Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier: 98Dn0CIIhSiLbeSdLoz8xtYm8hswTHMJGAOkJwvYJyY=
Subject key identifier: E1:72:66:9B:9D:DE:7D:41:E0:F5:BD:12:E2:9F:6C:6A:2D:DB:61:0D
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer: /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial: 3A53D9F57099283F63D4F50DD7A9D64B42BC0677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number: 07FA
Signing time: Sat 18 Oct 2025 21:43:29 +0000
Manifest this update: Sat 18 Oct 2025 21:38:29 +0000
Manifest next update: Sun 19 Oct 2025 23:42:29 +0000
Files and hashes: 1: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: E9tvp90Kpr61hZSI7tBGjhyzBxdB/JF9I/2z8pLfS80=)
2: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: 3kgHFhx3RthVERDFxT/EsGeRl8L0/YVyrMuknKzRqfA=)
3: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: F4WabMGA3Pd6V5rJxa03gHF4t+esMEKIXZfZj0yADbc=)
4: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: MmgIyR73WlehdKezTZ7m7o4J8sPfvOsWS399H8z7PMs=)
5: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: zrjJTKe6CY2m82uSTFuqkE4IgMWvPN3IrWyVaZF8GZA=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 23:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:53:d9:f5:70:99:28:3f:63:d4:f5:0d:d7:a9:d6:4b:42:bc:06:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Validity
Not Before: Oct 18 21:38:29 2025 GMT
Not After : Oct 19 23:42:29 2025 GMT
Subject: CN=E172669B9DDE7D41E0F5BD12E29F6C6A2DDB610D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:36:d1:0a:af:91:46:d8:a6:2e:48:6d:ac:
25:01:86:29:52:1d:7d:85:82:25:5e:62:76:43:54:
30:0c:8c:c9:22:ba:0b:ef:07:84:25:34:34:2f:e8:
21:a9:cb:1d:be:b4:c4:bc:48:1b:3c:d9:fb:d6:99:
52:47:8c:50:9e:13:28:ac:c0:2e:a0:d5:f6:2d:1a:
b1:59:3f:c6:01:bf:fa:52:95:65:36:a7:a9:de:11:
3f:e6:f7:3f:d8:03:a8:5d:00:24:e5:aa:af:4f:ef:
cf:5b:87:ed:13:bb:1a:45:6c:06:51:07:1a:85:f6:
b7:b6:26:fa:0f:d7:e0:45:1a:70:ee:82:15:f3:63:
35:49:b3:6b:35:07:a6:2b:65:eb:b2:6a:13:12:2a:
64:54:10:31:42:5a:ba:c7:74:59:87:d2:dc:10:bf:
e6:10:db:b7:f0:37:3b:71:ce:15:b3:fd:45:4e:de:
7d:b6:ee:9f:0a:b6:70:7e:e5:bb:57:c7:3b:c2:ac:
58:7e:f5:88:cd:c0:e8:6f:d5:ef:bb:37:97:c7:3f:
d4:77:68:f9:a6:e7:20:cc:ae:dc:8c:c7:89:95:23:
16:16:aa:26:88:48:34:4b:dc:c4:31:42:da:75:5f:
63:51:3d:d5:fd:5a:c2:c8:82:fe:1e:fe:fd:8f:a1:
9f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:72:66:9B:9D:DE:7D:41:E0:F5:BD:12:E2:9F:6C:6A:2D:DB:61:0D
X509v3 Authority Key Identifier:
keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:da:8d:32:9a:43:f5:cd:1c:a3:47:1d:e2:56:49:80:5d:6a:
66:08:0d:7d:c1:d9:70:58:cd:75:f9:90:27:04:d7:b3:2c:e3:
84:91:b2:1a:37:4f:cd:0a:ff:a0:ee:1d:45:4c:ed:56:70:1f:
89:8e:ed:75:b1:42:10:1f:2c:2a:a8:09:cc:bb:c4:f3:eb:76:
90:ee:65:d1:14:62:6f:01:f4:1a:65:64:f1:d5:4a:b6:fa:03:
ef:7f:ff:d8:fa:9a:9d:38:63:5b:9e:c4:e0:da:6e:cc:a7:2e:
89:e2:aa:a2:d7:08:fe:51:1e:b0:61:85:58:99:0a:95:bd:f7:
f7:6f:84:1c:d4:c3:c5:e5:ab:9e:68:0b:d9:3b:fc:2e:4a:0d:
c4:5a:39:ab:89:96:6e:96:47:76:dd:36:00:9a:a5:48:4e:da:
17:1c:1c:23:ad:fb:ed:80:ab:ee:3e:a2:96:f2:e2:3f:0d:60:
16:74:ad:a0:98:00:76:5e:41:f6:74:60:b8:59:bc:2f:7e:e6:
d3:2e:52:f8:0c:d6:44:38:e6:c9:91:ae:83:63:af:53:cb:16:
68:16:f2:3b:db:f0:e6:a5:cb:3b:59:b0:d9:2b:64:6e:f9:5f:
d1:b5:b6:bf:60:f8:06:0a:fd:84:19:07:f0:90:84:48:10:8e:
dc:a9:f1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:59 2025 by rpki-client