Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier: jcp2GSuP5qZY8L3sPF0wQprY2YU5Il7ec1GNs/4o8WM=
Subject key identifier: A2:22:55:8F:BE:B0:0E:6C:24:5F:0F:68:1A:29:73:ED:CE:B7:70:07
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 0821CBEED24D0A09C2ADC96DB54B800249F140F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number: 0807
Signing time: Tue 04 Nov 2025 02:53:47 +0000
Manifest this update: Tue 04 Nov 2025 02:48:47 +0000
Manifest next update: Wed 05 Nov 2025 04:54:47 +0000
Files and hashes: 1: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: UC4fcIxC57X0WQOWt1PA/l9hsi16QhPa9mORMeVjnmM=)
2: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: EyJu90ppwqqyq9X3GjsifsPYvWsKnaMEALo1lXYuu5k=)
3: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: Ncgu1a2T21OhbN3oNHBmUzskub5uVy54SmGOJ7OwCMw=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:21:cb:ee:d2:4d:0a:09:c2:ad:c9:6d:b5:4b:80:02:49:f1:40:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: Nov 4 02:48:47 2025 GMT
Not After : Nov 5 04:54:47 2025 GMT
Subject: CN=A222558FBEB00E6C245F0F681A2973EDCEB77007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:41:1a:f3:00:6b:e2:53:f5:59:c8:9d:b0:
1b:b3:8b:c3:7f:1c:21:d9:d8:06:71:a6:f6:de:b5:
2f:9d:b2:39:15:aa:5c:f7:98:63:11:89:8f:ae:d5:
d4:1c:32:72:aa:b3:3f:27:cb:86:61:a4:9a:2f:ba:
f4:5d:cc:3e:3d:de:5e:bb:2f:07:0e:f5:a5:98:7b:
8e:73:b8:ca:fc:fb:95:78:29:4f:7e:38:0a:bc:b1:
c0:90:5d:bc:7e:46:eb:d7:e0:20:bf:1f:3d:88:fd:
ab:ce:b8:a7:d9:23:6c:79:64:74:14:5a:b4:50:1d:
f5:8e:82:a1:fd:35:a2:4b:bf:11:8b:95:7f:8a:71:
33:98:78:1a:d3:4e:cc:d6:bd:74:1e:c3:e2:64:70:
62:0c:32:0b:fe:a1:33:ce:9f:1a:3b:f3:6e:23:98:
46:30:b8:cb:0b:2e:f8:44:3d:b9:0b:76:61:e1:69:
9a:69:8e:f2:da:bb:5f:61:8b:97:2d:50:ac:a3:61:
69:e6:eb:ff:b8:cf:a9:2b:0b:98:ca:57:f2:20:1a:
a8:35:c4:a6:f4:ce:32:b6:0e:0a:92:e2:4a:47:7f:
10:34:51:69:91:0c:e1:40:5b:62:17:65:e3:d3:37:
0c:07:40:07:db:d1:fc:91:18:b9:b1:1f:0e:3e:40:
bc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:22:55:8F:BE:B0:0E:6C:24:5F:0F:68:1A:29:73:ED:CE:B7:70:07
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:93:9b:52:d4:c1:ee:9c:89:41:ad:4d:45:d2:7c:f2:a6:8a:
a8:51:2f:11:6d:55:a6:3b:56:4e:0e:9c:40:fb:86:1b:e7:a7:
bd:dc:8b:df:af:1e:1c:77:29:d2:85:e6:8f:41:85:ac:45:e5:
b5:22:bc:0b:de:a5:27:58:78:22:f7:1d:1d:48:6a:09:93:dc:
