Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File:                     D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier:          WNziZ0X1edcLJ6zG3b45zPEWDHbYm+8f14Vg52x2YmY=
Subject key identifier:   B0:CF:C2:BA:DC:6A:AF:1E:07:0D:C6:09:DB:A4:DA:4C:81:F2:A7:C3
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer:       /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial:       6879DA51C5FF7CB6E4E6814061B04B347D3B6F49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number:          0737
Signing time:             Thu 05 Jun 2025 00:46:46 +0000
Manifest this update:     Thu 05 Jun 2025 00:41:46 +0000
Manifest next update:     Fri 06 Jun 2025 01:59:46 +0000
Files and hashes:         1: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: hTtRuiGBbhvwH9ayLLIBJmpjRtUcr4XsOOIT+A7lYak=)
                          2: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: s6GpFm++Td2vziv7b8evt+nq8qsZvz/bpd1yFaiS6N4=)
                          3: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: XNpTfw0GR0xZwJyCQLIkDsV7NTLx+baYV6zLrseLr90=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 01:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:79:da:51:c5:ff:7c:b6:e4:e6:81:40:61:b0:4b:34:7d:3b:6f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
        Validity
            Not Before: Jun  5 00:41:46 2025 GMT
            Not After : Jun  6 01:59:46 2025 GMT
        Subject: CN=B0CFC2BADC6AAF1E070DC609DBA4DA4C81F2A7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:61:0a:7f:de:3e:26:f9:1a:c5:5a:5e:80:
                    80:3b:8f:7b:51:69:ed:4a:59:71:0a:be:8b:91:dc:
                    ac:93:29:63:0c:1c:e8:c5:51:39:78:09:68:cc:ca:
                    07:e6:32:0a:a9:3b:65:c6:f6:43:b7:0f:7c:4d:06:
                    07:c0:83:db:76:fb:34:b8:47:a9:69:74:ea:3c:75:
                    cd:ca:cb:91:21:c4:a0:93:81:1c:4f:f3:76:08:3b:
                    bc:bb:be:ff:08:aa:cb:d2:0a:69:26:b0:d8:2b:a1:
                    ad:03:ac:32:79:49:06:d4:59:88:b4:a4:c7:ef:25:
                    24:eb:f3:c5:46:30:b5:ea:4e:cd:c0:21:1d:06:f3:
                    ce:9e:81:65:16:9e:a1:c5:67:35:6a:94:7a:d3:b2:
                    9c:c0:b3:82:51:3c:38:8a:64:bd:c8:7e:5d:22:a3:
                    4d:1a:9d:68:49:e4:0b:4a:ab:16:68:e5:69:01:be:
                    64:37:b2:93:16:7a:ed:cb:ec:2e:77:44:fd:3f:98:
                    75:28:d4:db:f8:7c:3a:36:2a:8e:a2:42:20:77:93:
                    c8:8d:5f:2d:41:3e:33:37:dd:8a:56:4c:49:28:f9:
                    ba:ae:db:57:b7:40:ff:f8:1c:bb:87:91:25:2d:7b:
                    a5:9b:47:f0:2c:f5:fd:91:9b:b4:ca:57:26:56:9f:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CF:C2:BA:DC:6A:AF:1E:07:0D:C6:09:DB:A4:DA:4C:81:F2:A7:C3
            X509v3 Authority Key Identifier:
                keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:70:7a:8e:4b:11:e7:58:ce:15:41:94:c8:bb:6d:51:f9:0c:
         bc:47:1b:97:e4:03:0f:88:a7:e0:be:9b:0a:31:d5:67:fc:0c:
         be:20:75:ea:c4:91:70:f9:4f:11:c7:b3:6a:b9:70:9a:83:5d:
         0d:3e:47:2c:d8:89:66:27:5a:98:1a:f5:47:78:47:9e:05:2b:
         e3:f9:2d:7c:c0:97:b3:e1:c3:7f:84:3e:14:1c:a9:09:b3:2f:
         d3:f3:6b:cb:52:31:51:de:78:6b:c3:6f:d9:1a:51:f5:98:f0:
         cc:c8:cb:dd:17:f3:17:31:f1:13:4b:a0:06:91:b9:6e:63:7d:
         88:56:46:3b:ae:12:62:51:83:ae:18:fa:e0:d3:64:fc:18:b8:
         c6:59:4b:47:50:38:c0:7d:32:9a:00:51:5c:06:d7:34:be:be:
         2f:aa:c3:de:d2:ce:23:24:b0:67:10:e8:7d:9a:1f:6d:27:11:
         39:d0:38:87:c9:f0:a8:6c:4c:8b:1d:7a:2b:15:12:29:68:73:
         74:a9:d7:a9:b0:29:33:ad:41:6b:51:a5:c0:22:fc:1c:1c:81:
         e0:05:f9:ae:1c:ad:43:27:fd:94:9b:13:a0:17:27:5d:e7:56:
         4b:3e:51:47:c0:55:ab:e0:46:a1:24:f4:7f:e3:20:38:b9:9d:
         13:d8:10:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:15:18 2025 by rpki-client