Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier: qLn8hT1WtnW6/t7YRvaG2MbyntyVVvlDYUdrX/FgwMM=
Subject key identifier: D4:4E:9D:FE:2D:59:F8:85:04:AA:1C:3A:42:16:3E:54:8E:8D:EA:97
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 33198333AD986538D86D34E8F993BDCBDC9A61C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number: 077A
Signing time: Tue 22 Jul 2025 15:06:16 +0000
Manifest this update: Tue 22 Jul 2025 15:01:16 +0000
Manifest next update: Wed 23 Jul 2025 16:47:16 +0000
Files and hashes: 1: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: RGRgymb32osaRjYyF6faG5ahSs5MYJRXAvHGvZnbkKc=)
2: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: UC4fcIxC57X0WQOWt1PA/l9hsi16QhPa9mORMeVjnmM=)
3: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: Ncgu1a2T21OhbN3oNHBmUzskub5uVy54SmGOJ7OwCMw=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:19:83:33:ad:98:65:38:d8:6d:34:e8:f9:93:bd:cb:dc:9a:61:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: Jul 22 15:01:16 2025 GMT
Not After : Jul 23 16:47:16 2025 GMT
Subject: CN=D44E9DFE2D59F88504AA1C3A42163E548E8DEA97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:55:f5:4b:d6:e9:a8:cc:dd:8e:4b:6a:e4:
5e:07:15:22:ee:55:74:60:4e:dd:10:b7:c4:76:bf:
73:c1:1b:cc:b1:2a:dd:da:63:57:c0:32:9f:2c:79:
95:0c:2a:81:c5:41:06:8f:e7:10:58:f3:77:8e:66:
ff:bc:bc:6c:37:bf:71:3c:a0:be:14:e8:cc:1a:1a:
3a:0d:3b:ec:82:50:86:2b:d1:85:bc:02:1a:15:d0:
a5:34:8a:97:b0:67:51:3b:54:36:e3:d3:13:48:f3:
82:fd:86:bb:27:f2:37:09:1f:bc:5b:60:20:ae:3e:
03:d8:6f:a1:3c:6a:75:99:57:d7:80:a0:ca:f1:f2:
3e:74:a9:c9:85:bc:e8:b0:36:ff:93:1d:65:5c:37:
36:3b:89:70:4c:62:17:67:b7:94:eb:98:83:8d:72:
5f:65:de:70:f9:34:f9:01:09:e4:77:3b:b9:68:c9:
2e:cf:6c:6e:ef:88:47:dc:bf:52:30:2e:bd:d7:7f:
47:32:26:64:59:62:c8:a1:a0:48:5f:c8:57:70:55:
d0:2a:a1:df:53:35:3e:68:80:58:ab:59:91:a8:5f:
be:a0:d6:28:fd:54:82:ec:10:90:63:a5:44:32:e4:
78:0d:fa:f2:b8:32:13:dc:49:dd:0a:c6:42:85:cb:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4E:9D:FE:2D:59:F8:85:04:AA:1C:3A:42:16:3E:54:8E:8D:EA:97
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:77:1c:31:bb:17:31:25:e6:93:8d:09:80:3c:9c:03:8b:3a:
3c:d1:20:a3:72:b8:54:00:dd:87:bc:49:6c:ce:b1:a7:cb:60:
ba:ae:ea:74:da:02:06:d3:4c:9c:4e:c5:4e:92:27:99:4e:ca:
63:ac:7a:98:24:10:69:1f:67:7c:0c:de:f5:2f:0a:38:45:7f:
b1:ba:77:e3:84:c4:55:16:b5:df:77:7c:ea:32:af:00:1f:67:
fe:bc:c3:1b:8d:4b:ef:0c:e5:83:13:17:be:ff:01:15:6b:9b:
af:d1:d9:6f:b0:a5:b3:87:b1:d8:3e:81:6d:6f:6d:f6:15:1c:
53:21:47:9d:8d:4a:ca:61:e0:f8:d6:ab:ed:af:51:8d:e8:29:
c9:ba:46:d4:35:93:ca:3c:e0:73:1f:4a:4b:ad:d6:93:8d:e4:
b4:09:a3:17:83:f8:51:7b:86:a7:20:7d:1d:d7:25:6c:ef:be:
24:dd:7e:92:97:26:fc:88:5a:52:71:77:d5:29:b6:f0:92:49:
25:fe:4e:45:52:a9:a2:e9:c3:6f:cf:f7:2f:4b:e0:13:3f:29:
1a:71:cd:91:16:0c:3f:2c:5e:2b:b1:46:2b:a7:36:40:0d:d2:
70:e0:e1:4e:84:10:57:1e:56:0d:6d:db:c8:54:66:5a:b5:42:
04:60:16:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:28:28 2025 by rpki-client