
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
File: LLjB-eoMe1qANok4hADMb9iwSdI.mft (raw, json)
Hash identifier: 9v0G5+iSP93VX1up75zfnGzi/H5Q798rMcT0il3rcGU=
Subject key identifier: 7B:16:66:37:56:54:80:4A:14:43:26:F9:A4:50:81:D4:EE:CA:83:DC
Authority key identifier: 2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2
Certificate issuer: /CN=A911015D/serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
Manifest number: 0139
Signing time: Wed 09 Apr 2025 03:21:52 +0000
Manifest this update: Wed 09 Apr 2025 03:21:52 +0000
Manifest next update: Wed 16 Apr 2025 03:21:52 +0000
Files and hashes: 1: LLjB-eoMe1qANok4hADMb9iwSdI.crl (hash: MbKnJ/2n1VTkc9HQbNOFjoGfuo8nqXq7Fs8RgqGE0KE=)
2: E199AC0C34F211EEB22E7C6FC4F9AE02.roa (hash: gD+ebhjmYYOlYSwLXx9jf438Mm1bZMxXcWfFLXPYnt4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl
rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 03:21:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911015D
Validity
Not Before: Apr 9 03:21:52 2025 GMT
Not After : Apr 16 03:21:52 2025 GMT
Subject: CN=67f5e7d0-ea07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:87:4a:6d:db:72:04:a8:0f:bf:11:cf:53:
53:17:bd:e0:ca:4e:06:6f:3d:dc:7e:03:be:cb:27:
b5:27:27:26:ed:93:7a:2a:12:b5:5d:71:84:72:79:
db:39:63:d2:21:8e:c0:71:d2:52:b5:e6:6c:66:84:
fe:47:fa:75:5a:f0:5b:e2:54:8e:70:fc:b1:e7:87:
70:88:52:2e:14:11:e1:b4:8e:54:c3:07:1e:37:40:
30:51:15:4a:8f:12:70:4a:d0:f7:4c:bc:57:a7:1c:
81:59:89:17:85:ed:81:d8:6c:f3:b9:78:d5:f7:71:
e8:7e:40:aa:d4:70:1c:33:08:29:3d:80:27:1e:88:
ed:48:73:7b:c5:ca:90:ff:80:66:09:78:47:3d:33:
96:95:13:0d:ae:60:3b:77:98:e7:72:94:eb:93:2c:
52:87:10:b8:13:4e:03:ef:09:67:47:03:d7:22:69:
f3:dd:a5:ff:ea:b0:69:a8:9a:97:55:5d:f2:b4:d6:
a0:6f:56:11:a3:d0:fb:f2:8d:ec:b0:91:9d:36:88:
35:bf:ce:d6:38:5f:f3:9b:d4:43:e9:ee:33:2a:54:
f2:dc:7a:25:17:0f:30:8c:87:f0:8e:57:18:8e:2e:
24:74:0a:a9:67:3f:0a:19:86:a4:72:c8:41:2b:72:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:16:66:37:56:54:80:4A:14:43:26:F9:A4:50:81:D4:EE:CA:83:DC
X509v3 Authority Key Identifier:
keyid:2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d0:11:90:5c:63:68:2f:e9:27:19:d2:1c:52:6e:d1:49:bf:
13:c8:8d:f5:6b:73:80:60:d9:5e:d2:b5:aa:02:88:35:78:55:
96:15:49:39:25:cd:09:e0:b9:b2:16:33:64:8c:16:d3:20:4f:
fe:38:14:a7:dc:c8:6d:98:03:af:8f:37:be:db:54:9a:b5:86:
bb:98:94:25:75:6e:48:20:0c:67:d2:5e:c6:86:de:dc:a9:c2:
7f:07:88:ed:e1:ae:d1:c7:7c:ce:fc:0b:89:c7:75:f9:cc:51:
73:c6:a7:cf:fa:da:0f:71:78:39:d5:15:65:00:5d:18:9a:b6:
04:5b:8c:88:59:8c:44:33:75:c2:12:78:74:39:a5:fe:fa:0b:
21:1f:ec:1e:71:df:15:a0:ae:2a:e3:15:9f:29:1b:fe:bd:69:
02:66:aa:e0:38:fc:43:69:1f:53:86:7a:78:92:b8:de:e8:ab:
12:45:f4:e1:7f:37:02:8e:a8:c5:e0:7a:51:19:29:50:4e:91:
1f:ba:76:33:ee:e2:26:fa:9c:1d:ac:f5:b7:e0:be:68:23:9e:
4d:09:fa:e9:a0:fa:90:1e:df:f0:da:e1:39:0a:62:10:d1:4d:
5c:c4:1c:62:f6:2d:02:04:06:6a:b8:0e:13:16:51:4c:fe:a2:
26:5f:37:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:06:53 2025 by rpki-client