Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier: Cgg4xy8i9KtudmtRePsngMa+o08PewIDNvpIhP0+fzo=
Subject key identifier: DC:70:BE:67:F4:3C:68:EC:89:17:DC:2E:7E:99:6D:C2:F3:A5:BD:51
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 7FDFA4811DD8EDA8A40B03B5F33181F5E1720B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number: 0903
Signing time: Thu 07 May 2026 16:38:28 +0000
Manifest this update: Thu 07 May 2026 16:33:28 +0000
Manifest next update: Fri 08 May 2026 16:50:28 +0000
Files and hashes: 1: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: Ncgu1a2T21OhbN3oNHBmUzskub5uVy54SmGOJ7OwCMw=)
2: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: UC4fcIxC57X0WQOWt1PA/l9hsi16QhPa9mORMeVjnmM=)
3: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: YSTXajYscAUi2T21mixUK6T4E7jEeZYQnXG2/hzLtQo=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 16:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:df:a4:81:1d:d8:ed:a8:a4:0b:03:b5:f3:31:81:f5:e1:72:0b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: May 7 16:33:28 2026 GMT
Not After : May 8 16:50:28 2026 GMT
Subject: CN=DC70BE67F43C68EC8917DC2E7E996DC2F3A5BD51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:63:22:70:83:b5:c4:26:d3:ef:2f:4d:eb:
35:ed:9b:7b:15:c4:86:05:43:1b:26:ee:81:b8:bc:
6a:1f:1e:79:a9:14:79:83:fd:3f:42:8c:70:f8:0e:
3a:91:4d:f9:cf:cb:dc:5d:4a:85:14:85:c6:ee:f7:
2b:47:7a:02:64:70:dc:b8:01:72:32:5f:1c:a3:ae:
a4:c5:97:26:a2:f2:00:56:ad:43:5f:f5:1a:c0:7d:
d7:0e:6d:3a:42:fa:9c:f4:71:f4:9d:39:bf:01:23:
8e:00:ec:eb:85:40:37:49:b9:92:b8:ae:ed:e2:a6:
8d:42:22:01:41:dd:39:0f:a9:18:99:ee:0f:31:1f:
5f:2e:19:73:e6:75:f6:c3:9a:cb:37:8a:ea:d8:38:
65:d5:d8:c9:45:ba:b8:74:f8:57:57:7a:30:56:3d:
73:d1:ae:49:96:4f:14:91:7b:74:90:dc:ab:ba:91:
e9:f1:3e:38:1b:da:b7:a8:ed:e0:ee:11:27:2e:87:
24:0b:e2:a6:62:be:09:8d:8f:ac:c3:6b:1b:42:cd:
41:3e:fc:35:aa:7d:d6:01:89:e2:5a:ce:27:08:66:
87:de:4c:2d:74:b8:da:20:db:74:6b:a7:7f:42:13:
56:d7:dd:25:f9:7c:c2:79:2c:25:a7:d9:ef:80:fb:
db:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:70:BE:67:F4:3C:68:EC:89:17:DC:2E:7E:99:6D:C2:F3:A5:BD:51
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:75:45:0e:8c:c9:03:6c:8c:3d:ba:eb:27:17:e2:01:41:56:
6b:16:d4:98:57:e1:94:46:d6:1d:a6:5f:27:ab:4c:b0:92:7d:
f8:30:10:c4:29:5f:b2:f8:30:6f:7e:aa:8a:35:d1:08:83:a5:
88:d6:91:77:a9:0b:51:dd:58:9a:73:d2:da:1f:5d:dd:1d:13:
52:ba:ab:4a:ff:0e:99:6f:30:14:92:03:fc:ee:2f:d7:15:3e:
ab:13:8b:6d:e1:cf:5a:df:9c:0e:8f:da:0a:b2:64:eb:ca:a7:
03:13:d6:95:ed:1b:a6:22:d2:b1:43:a3:67:c0:40:e4:de:9a:
15:a6:53:94:cc:8c:fc:fb:4d:af:a7:a8:1f:2a:a1:4e:13:45:
05:90:96:3b:de:c9:da:ff:90:64:69:7e:70:83:9c:0b:b4:c0:
e8:01:90:9b:8b:52:47:c2:b5:ee:70:1c:87:95:61:6e:a4:3a:
b9:e1:bd:ea:85:31:4e:c5:00:20:7e:86:19:33:10:4d:35:28:
78:2b:f6:08:f7:85:76:77:17:e8:3e:b0:27:c5:c7:18:6b:c8:
ec:d0:63:f9:c4:d1:15:9e:6d:d5:2f:a6:2e:7e:74:6b:54:68:
ca:df:f0:bc:40:f5:cc:78:6e:95:f1:17:7b:9d:11:0b:9d:15:
78:fa:95:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 04:19:37 2026 by rpki-client