Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
File: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft (raw, json)
Hash identifier: 2qVyi58MLzy6pX0JdspfX68OVqycbJSiJrPoyCnNMy0=
Subject key identifier: 1E:01:A2:EE:30:00:F6:4C:28:BA:D5:5C:5E:E7:9A:4A:1C:43:07:E6
Authority key identifier: B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6
Certificate issuer: /CN=A911A4F7/serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
Manifest number: 63
Signing time: Thu 17 Apr 2025 05:48:34 +0000
Manifest this update: Thu 17 Apr 2025 05:48:33 +0000
Manifest next update: Thu 24 Apr 2025 05:48:33 +0000
Files and hashes: 1: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl (hash: zuvQXhPqZ26UTA+VGUFIP4hfxlAl7I7/uVOzzyeWFyM=)
2: F17DA0FE85FC11EFBD7A485FC4F9AE02.roa (hash: H6cM4D6HiFEzXOD3BJphw2tquQW1HD/n9sWWwx2nQbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl
rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Apr 2025 04:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A4F7, serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6
Validity
Not Before: Apr 17 05:48:33 2025 GMT
Not After : Apr 24 05:48:33 2025 GMT
Subject: CN=68009632-3597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:34:b4:79:46:8f:01:38:c5:14:05:39:e3:a2:
cd:96:d5:79:3a:9b:1d:91:c4:2b:9f:12:7c:6c:f2:
bf:62:85:2b:08:2e:28:46:40:45:36:60:89:ac:e8:
fe:c8:ca:c4:9a:79:04:98:ca:7e:38:3e:10:1b:7c:
88:c5:90:08:96:9f:87:9a:92:e5:e3:60:c9:16:07:
a2:b9:7f:28:dc:22:4c:0c:2f:4b:b3:77:b6:29:7e:
6d:2b:44:e8:61:94:dd:1f:f7:9c:c5:1d:45:3c:e5:
e0:31:06:2c:19:66:df:69:3c:cc:b4:dd:01:de:67:
8c:87:75:c1:ca:04:84:2a:38:f8:1e:68:d0:45:6a:
af:96:ae:39:12:ae:56:0c:14:91:37:0e:7a:ba:11:
2c:ff:c2:48:91:aa:f9:15:2d:bb:13:d7:a7:cf:18:
10:a4:7e:a4:7d:c8:a3:e4:fd:8a:50:02:60:59:98:
a5:0e:3a:d7:53:2e:b0:08:e7:9e:34:3c:a7:c4:ea:
c8:64:1c:a0:4a:55:92:50:24:54:c4:66:c1:b5:c9:
0f:a7:a6:39:81:20:18:cd:67:41:f4:3b:38:28:5d:
06:0b:2f:b3:98:fd:98:96:6a:01:c3:a2:c2:46:f2:
76:da:e7:f1:8d:1f:4e:58:45:42:a4:cb:af:9a:13:
12:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:01:A2:EE:30:00:F6:4C:28:BA:D5:5C:5E:E7:9A:4A:1C:43:07:E6
X509v3 Authority Key Identifier:
keyid:B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:65:f0:4e:4a:35:78:88:3f:51:a8:be:6f:eb:78:4a:b6:15:
cd:18:44:5f:d4:e1:f6:5f:03:2a:c8:be:ac:32:7d:65:19:5b:
68:e8:bc:58:83:f5:5b:0a:f6:0d:cc:cb:91:f3:a7:b9:dd:9b:
3a:d3:87:7c:14:16:41:a9:05:78:da:dd:bc:0c:b5:e6:e7:2e:
4e:69:e6:5d:48:ba:ee:33:f3:f5:b6:a9:9e:36:0c:83:13:46:
07:b7:77:f6:2e:f9:b8:f7:25:92:d9:fe:f0:7d:78:84:da:65:
92:b5:35:62:52:a7:d5:5a:88:e3:df:af:0f:61:45:2b:b9:6e:
24:d8:e8:d1:07:3c:ad:28:3a:4a:83:ea:4f:72:69:c6:3b:eb:
12:e9:eb:80:46:0c:53:15:40:e3:23:74:7f:5e:92:87:45:7a:
28:fe:7b:be:f7:a4:92:17:45:9f:4d:24:01:40:66:6d:b7:b6:
5a:54:21:17:de:9e:6c:0f:7e:57:8d:52:7e:76:40:ed:20:6b:
ab:17:fc:92:d8:a3:37:64:f3:28:02:bb:84:f2:0a:0d:ad:84:
c2:87:0c:59:17:0b:55:c5:3a:38:f6:05:50:5d:33:9e:e7:d0:
5f:2d:31:64:a5:ed:36:cd:24:3b:09:2c:ba:59:21:dc:c7:a7:
62:80:84:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:40:19 2025 by rpki-client