Manifest

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File:                     211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier:          2fV17ovc9lbZkWz7jwwHcZj2D4xRjYex2r6MXi4cdmU=
Subject key identifier:   69:0D:C6:D5:5E:CC:87:F5:E7:2D:54:70:4B:38:15:EC:B4:B9:F2:8E
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer:       /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial:       3BFDE23E2B968499A0971E43C4901ED6DB6A6173
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number:          09CF
Signing time:             Sat 26 Sep 2026 21:01:53 +0000
Manifest this update:     Sat 26 Sep 2026 20:56:53 +0000
Manifest next update:     Sun 27 Sep 2026 22:22:53 +0000
Files and hashes:         1: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: q017TX6DmgwzPxxi9GThQ2kGNp2z5lVWdZZuLeMmgA8=)
                          2: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: hiBrgN/RoEbpneyPhqSHYN+GcpNl0aSDtK82TKmagTQ=)
                          3: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: XQtG13qUPKscYxJ92+KDN0tgLgktYMy50emVYCNf78E=)
                          4: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: tvXhFsRYtiC3kIwxPbAszsmESvosb1sxqOklTTpLUA4=)
                          5: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: Shflmw47f/M08AdH9AVMRrDOyY+8FNWh8sdfintkJxM=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:fd:e2:3e:2b:96:84:99:a0:97:1e:43:c4:90:1e:d6:db:6a:61:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
        Validity
            Not Before: Sep 26 20:56:53 2026 GMT
            Not After : Sep 27 22:22:53 2026 GMT
        Subject: CN=690DC6D55ECC87F5E72D54704B3815ECB4B9F28E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:75:29:3a:ff:b9:83:a2:47:5c:37:1d:15:81:
                    d2:6d:10:21:53:bb:83:a8:ef:2c:31:e6:35:fc:07:
                    6f:d4:32:cb:90:02:be:13:01:c1:3e:ed:2b:b4:7c:
                    4a:b7:99:18:a3:04:09:0f:7f:df:44:65:69:5c:25:
                    00:17:6b:aa:15:4f:fa:ab:ee:5d:df:60:1e:a2:4d:
                    e5:59:b7:f6:4f:f6:b0:79:a0:e8:ab:25:74:79:1c:
                    20:d1:2e:72:54:ad:83:91:2e:5c:f8:e8:b2:66:55:
                    00:ac:83:fb:4c:2f:63:a5:df:02:2d:9f:59:00:12:
                    48:7c:1a:c8:a3:5b:07:f9:21:e4:a2:c8:7a:67:0e:
                    4f:5c:54:d7:09:80:4c:33:e2:b7:58:53:17:9a:d1:
                    50:32:c6:ee:92:01:2e:47:d7:72:3a:ba:95:e0:c7:
                    c1:45:12:73:ef:c7:68:ad:27:6b:e4:ab:d5:b5:39:
                    99:6b:e0:c7:8f:e7:c7:e1:41:44:ac:f8:e3:1a:11:
                    34:2d:dc:60:fb:48:4e:a7:dd:35:79:3a:d6:41:ed:
                    71:18:3c:7d:96:98:58:e7:fc:b2:2c:0a:85:eb:f2:
                    69:7b:b9:5b:4b:63:f4:b8:02:86:00:85:aa:d4:fc:
                    0e:a5:db:47:dd:3f:b0:7f:e0:58:2f:71:f3:ec:8f:
