Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
File: KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json)
Hash identifier: gVrUFsEg9AdsaME2vm6mm3CwqBC5k+ZAyYzQZQo7bnI=
Subject key identifier: 8F:D3:5F:1D:82:6E:ED:2D:78:37:0E:1A:D8:F5:C3:18:CD:C2:7C:BF
Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43
Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443
Certificate serial: 075D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
Manifest number: 074D
Signing time: Sat 12 Apr 2025 21:21:21 +0000
Manifest this update: Sat 12 Apr 2025 21:21:20 +0000
Manifest next update: Sat 19 Apr 2025 21:21:20 +0000
Files and hashes: 1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: q61IKFCr5AW2XX3YsfIAwzXGpP86ThHUyyEgNcyhdys=)
2: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: bPVen4Q79bQMysYZB+1SSkGirdnYsj/wax4oaPllL9M=)
3: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: U4O6uXSOF+3gB8WDqXNclHvwBePMcUEtPgGRnogD3Pk=)
4: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: EPNFm1X8MnpnhMfq1ASr/F02aUDuHCY7XYN9aoUZxhY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl
rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 21:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1885 (0x75d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443
Validity
Not Before: Apr 12 21:21:20 2025 GMT
Not After : Apr 19 21:21:20 2025 GMT
Subject: CN=67fad951-38b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:df:4d:24:3a:b5:11:ca:72:9b:37:b6:00:b5:
be:19:18:c3:31:e6:41:85:44:85:fb:06:20:b0:49:
a5:57:b5:29:80:ae:6d:e5:c7:07:34:47:43:d4:2d:
f2:b0:97:14:16:1e:b5:65:7c:9b:cf:30:c5:f5:fc:
ad:71:db:7a:f9:fb:5c:af:f0:5a:d7:0a:90:90:47:
69:36:e4:f2:e9:18:01:b6:db:6e:3a:95:cd:b1:7c:
ec:da:97:ae:a2:4a:7f:3e:70:0d:7d:22:d7:65:c1:
63:69:81:0c:93:68:45:d0:cd:e4:7f:72:10:81:c3:
2a:78:8b:ba:36:10:26:09:a4:1d:f9:ec:78:4e:f9:
c0:83:6b:c2:c9:ef:5c:0b:dc:03:96:b2:4c:9c:41:
b7:f2:9d:1b:f6:5f:99:8a:c4:83:9d:a6:04:b3:32:
96:2d:0e:63:f4:9a:6d:2d:be:01:9a:a9:40:f8:66:
f2:27:3b:b6:e5:42:b2:6a:43:70:28:43:04:72:98:
ac:7b:80:0d:8c:cc:99:91:a8:c8:8e:9c:85:b7:19:
33:85:ea:88:16:a8:e3:5e:50:ce:ea:73:38:92:a5:
bd:ed:6b:82:13:f7:ac:2b:07:df:07:53:bd:e4:43:
49:c2:46:cb:b7:f7:00:54:80:2a:b3:df:db:7a:ba:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D3:5F:1D:82:6E:ED:2D:78:37:0E:1A:D8:F5:C3:18:CD:C2:7C:BF
X509v3 Authority Key Identifier:
keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:bc:ff:8f:4d:e1:41:18:31:38:d3:5c:4a:57:78:36:a4:37:
71:8e:e4:95:ae:c6:92:b3:6b:9b:73:f2:46:39:c5:76:27:f0:
24:6e:12:ed:7a:57:60:f1:b8:7b:33:98:76:1b:6c:33:49:ae:
5e:a3:da:b1:65:e6:84:b1:df:9c:ef:3c:ad:21:a0:30:93:90:
f4:0e:d3:fe:f9:4d:41:a9:5a:b9:30:90:f0:47:1a:d0:fb:1a:
7a:a2:81:c4:a7:20:22:fd:09:6a:5d:67:75:7c:95:85:3e:66:
62:63:e3:4a:3e:61:9d:91:39:04:4b:19:e2:be:e5:fb:ca:bf:
95:c8:d0:5e:e1:fb:b0:b5:9a:b6:b9:bb:ca:24:93:65:46:08:
08:c2:a1:e4:d2:df:2c:a8:ff:22:ac:5d:0b:06:62:26:ae:f4:
56:3a:62:8b:19:90:4e:18:41:64:9c:93:4e:58:2e:cf:3e:50:
ad:9e:37:3e:a1:b2:6a:73:c2:27:38:57:dc:d5:79:78:8b:b4:
0c:ad:f3:be:85:5a:a9:eb:67:59:39:0d:96:8b:23:27:22:8d:
8b:30:cb:11:b0:5e:b5:d1:1c:7f:12:a3:f6:8e:d7:47:b6:21:
6a:6f:aa:1a:72:7d:b8:9f:7c:76:a8:87:f7:57:76:fe:f7:d0:
16:61:e0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:38:42 2025 by rpki-client