14:65:1a:4e:a5:7a:bc:9a:45:f0:3d:18:ac:0d:1d:47:c6:da:
38:89:0d:bc:f3:b9:84:68:56:e4:94:f7:32:17:34:1a:e4:9f:
90:c5:f5:80:cf:c8:4b:b0:a3:c1:9a:38:2a:4a:a8:fc:3b:d5:
44:aa:1b:e0:7e:15:65:3f:15:45:55:b8:19:15:ef:7b:12:a6:
50:4c:b1:f7:66:70:c3:31:be:0e:9d:47:a3:e6:e1:be:33:2d:
fe:e8:83:e8:1e:66:26:e0:94:c1:83:ef:46:24:74:04:25:3d:
25:b5:f9:b8:eb:db:28:bb:40:84:26:39:31:06:04:67:98:0d:
54:be:e2:60:23:75:a6:a0:b0:39:72:e3:42:31:f4:96:17:e8:
be:9e:6a:80:02:6f:b8:7e:ac:d9:11:e8:48:54:f8:d6:e6:57:
10:cb:14:b1:d7:c5:8e:e6:80:de:f7:8b:7c:bd:3b:d4:92:8a:
63:a5:51:65
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIUCCHL7tJNCgnCrclttUuAAknxQPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDQwNTgxY2E5ZGRhY2E5ZTExMDE2NWIxMWRkMjgyMGRk
N2Y1MzJjMDAeFw0yNTExMDQwMjQ4NDdaFw0yNTExMDUwNDU0NDdaMDMxMTAvBgNV
BAMTKEEyMjI1NThGQkVCMDBFNkMyNDVGMEY2ODFBMjk3M0VEQ0VCNzcwMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yEEa8wBr4lP1WcidsBuzi8N/
HCHZ2AZxpvbetS+dsjkVqlz3mGMRiY+u1dQcMnKqsz8ny4ZhpJovuvRdzD493l67
LwcO9aWYe45zuMr8+5V4KU9+OAq8scCQXbx+RuvX4CC/Hz2I/avOuKfZI2x5ZHQU
WrRQHfWOgqH9NaJLvxGLlX+KcTOYeBrTTszWvXQew+JkcGIMMgv+oTPOnxo7824j
mEYwuMsLLvhEPbkLdmHhaZppjvLau19hi5ctUKyjYWnm6/+4z6krC5jKV/IgGqg1
xKb0zjK2DgqS4kpHfxA0UWmRDOFAW2IXZePTNwwHQAfb0fyRGLmxHw4+QLy1AgMB
AAGjggIBMIIB/TAdBgNVHQ4EFgQUoiJVj76wDmwkXw9oGilz7c63cAcwHwYDVR0j
BBgwFoAU1AWByp3ayp4RAWWxHdKCDdf1MsAwDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzEvRDQwNTgxQ0E5RERBQ0E5RTExMDE2NUIxMUREMjgy
MEREN0Y1MzJDMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu
YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFBV0J5cDNheXA0
UkFXV3hIZEtDRGRmMU1zQS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzAL
hmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTkyQTk4
MDAwMC8xL0Q0MDU4MUNBOUREQUNBOUUxMTAxNjVCMTFERDI4MjBERDdGNTMyQzAu
bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQAKk5tS1MHunIlBrU1F0nzypoqoUS8RbVWmO1ZODpxA+4Yb56e9
3Ivfrx4cdynSheaPQYWsReW1IrwL3qUnWHgi9x0dSGoJk9wUZRpOpXq8mkXwPRis
DR1Hxto4iQ2887mEaFbklPcyFzQa5J+QxfWAz8hLsKPBmjgqSqj8O9VEqhvgfhVl
PxVFVbgZFe97EqZQTLH3ZnDDMb4OnUej5uG+My3+6IPoHmYm4JTBg+9GJHQEJT0l
tfm469sou0CEJjkxBgRnmA1UvuJgI3WmoLA5cuNCMfSWF+i+nmqAAm+4fqzZEehI
VPjW5lcQyxSx18WO5oDe94t8vTvUkopjpVFl
-----END CERTIFICATE-----
Generated at Tue Nov 4 08:30:15 2025 by rpki-client