Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File:                     211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier:          9eaxC3eMXcxZgnP0cBWH/32XS7MHMaEw4eH5l88okhg=
Subject key identifier:   52:85:83:12:31:ED:F3:28:B7:BA:86:A6:7A:D3:2B:44:13:E5:8A:99
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer:       /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial:       6AF0FFE1763FE70AEC7E3A406736B2222A5835FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number:          094C
Signing time:             Sun 21 Jun 2026 22:56:56 +0000
Manifest this update:     Sun 21 Jun 2026 22:51:56 +0000
Manifest next update:     Tue 23 Jun 2026 00:16:56 +0000
Files and hashes:         1: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: q017TX6DmgwzPxxi9GThQ2kGNp2z5lVWdZZuLeMmgA8=)
                          2: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: Shflmw47f/M08AdH9AVMRrDOyY+8FNWh8sdfintkJxM=)
                          3: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: XQtG13qUPKscYxJ92+KDN0tgLgktYMy50emVYCNf78E=)
                          4: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: tvXhFsRYtiC3kIwxPbAszsmESvosb1sxqOklTTpLUA4=)
                          5: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: ABlgOU7jr7f4z28zSiamTP7ZYqXxCt70pa4Xsi/ikQU=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Jun 2026 00:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f0:ff:e1:76:3f:e7:0a:ec:7e:3a:40:67:36:b2:22:2a:58:35:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
        Validity
            Not Before: Jun 21 22:51:56 2026 GMT
            Not After : Jun 23 00:16:56 2026 GMT
        Subject: CN=5285831231EDF328B7BA86A67AD32B4413E58A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:e4:9d:c1:95:22:0d:df:ba:71:82:40:24:
                    27:4c:22:e0:32:64:b7:64:56:82:84:72:1a:17:b9:
                    4e:df:2e:04:1e:54:98:62:c4:14:bb:40:07:5a:88:
                    3d:90:19:3f:b4:88:f7:54:39:4e:52:7f:6e:8e:b1:
                    ba:03:e7:f4:a5:b3:aa:c4:a9:49:5a:d4:39:f8:64:
                    3d:9b:27:a8:11:49:d3:21:73:7e:24:0b:34:89:ed:
                    2c:9e:be:a1:b8:67:e2:76:cd:ce:4f:fb:76:e8:12:
                    fa:f7:ef:70:fd:ee:f6:64:02:95:df:f3:ae:e3:0b:
                    cf:39:01:c0:6a:f4:54:c4:c0:0e:e9:02:f1:1e:db:
                    5a:15:76:ad:3f:e1:49:66:74:ad:00:b2:9b:97:a5:
                    19:70:0b:3b:58:34:71:4f:c7:01:52:b6:6c:60:5b:
                    ae:c5:90:b9:b8:87:4f:6e:0f:e8:a7:16:87:90:70:
                    74:e7:4c:4c:b1:7c:95:27:03:4f:a2:ee:54:81:a1:
                    60:e5:f2:a2:8b:c9:3e:78:84:c1:07:20:6b:9e:69:
                    69:4d:23:56:3f:3f:0e:40:75:4d:ee:68:d3:8f:35:
                    c9:1c:66:e3:7b:07:be:78:89:c1:3b:18:84:a7:ca:
                    42:33:62:11:1e:ec:62:04:17:0a:66:22:8e:bd:28:
                    c3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:85:83:12:31:ED:F3:28:B7:BA:86:A6:7A:D3:2B:44:13:E5:8A:99
            X509v3 Authority Key Identifier:
                keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:e3:db:7c:ef:7e:9c:38:11:30:49:71:32:72:ac:86:97:5b:
         a9:59:5c:b7:07:4a:90:e5:9e:bf:1d:92:c0:d3:40:5c:28:76:
         b5:21:b0:9f:c3:20:7a:e4:56:eb:a8:05:0f:ac:0b:a7:8a:d5:
         94:eb:12:74:7c:54:4e:97:83:3c:8c:ec:39:28:69:12:df:8a:
         2c:10:28:ca:fb:11:e3:a0:10:35:d8:90:fb:b2:00:81:fa:c5:
         62:cd:b4:17:8c:cc:90:82:09:bb:3d:0e:f0:93:32:01:20:03:
         19:cb:13:0c:40:2a:d5:46:2e:94:73:b6:ee:e0:0b:da:10:46:
         37:8c:20:b6:3b:1e:ad:47:2d:18:9b:a8:81:fd:24:af:fc:19:
         38:9d:72:41:1b:fe:c9:77:72:41:5e:4e:9d:c1:33:04:df:ae:
         0b:48:a5:3b:34:82:05:85:95:26:81:3d:74:d4:13:a6:3f:88:
         61:62:8f:26:ed:f2:6f:df:63:64:3b:6d:7e:c9:22:fc:9e:ed:
         14:6b:71:0c:c3:a5:8c:40:51:15:6d:3c:9e:95:6c:3a:98:e9:
         5f:df:a3:04:b4:44:a3:98:eb:90:0d:b8:1e:7d:6c:42:e7:09:
         37:6e:1a:b2:2a:c2:f6:ad:b4:65:63:71:c5:81:dd:3d:a8:b4:
         99:39:e5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 08:25:58 2026 by rpki-client