Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
File: DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft (raw, json)
Hash identifier: IPITBR3J4H57BZsV1dMMjUQnwYba6TX0sty5x5+0biw=
Subject key identifier: 33:97:E1:DC:40:77:E9:51:AF:B2:48:40:67:9C:BF:D4:E8:CE:B7:D9
Authority key identifier: 0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4
Certificate issuer: /CN=A9112BDE/serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4
Certificate serial: 06F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
Manifest number: 06F3
Signing time: Tue 08 Apr 2025 21:43:48 +0000
Manifest this update: Tue 08 Apr 2025 21:43:47 +0000
Manifest next update: Tue 15 Apr 2025 21:43:47 +0000
Files and hashes: 1: DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl (hash: MXrVwZoIFHtF3GEuAS8YBj7opwcKdz6B3IByIl5hdPI=)
2: 511EBFFE3E7E11EB979F564CC4F9AE02.roa (hash: JGwVae5vWzz6HBXwCoXlrwSkJWV/SPa800j6qUmmqIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl
rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 21:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1784 (0x6f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112BDE
Validity
Not Before: Apr 8 21:43:47 2025 GMT
Not After : Apr 15 21:43:47 2025 GMT
Subject: CN=67f59894-a95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:21:60:06:55:ba:f2:ba:95:17:05:33:0d:
b1:ab:10:6b:57:e6:f4:31:6d:88:7e:c0:54:29:78:
39:49:59:88:13:ae:02:31:b5:6f:f8:72:be:b6:65:
24:0b:7d:ba:82:4c:87:40:85:12:65:d5:5f:36:25:
ca:68:4c:63:62:14:ef:2a:cc:f2:c7:ee:cb:6f:ba:
47:6c:fa:d6:9b:aa:36:87:49:0a:79:c4:ea:89:2e:
e5:96:a5:7e:a9:2a:92:7f:b1:c8:78:cc:0a:d7:2b:
eb:cb:1e:3b:cf:4c:31:2e:20:d9:c8:1f:5d:f8:cb:
19:6a:c7:7e:10:a5:e7:23:02:7d:88:b8:8b:e9:ea:
28:a0:32:16:a2:8c:94:11:b5:2c:2b:d7:8b:fc:0d:
7b:fb:06:9e:d8:5e:c5:7e:51:4f:26:35:57:a3:c9:
c6:c9:3f:37:5f:a4:3f:00:0b:56:6b:ea:4f:3c:07:
8c:c6:9e:2b:8d:1d:55:0a:f8:33:21:cc:31:fc:39:
24:08:d8:b6:6b:c6:41:1e:c6:7b:38:61:5a:c6:24:
2a:a2:e6:66:a4:20:62:43:32:57:53:55:5f:a2:29:
be:17:d5:99:9d:a1:cb:36:ed:65:ea:a6:af:68:47:
6e:88:93:2d:d0:4f:14:a1:9e:6b:f7:4d:da:ea:f8:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:97:E1:DC:40:77:E9:51:AF:B2:48:40:67:9C:BF:D4:E8:CE:B7:D9
X509v3 Authority Key Identifier:
keyid:0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e2:89:ef:eb:7c:29:b1:be:9c:6b:31:2b:ea:a4:92:5e:de:
ad:0b:66:ce:71:af:7b:5a:94:ac:a0:3b:5a:99:f7:db:ca:34:
f9:d8:04:97:aa:bd:ac:6d:a3:71:93:20:ad:d2:cf:4d:8f:78:
05:40:06:7e:e1:ad:7b:0a:4f:38:ca:36:df:15:2e:68:9a:9f:
94:f4:b0:48:3e:b2:b2:34:30:c4:b7:a3:2e:ff:e9:d8:1a:e4:
3d:2f:3d:d6:8c:b5:d8:bd:68:55:9c:dc:b1:5e:5c:e8:0b:23:
1d:ae:0c:79:27:06:08:27:c3:a7:cd:16:ce:ea:20:ec:26:f5:
94:c9:ca:58:cd:e6:04:ce:9c:5a:8d:50:eb:13:a7:30:2c:9a:
80:9c:3c:39:11:5f:dd:77:00:61:02:e8:b7:d2:5b:56:3f:de:
53:cd:63:71:05:7d:46:3d:05:a3:57:bf:b3:78:97:04:11:ce:
e0:ab:d8:c8:33:e3:12:0c:ec:7a:b4:29:54:2e:b7:dd:c3:03:
3e:01:b4:71:90:1d:f8:27:ed:a9:ad:13:69:e0:01:2d:13:c9:
ea:d7:f1:06:38:54:2d:e2:28:67:31:01:f2:47:4d:47:6a:32:
6e:9e:ee:40:e4:d4:34:d5:3c:7f:46:0b:33:ba:38:0f:db:f4:
25:ee:87:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:51:32 2025 by rpki-client