Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
File: rN673IrqemETaTGDOGOx454Bfic.mft (raw, json)
Hash identifier: xKpZt3r7R8cfzvPCexVL3kPx+3CiQP3GH29xN7dJgg0=
Subject key identifier: 24:77:94:D8:3E:B3:BE:A1:DE:DB:5B:06:7B:AC:BB:23:24:F5:23:10
Authority key identifier: AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27
Certificate issuer: /CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27
Certificate serial: 0AF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
Manifest number: 0AE6
Signing time: Wed 16 Apr 2025 19:15:08 +0000
Manifest this update: Wed 16 Apr 2025 19:15:08 +0000
Manifest next update: Wed 23 Apr 2025 19:15:08 +0000
Files and hashes: 1: rN673IrqemETaTGDOGOx454Bfic.crl (hash: YrWFQdq299tdumw1wIoOjkPbjXdnf8X36Pya9bozEUk=)
2: C8A09F34F11C11EA83A6D247C4F9AE02.roa (hash: zKy/yyxo1KuNb1lr1bEjLMk/9ZIle0kY/A3BTe9o8dE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl
rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Apr 2025 19:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2803 (0xaf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FD55, serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27
Validity
Not Before: Apr 16 19:15:08 2025 GMT
Not After : Apr 23 19:15:08 2025 GMT
Subject: CN=680001bc-8f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ab:83:4c:9f:86:7d:1a:49:c4:19:cb:c1:ac:
76:31:cc:01:75:9c:5f:96:82:1d:d0:b7:81:48:c4:
85:14:43:5d:41:68:9c:d1:f9:2b:0f:0b:2d:19:12:
de:c3:73:d2:fb:dc:01:92:8a:2b:3c:7a:b8:d7:a9:
51:c6:a1:ba:d4:36:7d:77:a5:d0:d7:ca:95:e6:0a:
7d:6c:57:81:fb:a6:95:bf:a2:2d:c1:1d:9c:e2:fb:
8a:2c:b4:34:2a:c9:77:57:0f:4b:07:4b:ab:35:0d:
dd:92:26:9c:b2:7e:4c:b2:ea:7f:65:35:e5:f2:3b:
17:66:a0:c1:87:b0:f0:17:ec:d0:c2:62:67:f1:b1:
60:8d:1b:2b:e7:ef:da:b3:09:c9:b3:e0:3a:3f:2c:
c0:f1:81:a2:37:8a:5d:9f:1c:3f:56:0f:2d:df:5a:
83:28:fa:b0:6f:c3:4a:3d:ad:72:be:c0:5b:79:22:
69:b7:e9:37:d7:a7:0b:99:de:48:35:49:ed:a4:53:
b0:b6:33:a6:82:2c:c0:5b:bc:11:8f:f6:3e:f9:42:
6b:b2:19:b2:b4:12:7c:3e:48:50:d3:cf:5e:04:58:
e9:41:8a:d8:27:2e:d2:7e:23:36:00:00:4c:cd:af:
15:a8:87:03:97:88:b6:87:5c:31:0a:8e:20:00:e0:
e2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:77:94:D8:3E:B3:BE:A1:DE:DB:5B:06:7B:AC:BB:23:24:F5:23:10
X509v3 Authority Key Identifier:
keyid:AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:db:ac:71:5c:80:18:fb:a5:f7:09:ca:91:dc:7f:36:5f:34:
d5:f6:b3:67:22:c3:a1:b0:dd:20:a3:9d:52:38:4d:89:73:1b:
b3:b7:95:b3:a4:81:9f:87:8b:ba:db:0c:92:6f:a7:7e:89:02:
0d:39:c1:5f:00:fb:80:3e:d8:27:c6:ec:f0:8e:fe:96:5a:f7:
c3:10:aa:e6:df:e7:32:7e:0b:f5:bd:2f:bd:e3:4f:4b:e6:1a:
56:e5:89:69:8b:c0:2c:2d:c7:7f:94:16:58:84:3d:6c:3e:24:
9d:b1:d6:5d:f4:d4:9c:dd:06:74:fa:99:c4:18:f5:63:0f:d2:
fb:96:5a:fb:d0:15:21:40:91:09:79:aa:f5:01:e8:d3:eb:b0:
2d:b5:7b:a9:c9:ca:2b:d3:89:20:54:61:e4:f3:a8:5f:fd:98:
9c:5e:15:41:a6:ca:22:a5:93:53:a0:09:15:4a:c7:15:a5:58:
70:46:ac:a5:a6:55:69:a3:55:6d:a4:3d:30:18:b7:34:ed:7a:
48:6e:0c:16:3d:c9:7a:ae:87:15:e5:4f:d9:35:65:04:cc:12:
01:a7:52:8b:c3:7b:0b:ca:26:62:e8:36:1a:17:ae:5a:25:10:
74:ec:ce:0f:46:dd:25:da:5f:f9:0f:84:2b:6b:f7:a4:20:d0:
20:40:ee:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:07:39 2025 by rpki-client