
Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier: FlFbw/ivPYHffnbXSQoAjxSO7TfllibXR98FvRv0o8o=
Subject key identifier: F7:F6:66:E2:7F:D0:05:47:81:F1:16:07:4A:7B:05:49:A0:EF:4E:CE
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer: /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial: 350F9A6D898A7CA87CE2465939DCC150309ED23E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number: 0812
Signing time: Tue 04 Nov 2025 23:54:51 +0000
Manifest this update: Tue 04 Nov 2025 23:49:51 +0000
Manifest next update: Thu 06 Nov 2025 00:15:51 +0000
Files and hashes: 1: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: E9tvp90Kpr61hZSI7tBGjhyzBxdB/JF9I/2z8pLfS80=)
2: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: F4WabMGA3Pd6V5rJxa03gHF4t+esMEKIXZfZj0yADbc=)
3: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: MmgIyR73WlehdKezTZ7m7o4J8sPfvOsWS399H8z7PMs=)
4: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: 7tvchTZB/vf1Wza+AeD211EQH2w57e3aEaauVI8mQm4=)
5: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: 3kgHFhx3RthVERDFxT/EsGeRl8L0/YVyrMuknKzRqfA=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:15:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:0f:9a:6d:89:8a:7c:a8:7c:e2:46:59:39:dc:c1:50:30:9e:d2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Validity
Not Before: Nov 4 23:49:51 2025 GMT
Not After : Nov 6 00:15:51 2025 GMT
Subject: CN=F7F666E27FD0054781F116074A7B0549A0EF4ECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:d0:a4:fc:6e:57:ef:31:f4:36:fa:cc:69:
bd:01:fb:93:a2:07:ee:fc:3f:e2:81:5e:57:12:e2:
f4:e4:d7:4d:ce:1c:4a:2c:5f:fa:52:b0:4a:33:76:
ac:e8:20:52:c2:40:66:33:25:b0:f0:0c:5a:5f:1c:
33:e3:6c:90:a0:b8:1e:74:a3:e4:86:36:73:c1:50:
a8:2c:d8:c8:30:68:4c:85:6c:00:9f:cd:3e:22:20:
14:7d:de:45:c8:bc:48:ec:2b:8a:e5:8f:0e:3f:7d:
39:5f:8e:33:3e:5e:37:70:8a:aa:7c:5b:9c:bc:2f:
53:f8:b3:5f:de:a2:84:7c:58:7c:66:05:12:a6:23:
63:b7:f6:3b:f9:67:4a:e2:e0:f8:dd:3d:f4:57:50:
40:45:1c:22:bb:37:50:7e:5b:03:e1:f0:be:93:7f:
06:0e:18:a3:7a:5f:19:7e:63:ae:4c:a3:bd:16:93:
b8:cd:7b:cc:5c:08:1c:39:04:ef:97:d5:be:86:0e:
a4:a5:6b:d7:f7:cb:87:ba:05:8b:08:0f:fd:c2:88:
48:77:ca:ec:e8:87:78:58:ee:f4:2d:a3:50:af:32:
ad:a8:8d:3c:3e:3a:9d:e1:a8:17:0c:6c:ab:67:79:
4e:a4:93:7f:93:52:1c:c7:37:dc:aa:cf:62:ef:6e:
6d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F6:66:E2:7F:D0:05:47:81:F1:16:07:4A:7B:05:49:A0:EF:4E:CE
X509v3 Authority Key Identifier:
keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:90:46:23:c2:cc:a8:b6:79:43:d2:a2:f5:01:3b:3c:93:9d:
c8:a7:f0:ea:26:ef:cd:9d:16:fc:42:bd:9e:e9:a3:26:05:80:
8a:b2:a1:07:a4:02:46:84:79:93:6d:ed:4d:a6:2b:46:2b:44:
ae:cc:26:b6:f7:96:72:b0:8a:4e:a7:d1:80:f9:92:b7:f0:b6:
bc:3c:b0:2b:bd:a6:02:f6:36:97:c6:55:02:05:1b:cb:f6:c5:
8a:f8:f0:f4:94:f9:ff:7e:0c:d4:e5:a1:91:35:99:6e:b5:9a:
15:2e:b7:e6:52:5d:68:29:97:34:30:39:c8:1c:09:7f:d7:bc:
38:d3:f8:4a:41:9a:3b:25:8f:ab:65:6f:fb:04:24:f2:2f:33:
a3:14:80:30:fa:2e:0e:0d:0e:4b:60:06:11:a9:9d:60:b5:5d:
05:a1:ec:94:dd:8b:63:f5:18:55:54:ce:89:90:59:f0:1c:51:
40:6e:2a:21:5a:4b:90:b2:d8:cf:57:79:1f:1f:6f:78:0e:29:
db:22:3f:4c:85:11:50:10:a3:7a:dc:dd:0b:c8:d9:ad:be:2d:
3b:d5:71:6a:6e:f4:44:c5:bf:96:6c:ce:e1:0c:8f:ab:cc:f9:
62:85:5a:a0:bc:cd:4c:5d:00:56:1d:3a:4a:ac:35:d4:3c:64:
56:17:9c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:24:31 2025 by rpki-client