Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier: wJM4jmbsljV/Txhack60VDJ9D0n/dnDV5QhM9w+Pw9Y=
Subject key identifier: 40:AC:F0:C2:53:A5:ED:E1:27:8B:10:FB:7C:1D:AA:51:FA:17:42:B0
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 3DBF72D30F598BA2CDA99F05B5E4F32CD923FAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number: 0982
Signing time: Thu 06 Aug 2026 02:39:42 +0000
Manifest this update: Thu 06 Aug 2026 02:34:42 +0000
Manifest next update: Fri 07 Aug 2026 06:16:42 +0000
Files and hashes: 1: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: LUIj3lVPq3P+CqMsiUO4K5FAGkdlzoi4oyS3onS3Tck=)
2: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: rk6Y7tPy8Mo1oakuZi39/fIjJva75BwimkeClcNqXvw=)
3: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: UUZSLWq+XI/WHVaboJm1ogby6P5Ai2EZWO3AtQn+u/Y=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 06:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:bf:72:d3:0f:59:8b:a2:cd:a9:9f:05:b5:e4:f3:2c:d9:23:fa:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: Aug 6 02:34:42 2026 GMT
Not After : Aug 7 06:16:42 2026 GMT
Subject: CN=40ACF0C253A5EDE1278B10FB7C1DAA51FA1742B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:e2:df:53:37:12:22:bd:16:06:92:ab:06:
c4:b9:aa:27:9e:c1:9b:cc:9b:d9:cf:72:0f:c6:86:
9d:7f:1d:9d:22:4a:77:ba:24:4b:c2:67:4b:39:2f:
e3:e5:b1:9b:a4:7b:ea:03:2a:bd:7e:04:38:f2:7f:
d6:76:dc:24:7e:ed:7f:a2:9a:72:09:b1:3c:80:ca:
f3:95:65:3d:a6:1b:e2:fc:69:45:2f:66:f2:b6:eb:
67:c5:29:ac:c1:b7:36:8c:57:6c:1d:a0:3c:f8:56:
eb:b4:9a:1a:a9:83:da:9c:7f:09:cc:c0:00:36:f5:
84:59:56:47:c5:23:f4:f7:ac:86:15:46:17:55:3d:
b0:b8:18:c8:0f:a7:45:dd:11:b7:39:f5:03:9f:ef:
ba:1f:ef:f3:7c:21:db:b9:d3:71:47:8c:67:c5:02:
eb:13:2d:37:5a:d9:15:2a:bd:79:5f:0b:78:26:6e:
9e:8f:4e:23:e1:f6:a9:fb:bf:4e:2f:e6:22:31:63:
ab:5a:07:e5:f0:34:cb:12:67:aa:49:42:7e:0a:31:
97:7e:21:b5:b1:a6:0d:49:c1:c8:65:a2:3e:f4:24:
3f:a1:9a:9d:d9:a4:ec:38:6c:f6:25:59:37:89:62:
95:f9:fc:a7:69:5d:b0:ba:42:31:90:0d:bb:d8:53:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AC:F0:C2:53:A5:ED:E1:27:8B:10:FB:7C:1D:AA:51:FA:17:42:B0
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:95:ae:40:99:ba:5d:0e:86:39:f3:ea:23:20:89:2d:b6:f2:
d0:84:46:00:25:46:58:30:6e:e4:16:19:f3:e5:dd:f7:43:e5:
3e:5c:16:cb:98:32:6e:aa:19:75:c3:46:c7:88:d0:41:7b:5d:
