Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json)
Hash identifier: qeqfFxuXUQhAobCiQaoUYNgVjfHoltu+esc80BqNJPw=
Subject key identifier: EA:98:0B:27:A4:8A:71:A8:64:F7:A2:60:78:08:F8:95:2B:F0:D1:04
Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Certificate serial: FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
Manifest number: F0
Signing time: Wed 09 Apr 2025 04:21:17 +0000
Manifest this update: Wed 09 Apr 2025 04:21:16 +0000
Manifest next update: Wed 16 Apr 2025 04:21:16 +0000
Files and hashes: 1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: mwnaQPo3dWEZcJyDigifRQfuugTrQB/jojpe99rxPFQ=)
2: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: Xkd+Op7ObANSl7hSEgXBDp6fu8FLqlrIdcxaq4iFP2k=)
3: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: opgCLiPvltRVZTimE7GHd6S5jzb7OIm+U5D/6sM4IWI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl
rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 04:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911112F
Validity
Not Before: Apr 9 04:21:16 2025 GMT
Not After : Apr 16 04:21:16 2025 GMT
Subject: CN=67f5f5bd-3282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:b9:c5:78:80:ca:86:2c:97:b3:d9:5e:aa:
50:54:c9:52:99:56:68:78:82:c6:a4:51:e3:c3:40:
94:6a:42:1c:fd:41:bc:15:24:84:6a:fc:6d:1a:5f:
18:f2:68:e4:1b:50:b6:bd:d7:85:4d:67:9f:c9:09:
78:98:9e:e0:e6:a1:bd:01:e7:c5:de:6d:a6:73:b6:
fc:f2:74:86:5d:ab:75:7d:b3:71:d7:36:65:0d:e3:
c6:76:d4:5d:77:86:e1:94:8d:b5:be:40:3f:5f:46:
38:7d:79:cf:a3:7f:4b:d2:90:87:d6:e9:3b:65:32:
35:03:80:42:8d:71:36:ef:1d:26:fc:3d:fa:51:11:
d9:dd:07:cd:f2:64:34:03:bc:47:a8:52:8c:87:48:
fa:ad:10:be:d9:76:4e:9c:2c:94:d2:59:1f:ef:e1:
3c:41:75:38:9c:6f:22:7f:7b:11:c9:5f:64:52:64:
a7:aa:53:d4:bf:a5:46:64:bf:79:49:3e:92:f4:25:
07:6c:72:32:85:82:6c:ef:38:44:ce:33:e7:4b:01:
eb:1c:3d:f0:7e:5f:b0:98:d7:a5:92:77:4b:fe:4e:
99:1b:e5:c2:c5:55:3d:2b:d0:58:70:bf:a9:63:a0:
e3:1e:cd:34:a6:4b:c0:d1:55:33:d8:58:50:86:5f:
40:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:98:0B:27:A4:8A:71:A8:64:F7:A2:60:78:08:F8:95:2B:F0:D1:04
X509v3 Authority Key Identifier:
keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:b0:ae:92:37:17:4d:d5:2e:a1:47:11:66:22:bf:71:48:b4:
15:de:be:49:8d:d0:af:38:30:36:22:50:18:7b:e0:d0:65:13:
e3:c4:b7:be:55:be:e8:af:64:ec:cf:d3:ac:88:55:ba:13:cf:
18:f6:aa:35:48:a8:85:7d:b0:ac:39:70:37:ae:f1:1b:26:e2:
66:90:5e:3f:4c:0c:6e:b6:8a:d1:cf:dd:44:1e:7b:46:f0:55:
28:92:d1:87:0a:56:52:cc:c8:ed:75:68:db:58:5c:cc:02:39:
1f:08:b3:07:6f:22:cd:2c:88:6a:c2:53:a0:dc:70:a5:e8:2f:
9e:10:8f:6a:d0:b2:24:d7:c6:62:11:ed:72:3c:fe:bd:1b:aa:
62:90:d0:99:23:fd:c7:93:93:d4:5c:c9:63:fb:68:7e:fb:3f:
06:95:8d:82:6a:39:84:e2:05:d5:3a:40:e4:8a:6a:1b:30:9e:
06:81:34:af:3f:b3:7c:7e:61:83:7e:b4:b4:86:55:d3:90:55:
e6:d6:35:80:cf:33:b9:10:01:e0:8d:76:19:14:d0:3d:32:1e:
37:bf:7f:19:ee:66:02:6c:ad:9d:0b:f3:97:e5:c4:32:39:7c:
1b:c1:be:ff:c5:96:6c:14:f6:f6:f0:cc:22:aa:b9:8e:4e:c0:
1b:f5:ca:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:47:00 2025 by rpki-client