Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File:                     211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier:          gOJ/84Sr77mm5NhHqx5kSQsav/tGSehA0CzmM36MNq4=
Subject key identifier:   52:26:10:EB:3F:DF:20:A7:AE:CD:82:25:0F:3B:44:49:B2:D4:A9:73
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer:       /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial:       2B082A0AA9CD3A73E47E199DF756FB43EF352D63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number:          0762
Signing time:             Sat 28 Jun 2025 04:58:43 +0000
Manifest this update:     Sat 28 Jun 2025 04:53:43 +0000
Manifest next update:     Sun 29 Jun 2025 06:11:43 +0000
Files and hashes:         1: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: pI40+jjdEUJPL2otpp8VOvK6iMqeW7apPFhhhkUq2lM=)
                          2: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: T7P+TKqF1EydfF+/Was8vNpPhZ1s6n4jZQLCiw8GLVU=)
                          3: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: RbnmOQqlmFXkKSadJfz09xEzRsgJd8lvVMOfvnarIJY=)
                          4: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: 3ovpGOt8Z/loW4U3gJMJXsm91mVTK7y0fkPalfGS0w8=)
                          5: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: ldJu5L3FZrq+v5EO0j3Bgz2Qf3cW0RGCFf99rYq9lJs=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 06:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:08:2a:0a:a9:cd:3a:73:e4:7e:19:9d:f7:56:fb:43:ef:35:2d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
        Validity
            Not Before: Jun 28 04:53:43 2025 GMT
            Not After : Jun 29 06:11:43 2025 GMT
        Subject: CN=522610EB3FDF20A7AECD82250F3B4449B2D4A973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:e7:42:c9:10:1f:7c:2b:1f:79:89:58:23:
                    ee:5c:d3:f2:fc:32:2b:85:93:c1:44:55:a7:f9:91:
                    bf:58:da:14:24:92:fb:c5:1f:ed:4f:10:8d:3e:8e:
                    e2:a5:96:83:87:ce:3e:9c:c8:bc:4f:37:aa:72:88:
                    8f:94:e8:25:0d:95:25:70:6b:1e:8e:55:4e:80:45:
                    53:f2:86:25:f1:35:72:6b:a4:9a:fb:74:97:38:f6:
                    76:f5:d6:a0:87:d9:3d:7c:b2:4a:80:cc:89:11:88:
                    58:7a:dd:d3:83:68:43:d5:3a:f1:11:bf:79:00:19:
                    93:ee:57:ee:da:54:7b:c2:ca:85:28:71:98:9f:41:
                    b6:d7:c7:1a:90:4a:64:75:e6:bd:a5:3a:85:71:81:
                    de:fc:07:fa:0c:42:58:42:18:b1:e6:d9:3d:67:ed:
                    33:df:ea:6b:da:75:c8:83:5e:b2:1f:50:b9:f0:2d:
                    30:8d:13:fe:9a:17:3d:bc:b9:28:0a:9d:2d:8c:dd:
                    92:06:ac:f1:03:68:d8:2d:45:86:25:4b:0a:92:52:
                    3f:23:41:09:91:4d:af:97:b8:3a:9b:df:23:ea:f7:
                    ab:2b:96:48:e5:1a:e9:ae:ec:85:43:fa:8f:c6:36:
                    59:1a:26:06:21:33:d7:61:5c:f6:f2:17:01:3e:0f:
