Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File:                     211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier:          VhS97rOfwU6p5ciaC/TpxrBCgUlPYhJoBzLXBBneewI=
Subject key identifier:   06:26:8B:4B:63:1C:FB:7B:75:8D:1A:9B:C2:0B:5B:28:67:7D:03:E7
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer:       /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial:       6B39A8E2A6973E492BE58914EC4F9CE865D09669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number:          09CE
Signing time:             Sat 26 Sep 2026 04:18:03 +0000
Manifest this update:     Sat 26 Sep 2026 04:13:03 +0000
Manifest next update:     Sun 27 Sep 2026 05:00:03 +0000
Files and hashes:         1: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: Shflmw47f/M08AdH9AVMRrDOyY+8FNWh8sdfintkJxM=)
                          2: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: XQtG13qUPKscYxJ92+KDN0tgLgktYMy50emVYCNf78E=)
                          3: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: tvXhFsRYtiC3kIwxPbAszsmESvosb1sxqOklTTpLUA4=)
                          4: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: q017TX6DmgwzPxxi9GThQ2kGNp2z5lVWdZZuLeMmgA8=)
                          5: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: nprFVwe+blZwlWMJj91I3SQeQOqhsqog+q+zvumoDZU=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:39:a8:e2:a6:97:3e:49:2b:e5:89:14:ec:4f:9c:e8:65:d0:96:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
        Validity
            Not Before: Sep 26 04:13:03 2026 GMT
            Not After : Sep 27 05:00:03 2026 GMT
        Subject: CN=06268B4B631CFB7B758D1A9BC20B5B28677D03E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b5:aa:a0:fc:70:af:87:96:f4:7e:65:7e:f6:
                    98:d1:dd:01:03:18:0a:d5:36:32:3c:13:28:45:92:
                    9c:61:ba:33:2e:f0:6f:07:84:3d:22:03:26:ee:cf:
                    25:07:0f:54:f9:6b:8f:c5:e5:15:5b:64:a9:99:51:
                    f0:d2:dd:c8:c1:94:47:86:dc:3d:94:c9:32:e3:61:
                    81:ac:2b:07:67:1e:35:9c:39:17:ed:06:9f:c7:11:
                    bd:8d:c8:17:6d:4d:f4:42:89:d0:1d:b5:03:b4:0d:
                    7c:9a:f3:88:53:dd:bf:1b:f6:f2:54:21:37:7e:0d:
                    83:12:79:be:cc:71:eb:94:10:1e:66:1d:1a:6d:91:
                    c2:4e:a3:12:7d:79:8a:89:20:cc:d4:4f:a9:32:01:
                    7c:f3:20:35:24:33:e7:59:c0:fa:af:b0:d7:e6:bb:
                    25:59:fd:08:2a:d3:d0:70:5f:8b:a3:af:c3:a4:3f:
                    93:8c:43:73:20:34:da:f2:3f:ee:1b:3a:64:8f:7d:
                    cf:a6:ca:0d:43:49:f9:b6:c2:69:90:f8:af:ce:98:
                    d0:b0:e9:da:ea:d6:06:c9:47:88:a3:df:d8:55:01:
                    68:49:c7:10:bf:7c:4f:0a:fe:64:8b:79:f7:6b:48:
                    fb:d7:47:b6:ff:45:68:4a:99:3d:69:e6:35:a3:67:
                    69:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:26:8B:4B:63:1C:FB:7B:75:8D:1A:9B:C2:0B:5B:28:67:7D:03:E7
            X509v3 Authority Key Identifier:
                keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:69:94:9b:c9:69:72:6e:ab:4e:76:1f:e5:6e:f3:3b:1d:0b:
         e6:59:99:32:70:ab:d2:ee:b4:93:16:df:78:93:fc:24:a1:5f:
         09:45:47:65:6d:e9:1f:56:70:dc:b8:10:bb:28:48:e2:c2:38:
         1c:e2:79:e0:81:92:17:a5:1b:9f:ff:a7:ec:36:e8:bd:f2:40:
         3c:e3:1a:4f:c1:26:b4:55:9c:75:fe:e8:46:15:30:33:aa:81:
         cf:d5:3a:c9:6f:4e:c3:8c:a3:d5:4e:50:e9:af:30:aa:8c:20:
         ad:fc:49:6d:c1:a9:4d:26:9d:55:50:4c:f0:3e:94:63:9c:68:
         f1:0d:66:64:6b:57:11:37:55:1a:34:5b:c2:ce:fb:72:cc:0d:
         c3:33:19:6a:5e:a7:f4:7f:78:95:93:47:e1:66:70:0f:10:b8:
         6c:16:3e:81:1a:7a:ac:af:37:4f:9d:38:b4:bf:42:29:54:2b:
         9d:1d:b5:ea:44:d8:e7:c4:3b:eb:be:13:37:e2:b3:42:8b:8c:
         64:69:33:f5:6c:df:77:2e:fc:6f:d4:98:0b:dd:59:a8:31:41:
         4b:ea:52:87:8b:e1:40:2d:68:00:9b:f4:ab:d3:94:c9:c1:05:
         07:bb:e5:01:bf:64:18:5e:ae:4a:49:cf:20:a0:13:9d:c2:15:
         df:30:39:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----