Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier: X3TDcSW2h/IrcxtV2C6QBFASO+QbX5kW0MGrd6kO0VU=
Subject key identifier: 90:31:75:AE:8F:9A:28:4C:6C:1D:1A:7E:B1:9F:CB:8D:59:9B:C2:28
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 269CCDA42959A26279C122A030D8771A2EC74FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number: 0946
Signing time: Sun 21 Jun 2026 20:10:50 +0000
Manifest this update: Sun 21 Jun 2026 20:05:50 +0000
Manifest next update: Mon 22 Jun 2026 23:46:50 +0000
Files and hashes: 1: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: UUZSLWq+XI/WHVaboJm1ogby6P5Ai2EZWO3AtQn+u/Y=)
2: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: rk6Y7tPy8Mo1oakuZi39/fIjJva75BwimkeClcNqXvw=)
3: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: bmh6dHJ/DKRBwpWZcKVACFfqaNg+lAlC8uTwhR3S2cQ=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 23:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:9c:cd:a4:29:59:a2:62:79:c1:22:a0:30:d8:77:1a:2e:c7:4f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: Jun 21 20:05:50 2026 GMT
Not After : Jun 22 23:46:50 2026 GMT
Subject: CN=903175AE8F9A284C6C1D1A7EB19FCB8D599BC228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:bc:7c:fd:3b:5f:ed:87:74:02:ac:3f:7f:
2a:58:7c:9e:f3:91:0d:a9:b0:8c:a7:66:c2:b3:da:
f1:05:51:01:20:25:02:18:49:04:e4:ba:de:b0:f2:
e1:41:c4:61:a5:5a:16:f7:9a:09:db:61:34:0c:2b:
cc:93:f1:23:54:89:14:51:20:a1:ac:79:5a:1f:f9:
24:04:e3:23:4e:b2:d1:58:36:12:f8:78:8c:7e:cd:
3f:44:c8:cc:aa:e3:58:13:48:e7:d4:37:3d:e6:f9:
70:08:64:31:74:cb:a7:b4:4c:1f:d6:c6:bf:83:e6:
95:0e:55:e2:00:b7:86:f4:d8:38:e7:af:e0:1e:e2:
da:6f:2d:c3:a1:c5:85:44:e7:f0:a5:f6:ab:c3:28:
23:c0:c2:51:1f:92:a3:43:8d:a8:9e:b2:17:ed:fc:
e3:a7:9b:41:52:d6:59:e6:55:61:d8:d3:ca:89:2a:
1f:e5:50:d8:bd:4d:f7:21:1a:f6:63:de:c9:40:a0:
fe:a7:6c:21:36:e3:17:3b:e1:05:cc:41:70:20:8f:
aa:cd:0e:ba:be:33:ee:30:bb:2f:e3:f8:97:6a:f5:
82:53:3e:76:49:74:0f:9a:90:e5:d8:6b:0a:da:ff:
aa:48:ee:ce:b1:f3:c7:75:c8:ae:b4:5f:07:92:e3:
4d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:31:75:AE:8F:9A:28:4C:6C:1D:1A:7E:B1:9F:CB:8D:59:9B:C2:28
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f8:01:9e:ff:ff:46:2d:53:65:dc:95:05:59:56:47:76:7a:
11:5b:df:0a:f7:39:a0:b9:13:12:f0:ec:df:f2:02:9b:ba:bf:
d9:61:6f:33:23:32:9f:9e:e6:94:0e:16:b5:9d:84:45:66:0a:
54:61:51:fa:02:92:bf:ac:fd:3c:0a:a6:fe:ab:c4:81:2e:67:
f3:b7:6e:76:99:e0:57:cd:79:b7:ae:54:80:ab:db:ce:30:de:
c9:db:5f:25:61:96:16:14:3b:3c:83:d9:b3:09:b7:98:f1:c6:
01:49:20:3c:d1:88:d2:d7:45:f4:1f:4d:0c:92:fc:47:08:75:
83:54:97:a9:ee:ca:a2:f5:05:c5:64:df:8c:a0:28:2d:cf:13:
9d:44:32:fb:c3:95:42:cc:3a:34:c5:a3:ae:ef:05:3c:13:85:
80:e2:4a:26:c2:3e:d2:2c:c0:23:9b:0b:a5:ed:7e:a4:08:6a:
e9:e2:e5:a8:a1:0a:68:1e:ec:79:b6:08:e4:7a:8c:90:f7:5c:
ef:57:7c:89:54:7e:6e:c7:e8:6c:e7:83:ab:80:84:ca:db:72:
fc:30:98:02:eb:96:72:68:b1:c4:64:f1:2e:0e:70:a7:d8:e1:
53:33:ee:92:bf:15:03:c9:60:17:f6:e0:26:97:37:e5:28:de:
0f:87:d7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 09:35:02 2026 by rpki-client