Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier: pSQXRdWdu+LiBLk7U1B3TIen99i8Z5C0cKnIUNhzHH8=
Subject key identifier: BC:DC:04:E4:DE:2C:48:B6:C7:5D:50:D6:44:A7:C2:E1:0A:43:57:6D
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer: /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial: 51D2B6CEB7E7FC8991D29B3BDBE6F5D375DD4493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number: 08D4
Signing time: Sun 29 Mar 2026 08:25:22 +0000
Manifest this update: Sun 29 Mar 2026 08:20:22 +0000
Manifest next update: Mon 30 Mar 2026 10:34:22 +0000
Files and hashes: 1: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: 3kgHFhx3RthVERDFxT/EsGeRl8L0/YVyrMuknKzRqfA=)
2: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: E9tvp90Kpr61hZSI7tBGjhyzBxdB/JF9I/2z8pLfS80=)
3: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: 2pjjEaeFm1/VP53XFk2JyK2HDyw9Elj8Ys2W2HATQsU=)
4: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: MmgIyR73WlehdKezTZ7m7o4J8sPfvOsWS399H8z7PMs=)
5: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: F4WabMGA3Pd6V5rJxa03gHF4t+esMEKIXZfZj0yADbc=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d2:b6:ce:b7:e7:fc:89:91:d2:9b:3b:db:e6:f5:d3:75:dd:44:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Validity
Not Before: Mar 29 08:20:22 2026 GMT
Not After : Mar 30 10:34:22 2026 GMT
Subject: CN=BCDC04E4DE2C48B6C75D50D644A7C2E10A43576D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:04:ae:4c:54:2a:24:db:75:a0:67:19:f8:
d2:96:69:38:ce:1e:45:75:90:22:36:4a:e9:73:eb:
49:46:fd:27:06:aa:07:7d:76:95:ad:d7:4a:fa:60:
c0:7f:90:01:64:1e:60:0f:08:2d:9d:2a:8e:d7:f8:
de:87:3b:07:77:f4:04:13:f1:6b:e3:9c:ad:82:6f:
aa:b7:9d:4b:12:ca:68:c8:8f:1e:9a:ea:d8:d1:80:
80:ec:d8:06:89:d3:73:5d:f7:a7:cf:b8:fa:dd:cb:
8b:e8:33:6b:58:c4:79:e3:fc:76:91:bd:36:4f:7b:
83:85:46:c2:c9:de:78:36:6b:6a:08:73:86:cd:1e:
a4:04:34:1a:73:68:39:e9:26:d0:2e:57:84:98:ea:
d3:c3:31:c2:78:b3:c5:02:72:6f:ba:55:ca:0b:d7:
34:52:29:40:b8:eb:2d:40:be:e9:bb:93:5b:64:40:
86:50:78:06:11:64:f5:0f:b9:70:21:e7:46:28:9c:
36:01:ad:40:ae:35:fe:08:48:03:99:dd:2c:28:46:
94:37:ef:a0:7e:53:6a:47:3b:c3:ef:74:4d:f0:0d:
0a:3e:30:f7:82:85:59:04:db:ed:2d:a1:29:5c:07:
99:3d:06:38:ef:ad:8c:ed:90:48:06:93:9d:c2:61:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DC:04:E4:DE:2C:48:B6:C7:5D:50:D6:44:A7:C2:E1:0A:43:57:6D
X509v3 Authority Key Identifier:
keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ca:6a:c7:f3:6f:7f:8b:48:ea:dc:0c:0e:c6:fc:8b:13:cc:
13:19:ec:6d:7a:d9:33:03:c5:d4:55:4a:ee:9c:35:b7:f8:47:
27:3e:2f:cb:8e:44:56:d3:eb:cf:c2:5a:63:1e:51:16:14:ce:
ba:c8:04:81:d8:4a:a4:7e:3d:97:1b:cb:7f:a8:38:b0:24:be:
08:83:55:ba:e5:e6:67:e9:8d:10:5b:1a:c2:3e:4e:f0:a0:4f:
09:14:47:57:32:3e:82:8a:21:42:61:ec:53:57:a4:7d:fe:6f:
a5:14:ae:c8:66:cc:0f:fc:bd:94:72:2e:87:eb:ed:66:70:ee:
3f:9b:14:08:a7:eb:c8:28:aa:a5:0c:17:8d:aa:79:e8:ed:83:
67:d4:a1:c1:e3:ea:37:61:3e:b9:94:0f:fa:7c:c4:5c:d3:78:
20:43:3e:07:0a:69:44:d6:9a:3a:f2:46:dc:fc:02:94:a1:89:
40:eb:1b:69:0b:e0:4b:a4:1c:6d:73:f5:08:9d:bf:a4:e1:bf:
27:84:d3:b9:03:fe:d8:c0:23:a0:d1:27:c6:77:64:7c:ed:c6:
8e:56:45:9e:8d:b4:38:ef:35:cd:16:05:29:c9:33:9d:7a:f0:
82:0c:0e:a3:d8:ea:d5:9e:d7:5a:f6:66:5d:ec:2a:43:29:53:
65:94:c9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:15:54 2026 by rpki-client