Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
File: 0qCHG82DdsEajwSaOYVa_NsYMGQ.mft (raw, json)
Hash identifier: Vbda0pKXy37LitA/7AdINPh4tBH+6A7nOIKzoVG+9X4=
Subject key identifier: 9C:48:3D:94:AF:7D:5F:E3:E5:FB:62:BC:81:87:05:DB:73:5A:DA:8D
Authority key identifier: D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
Certificate issuer: /CN=A911CA82/serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Certificate serial: 0602
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
Manifest number: 05EB
Signing time: Sat 12 Apr 2025 22:46:44 +0000
Manifest this update: Sat 12 Apr 2025 22:46:43 +0000
Manifest next update: Sat 19 Apr 2025 22:46:43 +0000
Files and hashes: 1: 0qCHG82DdsEajwSaOYVa_NsYMGQ.crl (hash: qG5qbyv/6frhU4opFyyqk2mrlTYNzkXBbJI/2hjrR+E=)
2: CB304C36307111EDB0CBD946C4F9AE02.roa (hash: h9DqnEtbruLOpPqSAISAKNnDRi6yuYNHWuuyOYyu56Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl
rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 22:46:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1538 (0x602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA82, serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Validity
Not Before: Apr 12 22:46:43 2025 GMT
Not After : Apr 19 22:46:43 2025 GMT
Subject: CN=67faed53-38b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:ee:98:f8:e0:db:19:d4:b7:9e:ec:bb:f5:
21:13:1f:8a:34:a3:6f:08:47:de:93:b1:15:a9:6a:
79:20:b3:a1:da:46:24:32:e9:00:53:11:d4:e8:28:
4e:73:00:44:ed:d6:8b:a2:c8:df:d5:f8:f3:44:05:
bc:1c:df:50:76:ae:a7:b2:c8:e4:89:10:49:fc:28:
32:34:1e:b5:58:c2:dc:40:da:44:f4:23:7e:e9:23:
51:4d:fd:91:38:37:1f:a7:e1:35:50:1c:14:6a:a6:
9e:c4:ec:fc:39:91:fc:e2:c9:b3:af:bf:61:d9:14:
26:da:d6:b4:18:19:b4:7f:9c:1f:3a:96:e9:c1:29:
66:3f:08:32:5a:7f:c9:98:35:fd:0b:5b:24:04:a7:
e3:e7:45:d0:7b:3a:f4:e8:f5:4a:d5:98:4e:87:b4:
d9:83:92:6f:4c:29:bb:32:34:53:48:d6:44:70:64:
d0:a9:4c:c4:b9:aa:54:23:f7:48:5c:e0:86:5c:ba:
73:35:d2:63:4f:d1:76:c1:5b:45:bc:23:51:2e:74:
56:65:55:f5:59:77:94:6f:1c:4f:c1:c1:69:42:33:
ce:c7:4d:f3:ba:60:93:f6:bf:6b:8b:8f:1b:e9:ad:
65:c3:5a:6e:86:76:8d:f1:a8:7d:ae:5a:a6:f2:82:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:48:3D:94:AF:7D:5F:E3:E5:FB:62:BC:81:87:05:DB:73:5A:DA:8D
X509v3 Authority Key Identifier:
keyid:D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:41:8e:1e:b4:a4:6f:dd:8e:b2:e1:74:75:89:0e:dc:43:cf:
6b:b1:58:43:4a:20:23:24:0e:c3:dc:64:27:b4:2f:6e:0a:d3:
27:92:74:48:e0:35:d8:22:bf:90:63:d4:a8:71:e5:15:ee:a7:
5e:26:be:8b:bc:36:7d:97:c3:41:df:3a:15:b7:19:6d:ce:8d:
8f:17:3e:2f:38:d3:5f:63:c6:ac:34:1a:25:0c:31:fe:3b:54:
a8:e5:54:22:df:be:50:7b:99:97:59:56:d3:11:4d:72:8c:a6:
2a:18:df:86:fd:f5:81:f2:e4:c9:97:b7:b7:bc:da:c8:76:bf:
99:99:a5:09:23:1e:ac:98:b7:23:19:5c:10:30:b9:9c:79:99:
6f:e6:00:f4:a3:52:dc:2e:fd:60:60:85:98:34:2b:c7:63:28:
c1:de:5c:c7:53:d3:28:75:c4:9e:38:10:9e:40:00:ac:69:28:
24:5b:7f:cd:1b:d7:10:6b:9d:08:20:37:b3:e3:14:48:b8:26:
5e:ce:ac:35:c7:bc:8b:c0:e6:7a:1f:1f:f8:d0:a6:82:21:f1:
21:6e:55:26:b1:6b:4c:2a:1f:fe:92:6b:37:3b:2a:ee:0c:2d:
dd:01:cd:ea:20:87:2e:04:5e:5e:95:2a:56:1c:9c:71:b6:b8:
46:33:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:47:14 2025 by rpki-client