5f:dd:0f:d1:ad:35:f9:94:16:df:32:3f:f9:9e:b8:ae:a1:fc:
a4:19:86:99:09:9c:ea:ea:a8:eb:a4:1c:29:d9:20:55:7b:08:
c3:94:0e:e0:ca:87:de:aa:3d:a3:58:64:18:ad:f2:71:26:39:
9f:a6:ba:89:aa:2d:f3:85:b0:c6:da:81:6e:4c:b4:7d:f4:cc:
c4:3a:36:fc:e0:ab:69:11:4b:13:17:32:2f:6e:9e:bd:eb:d9:
de:af:fc:b0:83:18:e6:79:21:3d:c6:96:f6:55:86:e2:17:16:
fc:22:68:41:f0:f6:5e:07:ce:6a:06:b9:3d:f3:4d:a4:7c:f7:
ff:0c:31:56:ea:53:32:ae:c4:1c:9f:63:9f:a0:ec:c9:1a:cd:
1f:fc:47:42:22:73:f3:c3:3b:b0:5b:e0:1c:6f:89:f2:08:70:
80:78:16:cf:dc:2a:41:d5:c8:dc:a3:0e:27:38:c2:d8:d4:14:
0a:6e:63:11:d5:7b:6c:b7:70:0c:e6:3d:5a:23:af:e2:af:f8:
15:cb:8d:0d
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIUPb9y0w9Zi6LNqZ8FteTzLNkj+sUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDQwNTgxY2E5ZGRhY2E5ZTExMDE2NWIxMWRkMjgyMGRk
N2Y1MzJjMDAeFw0yNjA4MDYwMjM0NDJaFw0yNjA4MDcwNjE2NDJaMDMxMTAvBgNV
BAMTKDQwQUNGMEMyNTNBNUVERTEyNzhCMTBGQjdDMURBQTUxRkExNzQyQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCofeLfUzcSIr0WBpKrBsS5qiee
wZvMm9nPcg/Ghp1/HZ0iSne6JEvCZ0s5L+PlsZuke+oDKr1+BDjyf9Z23CR+7X+i
mnIJsTyAyvOVZT2mG+L8aUUvZvK262fFKazBtzaMV2wdoDz4Vuu0mhqpg9qcfwnM
wAA29YRZVkfFI/T3rIYVRhdVPbC4GMgPp0XdEbc59QOf77of7/N8Idu503FHjGfF
AusTLTda2RUqvXlfC3gmbp6PTiPh9qn7v04v5iIxY6taB+XwNMsSZ6pJQn4KMZd+
IbWxpg1Jwchloj70JD+hmp3ZpOw4bPYlWTeJYpX5/KdpXbC6QjGQDbvYUxrxAgMB
AAGjggIBMIIB/TAdBgNVHQ4EFgQUQKzwwlOl7eEnixD7fB2qUfoXQrAwHwYDVR0j
BBgwFoAU1AWByp3ayp4RAWWxHdKCDdf1MsAwDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzEvRDQwNTgxQ0E5RERBQ0E5RTExMDE2NUIxMUREMjgy
MEREN0Y1MzJDMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu
YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFBV0J5cDNheXA0
UkFXV3hIZEtDRGRmMU1zQS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzAL
hmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTkyQTk4
MDAwMC8xL0Q0MDU4MUNBOUREQUNBOUUxMTAxNjVCMTFERDI4MjBERDdGNTMyQzAu
bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQCQla5AmbpdDoY58+ojIIkttvLQhEYAJUZYMG7kFhnz5d33Q+U+
XBbLmDJuqhl1w0bHiNBBe11f3Q/RrTX5lBbfMj/5nriuofykGYaZCZzq6qjrpBwp
2SBVewjDlA7gyofeqj2jWGQYrfJxJjmfprqJqi3zhbDG2oFuTLR99MzEOjb84Ktp
EUsTFzIvbp6969ner/ywgxjmeSE9xpb2VYbiFxb8ImhB8PZeB85qBrk9802kfPf/
DDFW6lMyrsQcn2OfoOzJGs0f/EdCInPzwzuwW+Acb4nyCHCAeBbP3CpB1cjcow4n
OMLY1BQKbmMR1Xtst3AM5j1aI6/ir/gVy40N
-----END CERTIFICATE-----
Generated at Thu Aug 6 17:45:18 2026 by rpki-client