:b2:1f:50:b9:f0:2d:
30:8d:13:fe:9a:17:3d:bc:b9:28:0a:9d:2d:8c:dd:
92:06:ac:f1:03:68:d8:2d:45:86:25:4b:0a:92:52:
3f:23:41:09:91:4d:af:97:b8:3a:9b:df:23:ea:f7:
ab:2b:96:48:e5:1a:e9:ae:ec:85:43:fa:8f:c6:36:
59:1a:26:06:21:33:d7:61:5c:f6:f2:17:01:3e:0f:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:26:10:EB:3F:DF:20:A7:AE:CD:82:25:0F:3B:44:49:B2:D4:A9:73
X509v3 Authority Key Identifier:
keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:52:71:ce:f7:80:ad:e5:f4:19:1b:b9:c1:3c:4f:20:a0:68:
cc:f2:b0:5b:c3:d7:8d:b2:ec:6f:db:08:9e:0c:25:3b:60:d7:
e0:29:13:c2:a6:20:1f:24:d5:ae:7b:92:27:56:96:88:66:22:
f9:a4:a7:41:d4:04:4d:92:e3:04:35:7d:98:03:b4:13:76:14:
28:44:d0:fd:cb:f5:f0:8f:d4:8e:e4:b2:42:ce:f4:75:d0:51:
71:1d:66:37:97:58:e0:45:e8:88:ac:94:e7:69:9c:65:71:72:
02:55:a8:10:93:ed:93:a0:b5:2d:26:a4:0c:ec:6f:63:3e:37:
06:23:86:60:29:ca:57:01:6b:9c:b7:ca:e9:af:d7:05:15:c8:
fc:32:c7:33:83:a1:a3:36:e9:20:0d:7b:31:62:80:4f:d1:b2:
8f:33:6d:70:3f:4a:51:af:c7:4f:89:e1:56:e3:9e:73:2f:e6:
a1:09:e2:02:d0:08:73:b8:fe:b7:d4:c5:96:bf:e9:8d:38:74:
c6:8f:3d:1c:16:11:c7:3b:69:f3:9e:8e:61:3b:90:26:b6:7c:
bc:18:4b:ee:85:eb:d7:0a:65:89:9a:4f:c5:fa:bd:e3:7f:4a:
be:55:08:3d:1a:2f:4e:73:2b:8f:15:f9:64:c2:d7:db:63:54:
26:53:94:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:12 2025 by rpki-client