Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File:                     D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier:          uQ4KKPtTY5y8eGmMijuDPAxOuz8lj3tPejoW4dekDNQ=
Subject key identifier:   BA:75:5E:4B:C0:34:A2:E7:87:14:6C:FE:42:88:CD:C3:E6:54:F7:99
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer:       /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial:       40E0926731A6061E77C91E77B380D48F93E34356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number:          09C8
Signing time:             Sat 26 Sep 2026 02:22:37 +0000
Manifest this update:     Sat 26 Sep 2026 02:17:37 +0000
Manifest next update:     Sun 27 Sep 2026 03:23:37 +0000
Files and hashes:         1: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: kfLjplem17H6jv9Mq9SxbWnq5Np8aWZNB5zwErh0Bu4=)
                          2: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: rk6Y7tPy8Mo1oakuZi39/fIjJva75BwimkeClcNqXvw=)
                          3: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: UUZSLWq+XI/WHVaboJm1ogby6P5Ai2EZWO3AtQn+u/Y=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e0:92:67:31:a6:06:1e:77:c9:1e:77:b3:80:d4:8f:93:e3:43:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
        Validity
            Not Before: Sep 26 02:17:37 2026 GMT
            Not After : Sep 27 03:23:37 2026 GMT
        Subject: CN=BA755E4BC034A2E787146CFE4288CDC3E654F799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:64:95:ed:3d:b2:c6:92:1b:b3:97:b7:d2:48:
                    15:09:94:5c:aa:fc:73:86:72:64:11:e8:42:24:c1:
                    ae:1e:70:69:0b:69:3b:65:81:fb:c9:c6:ec:de:ef:
                    33:d2:30:2d:b7:21:cb:64:4f:85:8c:06:93:3c:20:
                    6a:5a:f0:3f:7c:e9:ab:3a:0b:80:85:3f:62:a1:59:
                    14:21:6e:2b:57:d8:04:e1:f5:c5:b2:1a:ed:9e:86:
                    ee:fb:a8:a6:8e:e8:14:e1:b4:be:b9:a6:fc:5c:78:
                    b8:20:ef:4a:ae:c8:db:c7:b6:94:b4:c8:d4:71:a9:
                    d0:cf:84:35:a0:35:b8:64:34:e1:27:8e:91:af:9c:
                    be:20:85:5a:af:ed:8c:c1:d7:4c:84:3a:ef:b6:41:
                    b4:40:15:b6:31:20:dc:d9:22:f4:8e:86:ed:fd:28:
                    40:48:24:1a:c5:ba:a0:5e:3f:70:95:56:a3:10:34:
                    84:89:71:32:2d:3a:e9:02:5f:be:3f:86:a6:01:af:
                    4c:e7:f3:c2:c1:9e:17:ec:96:33:43:77:ef:ab:91:
                    06:c2:83:72:61:71:a7:71:7a:29:d9:c3:28:b8:f4:
                    41:2d:10:fd:e3:ae:54:2f:fc:5e:62:9b:43:1b:6f:
                    67:66:58:ef:d5:a7:8e:5f:4a:e5:a9:a1:53:7d:ad:
                    16:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:75:5E:4B:C0:34:A2:E7:87:14:6C:FE:42:88:CD:C3:E6:54:F7:99
            X509v3 Authority Key Identifier:
                keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b4:a0:65:58:cb:ad:34:bd:01:23:94:77:0f:fa:5d:db:7f:
         0b:37:5f:2f:3a:8b:e3:0f:4c:d0:9d:e1:a0:0b:b0:97:b6:e3:
         a9:36:59:e9:e5:b5:e1:3d:ad:e9:6a:94:4c:d6:cf:2c:c9:ee:
         8b:91:d4:2b:71:61:ff:5d:82:0a:4f:b7:bc:34:09:dc:e3:36:
         7e:de:70:23:68:8f:bf:3d:84:42:f8:13:b8:a3:22:3d:a7:c6:
         3e:02:ee:55:af:f7:27:84:de:50:67:d8:d5:ae:de:3e:5a:9b:
         c5:7d:2f:2c:00:7c:c6:13:a6:f4:0d:3d:a9:b6:3f:15:12:af:
         88:7f:18:83:02:99:6d:5c:69:a7:0d:37:2f:42:96:f4:20:db:
         a1:f5:f5:de:6c:f5:4a:f4:f2:f9:d7:c1:31:52:5f:08:e7:57:
         3a:72:13:d5:31:dd:d2:91:ae:a7:2a:31:90:28:5a:a9:77:b4:
         24:e0:f1:e9:b9:b3:f4:52:5e:20:56:0b:df:02:bb:e8:3d:20:
         26:28:b5:af:b8:83:24:4e:35:5e:7b:cf:76:4f:82:d3:ae:15:
         ce:96:32:e5:69:c3:48:ec:ea:6f:2e:03:b8:86:07:d0:75:e0:
         82:4f:05:b7:b0:38:94:d5:fd:09:f9:64:09:2c:b6:4e:36:20:
         d0:69:3f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----