                    d3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:26:10:EB:3F:DF:20:A7:AE:CD:82:25:0F:3B:44:49:B2:D4:A9:73
            X509v3 Authority Key Identifier:
                keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:52:71:ce:f7:80:ad:e5:f4:19:1b:b9:c1:3c:4f:20:a0:68:
         cc:f2:b0:5b:c3:d7:8d:b2:ec:6f:db:08:9e:0c:25:3b:60:d7:
         e0:29:13:c2:a6:20:1f:24:d5:ae:7b:92:27:56:96:88:66:22:
         f9:a4:a7:41:d4:04:4d:92:e3:04:35:7d:98:03:b4:13:76:14:
         28:44:d0:fd:cb:f5:f0:8f:d4:8e:e4:b2:42:ce:f4:75:d0:51:
         71:1d:66:37:97:58:e0:45:e8:88:ac:94:e7:69:9c:65:71:72:
         02:55:a8:10:93:ed:93:a0:b5:2d:26:a4:0c:ec:6f:63:3e:37:
         06:23:86:60:29:ca:57:01:6b:9c:b7:ca:e9:af:d7:05:15:c8:
         fc:32:c7:33:83:a1:a3:36:e9:20:0d:7b:31:62:80:4f:d1:b2:
         8f:33:6d:70:3f:4a:51:af:c7:4f:89:e1:56:e3:9e:73:2f:e6:
         a1:09:e2:02:d0:08:73:b8:fe:b7:d4:c5:96:bf:e9:8d:38:74:
         c6:8f:3d:1c:16:11:c7:3b:69:f3:9e:8e:61:3b:90:26:b6:7c:
         bc:18:4b:ee:85:eb:d7:0a:65:89:9a:4f:c5:fa:bd:e3:7f:4a:
         be:55:08:3d:1a:2f:4e:73:2b:8f:15:f9:64:c2:d7:db:63:54:
         26:53:94:0a
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIUKwgqCqnNOnPkfhmd91b7Q+81LWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExYTA0ODg5MDk2OWZhN2Q0YjZhZWY4YzAyMGNkYTQ0
NDRlYzJlNTAeFw0yNTA2MjgwNDUzNDNaFw0yNTA2MjkwNjExNDNaMDMxMTAvBgNV
BAMTKDUyMjYxMEVCM0ZERjIwQTdBRUNEODIyNTBGM0I0NDQ5QjJENEE5NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/+dCyRAffCsfeYlYI+5c0/L8
MiuFk8FEVaf5kb9Y2hQkkvvFH+1PEI0+juKlloOHzj6cyLxPN6pyiI+U6CUNlSVw
ax6OVU6ARVPyhiXxNXJrpJr7dJc49nb11qCH2T18skqAzIkRiFh63dODaEPVOvER
v3kAGZPuV+7aVHvCyoUocZifQbbXxxqQSmR15r2lOoVxgd78B/oMQlhCGLHm2T1n
7TPf6mvadciDXrIfULnwLTCNE/6aFz28uSgKnS2M3ZIGrPEDaNgtRYYlSwqSUj8j
QQmRTa+XuDqb3yPq96srlkjlGumu7IVD+o/GNlkaJgYhM9dhXPbyFwE+D9P5AgMB
AAGjggIBMIIB/TAdBgNVHQ4EFgQUUiYQ6z/fIKeuzYIlDztESbLUqXMwHwYDVR0j
BBgwFoAUIRoEiJCWn6fUtq74wCDNpEROwuUwDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzIvMjExQTA0ODg5MDk2OUZBN0Q0QjZBRUY4QzAyMENE
QTQ0NDRFQzJFNS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu
YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lSb0VpSkNXbjZm
VXRxNzR3Q0ROcEVST3d1VS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzAL
hmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTkyQTk4
MDAwMC8yLzIxMUEwNDg4OTA5NjlGQTdENEI2QUVGOEMwMjBDREE0NDQ0RUMyRTUu
bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQAyUnHO94Ct5fQZG7nBPE8goGjM8rBbw9eNsuxv2wieDCU7YNfg
KRPCpiAfJNWue5InVpaIZiL5pKdB1ARNkuMENX2YA7QTdhQoRND9y/Xwj9SO5LJC
zvR10FFxHWY3l1jgReiIrJTnaZxlcXICVagQk+2ToLUtJqQM7G9jPjcGI4ZgKcpX
AWuct8rpr9cFFcj8Msczg6GjNukgDXsxYoBP0bKPM21wP0pRr8dPieFW455zL+ah
CeIC0AhzuP631MWWv+mNOHTGjz0cFhHHO2nzno5hO5Amtny8GEvuhevXCmWJmk/F
+r3jf0q+VQg9Gi9OcyuPFflkwtfbY1QmU5QK
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:12 2025 by rpki-client