                    1e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0D:C6:D5:5E:CC:87:F5:E7:2D:54:70:4B:38:15:EC:B4:B9:F2:8E
            X509v3 Authority Key Identifier:
                keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1d:15:5c:dd:62:42:78:33:37:31:82:d4:48:a0:8b:1a:06:
         9f:cc:1b:47:8d:5f:5d:89:6f:e3:5f:1b:10:bb:99:80:bd:af:
         ab:67:e4:99:32:a8:6e:24:16:bc:63:68:54:a4:7f:03:e2:1d:
         e2:cd:a0:16:83:b0:c4:5d:80:e9:49:af:0d:38:a1:de:51:4f:
         af:69:9c:da:fd:de:b8:2d:0a:e4:b7:13:60:ca:ef:63:cc:49:
         30:2c:cc:7c:39:8e:3b:e2:87:1a:38:fb:62:9f:38:85:eb:4f:
         76:59:a0:fb:15:bc:11:da:f1:6f:3d:f8:a1:cb:9d:54:89:8a:
         11:bf:b7:47:a1:15:c9:6f:4f:56:52:c3:ba:c5:68:b8:84:5d:
         c2:f0:66:6a:f2:dd:92:7d:cc:f8:bb:d4:99:46:3d:ae:6f:59:
         6b:7e:75:1c:09:94:6f:79:2c:ca:3a:81:b6:5e:b0:a9:44:b5:
         6a:12:1a:c4:65:89:1a:69:74:ff:26:9b:1a:68:bd:5a:e8:26:
         30:da:1c:1c:51:41:78:7f:80:6e:6d:8c:2c:0c:1b:a2:0f:2a:
         63:96:97:eb:2b:60:42:00:ad:66:63:b7:e4:32:9c:ca:8f:cf:
         4a:03:97:20:7b:53:a5:bb:c5:77:4e:b6:39:82:92:2d:f0:82:
         22:ee:e5:19
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIUO/3iPiuWhJmglx5DxJAe1ttqYXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExYTA0ODg5MDk2OWZhN2Q0YjZhZWY4YzAyMGNkYTQ0
NDRlYzJlNTAeFw0yNjA5MjYyMDU2NTNaFw0yNjA5MjcyMjIyNTNaMDMxMTAvBgNV
BAMTKDY5MERDNkQ1NUVDQzg3RjVFNzJENTQ3MDRCMzgxNUVDQjRCOUYyOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDndSk6/7mDokdcNx0VgdJtECFT
u4Oo7ywx5jX8B2/UMsuQAr4TAcE+7Su0fEq3mRijBAkPf99EZWlcJQAXa6oVT/qr
7l3fYB6iTeVZt/ZP9rB5oOirJXR5HCDRLnJUrYORLlz46LJmVQCsg/tML2Ol3wIt
n1kAEkh8GsijWwf5IeSiyHpnDk9cVNcJgEwz4rdYUxea0VAyxu6SAS5H13I6upXg
x8FFEnPvx2itJ2vkq9W1OZlr4MeP58fhQUSs+OMaETQt3GD7SE6n3TV5OtZB7XEY
PH2WmFjn/LIsCoXr8ml7uVtLY/S4AoYAharU/A6l20fdP7B/4FgvcfPsjx5tAgMB
AAGjggIBMIIB/TAdBgNVHQ4EFgQUaQ3G1V7Mh/XnLVRwSzgV7LS58o4wHwYDVR0j
BBgwFoAUIRoEiJCWn6fUtq74wCDNpEROwuUwDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzIvMjExQTA0ODg5MDk2OUZBN0Q0QjZBRUY4QzAyMENE
QTQ0NDRFQzJFNS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu
YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lSb0VpSkNXbjZm
VXRxNzR3Q0ROcEVST3d1VS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzAL
hmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTkyQTk4
MDAwMC8yLzIxMUEwNDg4OTA5NjlGQTdENEI2QUVGOEMwMjBDREE0NDQ0RUMyRTUu
bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQCWHRVc3WJCeDM3MYLUSKCLGgafzBtHjV9diW/jXxsQu5mAva+r
Z+SZMqhuJBa8Y2hUpH8D4h3izaAWg7DEXYDpSa8NOKHeUU+vaZza/d64LQrktxNg
yu9jzEkwLMx8OY474ocaOPtinziF6092WaD7FbwR2vFvPfihy51UiYoRv7dHoRXJ
b09WUsO6xWi4hF3C8GZq8t2Sfcz4u9SZRj2ub1lrfnUcCZRveSzKOoG2XrCpRLVq
EhrEZYkaaXT/JpsaaL1a6CYw2hwcUUF4f4BubYwsDBuiDypjlpfrK2BCAK1mY7fk
MpzKj89KA5cge1Olu8V3TrY5gpIt8IIi7uUZ
-----END CERTIFICATE-----