Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
File: nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft (raw, json)
Hash identifier: joDyDwpkRb9jjTiAltdbOhyOiaZBHfpN4nA8TisAIts=
Subject key identifier: 4D:14:AB:E8:C1:70:D9:07:F7:1A:92:EC:56:40:DF:79:59:B0:17:10
Authority key identifier: 9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71
Certificate issuer: /CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
Manifest number: 96
Signing time: Wed 09 Apr 2025 05:10:28 +0000
Manifest this update: Wed 09 Apr 2025 05:10:27 +0000
Manifest next update: Wed 16 Apr 2025 05:10:27 +0000
Files and hashes: 1: nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl (hash: /2PRRQkgB88m01s0/yXW96fSP9ovd9DFENlr5QJeemo=)
2: 6375B8642F5811EF93FCF427C4F9AE02.roa (hash: qL2lFwzQsNJvHM1X7F1IcBH5Nn+NnL8ACspFUTuHDlA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl
rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 05:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91113E7
Validity
Not Before: Apr 9 05:10:27 2025 GMT
Not After : Apr 16 05:10:27 2025 GMT
Subject: CN=67f60144-d83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:c5:7f:cd:22:32:d0:5e:5a:43:31:4e:6e:
7e:be:4e:50:c6:5f:8a:94:10:80:42:b7:d6:7b:75:
89:86:f4:0e:a4:a7:dd:e3:b4:a1:a6:40:4c:4a:3f:
59:c5:17:91:89:4a:ac:d1:df:ff:5a:a7:30:d8:3d:
ae:b0:1a:38:8b:39:01:c4:63:b7:26:fb:57:9a:64:
0d:d6:dc:f4:b5:cf:ca:8d:02:0a:63:41:5b:5f:4e:
25:8e:57:09:82:df:1e:f2:83:e0:e5:cd:da:3e:54:
0c:f0:93:ce:48:f1:84:f0:27:c8:37:a3:32:39:22:
8f:22:03:85:4a:d4:58:cf:72:f8:6e:47:d7:d2:d9:
f5:33:f3:29:a7:50:f6:8b:c3:0c:96:d5:e4:e2:c0:
9a:2a:fd:c7:97:67:1b:0c:c7:46:e1:9e:68:f3:aa:
69:59:28:bc:9b:5a:a3:7a:63:1d:e0:eb:64:24:3a:
8e:d5:41:90:cd:b5:5a:2b:0c:50:63:55:86:48:6d:
cf:39:1d:38:18:24:80:9f:f2:db:0b:b4:8b:5f:68:
f9:16:1d:a1:03:db:5d:aa:3a:f2:61:c2:00:5a:96:
91:e7:e2:ee:2b:56:ee:0e:65:7e:e1:bf:04:0f:ae:
ec:67:5f:1b:b1:5a:cb:09:89:33:b7:28:c3:95:2f:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:14:AB:E8:C1:70:D9:07:F7:1A:92:EC:56:40:DF:79:59:B0:17:10
X509v3 Authority Key Identifier:
keyid:9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:12:fd:9a:16:77:dc:c4:af:96:04:e2:a6:e6:20:fc:9d:ec:
c2:5a:4c:2e:bc:71:98:68:ad:0e:a9:2c:b3:c6:f4:f4:bd:dd:
10:8e:36:41:58:92:13:33:1a:38:80:93:2e:af:31:b3:6f:bd:
a8:e9:83:5a:d3:eb:e7:e8:3f:8c:0c:39:56:4c:81:61:4c:77:
93:ed:f3:48:04:17:ca:e2:58:1a:88:24:d7:14:14:41:b5:a5:
6f:28:26:3b:ea:53:a7:9f:22:3a:08:f2:45:6a:d4:8e:90:a2:
85:3a:b6:af:a0:ee:d9:c7:d8:06:10:57:42:2a:65:15:c9:95:
1a:9f:ec:e9:ef:97:48:4d:41:3b:41:ce:e3:a0:99:54:86:a1:
34:9d:94:83:47:6e:de:67:75:54:5a:7f:02:3d:bd:16:14:37:
ae:4b:78:6f:34:9c:4d:22:3e:e6:0b:00:4e:62:c3:36:54:14:
fa:38:0f:8e:f9:7d:96:27:1f:da:45:03:71:39:15:98:60:56:
29:17:75:dd:37:48:0c:b2:44:01:29:a9:71:7d:98:cd:fa:19:
77:00:2e:ea:bc:9a:97:dc:a4:f5:3f:64:37:64:55:bb:88:a6:
c9:d1:0b:97:1b:13:7a:a4:53:f6:28:25:ec:77:69:05:47:f1:
06:57:a6:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTEzRTcxMTAvBgNVBAUTKDlENkM3NTBDRTAzOTNDMjAwQUJGOEE2NzFDMUYyQzIw
NkEwQ0I0NzEwHhcNMjUwNDA5MDUxMDI3WhcNMjUwNDE2MDUxMDI3WjAYMRYwFAYD
VQQDEw02N2Y2MDE0NC1kODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvULFf80iMtBeWkMxTm5+vk5Qxl+KlBCAQrfWe3WJhvQOpKfd47ShpkBMSj9Z
xReRiUqs0d//Wqcw2D2usBo4izkBxGO3JvtXmmQN1tz0tc/KjQIKY0FbX04ljlcJ
gt8e8oPg5c3aPlQM8JPOSPGE8CfIN6MyOSKPIgOFStRYz3L4bkfX0tn1M/Mpp1D2
i8MMltXk4sCaKv3Hl2cbDMdG4Z5o86ppWSi8m1qjemMd4OtkJDqO1UGQzbVaKwxQ
Y1WGSG3POR04GCSAn/LbC7SLX2j5Fh2hA9tdqjryYcIAWpaR5+LuK1buDmV+4b8E
D67sZ18bsVrLCYkztyjDlS8nsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0Uq+jB
cNkH9xqS7FZA33lZsBcQMB8GA1UdIwQYMBaAFJ1sdQzgOTwgCr+KZxwfLCBqDLRx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTNFNy85RDNBMjAwMDJG
NTYxMUVGQTIzRTVBMjNDNEY5QUUwMi9uV3gxRE9BNVBDQUt2NHBuSEI4c0lHb010
SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25XeDFET0E1UENBS3Y0cG5IQjhzSUdvTXRIRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTNFNy85RDNBMjAwMDJGNTYxMUVGQTIzRTVBMjNDNEY5QUUwMi9uV3gxRE9BNVBD
QUt2NHBuSEI4c0lHb010SEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCEv2aFnfcxK+WBOKm5iD8nezCWkwuvHGYaK0OqSyzxvT0vd0QjjZB
WJITMxo4gJMurzGzb72o6YNa0+vn6D+MDDlWTIFhTHeT7fNIBBfK4lgaiCTXFBRB
taVvKCY76lOnnyI6CPJFatSOkKKFOravoO7Zx9gGEFdCKmUVyZUan+zp75dITUE7
Qc7joJlUhqE0nZSDR27eZ3VUWn8CPb0WFDeuS3hvNJxNIj7mCwBOYsM2VBT6OA+O
+X2WJx/aRQNxORWYYFYpF3XdN0gMskQBKalxfZjN+hl3AC7qvJqX3KT1P2Q3ZFW7
iKbJ0QuXGxN6pFP2KCXsd2kFR/EGV6Z7
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:59:23 2025 by rpki-client