Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
File: rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json)
Hash identifier: cYr6ponIuUa9ATCU+hQrZ8kCNHf93BTOkqniXHpZ9Mc=
Subject key identifier: F5:43:FC:FD:87:67:1E:E2:CD:21:D1:78:B1:BA:AF:97:AE:E2:3E:5A
Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Certificate serial: 1041
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
Manifest number: 103D
Signing time: Wed 16 Apr 2025 17:23:00 +0000
Manifest this update: Wed 16 Apr 2025 17:22:59 +0000
Manifest next update: Wed 23 Apr 2025 17:22:59 +0000
Files and hashes: 1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: BattrZXNDjrsAbq7dNyjSZKhJFEqeD+ugr2+U24xaHk=)
2: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: ICClcvVBKcFuPdfdFfNgviyTAzomOOoPWyOYhtZ5b7Q=)
3: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (hash: H1dTpSfdD/QgGNFcXeYoqv9nvsCcB8MXgkClUdfFMB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Apr 2025 17:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4161 (0x1041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Validity
Not Before: Apr 16 17:22:59 2025 GMT
Not After : Apr 23 17:22:59 2025 GMT
Subject: CN=67ffe773-01a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7b:40:11:7f:46:ff:74:41:dc:15:7d:5f:b3:
fe:e6:2b:75:72:31:e4:26:92:f1:d7:8b:4e:4b:8d:
14:c1:38:9d:56:71:74:e8:45:2e:2a:8a:ff:ed:aa:
3a:f8:f2:f4:dd:62:36:0a:4f:f0:13:98:77:fe:5c:
72:fd:9f:34:14:f3:e3:5e:cb:76:69:24:a0:f9:cd:
a1:c5:82:b8:c0:5d:73:9c:63:2e:1b:e8:60:b3:d6:
17:17:cb:95:f6:e4:c2:ff:e3:67:48:5d:1b:05:a5:
b6:b5:34:93:bb:56:ad:af:99:a9:c1:93:86:72:ef:
21:dd:48:87:ff:9d:76:c0:79:d2:9b:69:56:86:0d:
bc:df:ae:3e:29:85:b0:e4:88:bf:c7:21:6a:6e:8c:
46:15:cf:f7:39:51:be:c7:e3:20:fa:b4:15:13:f5:
59:31:18:a4:5b:b9:ed:85:33:d9:30:5a:5b:91:07:
5c:aa:5d:93:31:2d:b2:56:c7:3b:56:c5:06:fd:25:
47:bd:47:72:1a:a8:54:30:66:36:97:54:d0:21:ff:
53:b2:7a:b2:2a:9a:30:fe:90:25:47:8a:24:39:2e:
73:2c:70:fc:d5:ef:77:93:fa:f2:cd:29:f1:52:c2:
dd:79:e0:e8:7b:c2:d4:bb:fa:38:ca:dc:16:8d:fb:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:43:FC:FD:87:67:1E:E2:CD:21:D1:78:B1:BA:AF:97:AE:E2:3E:5A
X509v3 Authority Key Identifier:
keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:dc:7b:b9:97:7c:07:ba:b4:5b:ec:a7:4e:5a:ce:bb:2c:2b:
6b:7d:9c:09:22:84:c9:01:a9:86:dc:e9:fb:03:30:0a:c8:20:
a5:ec:ba:d0:0e:16:1a:61:63:62:7b:1f:32:05:4b:f2:ef:58:
da:7d:7f:e5:5b:16:55:6b:02:c9:2f:c8:b4:f0:d0:d2:bf:80:
32:d6:5b:7b:04:8c:b9:1d:1c:8a:19:ae:aa:3b:67:27:07:9d:
96:60:32:ec:ac:d2:27:77:03:50:44:19:ac:c4:76:0e:2f:e2:
e1:ea:30:a7:a7:c3:6e:b1:35:3e:70:6b:50:33:ca:f8:f5:17:
91:b4:3f:d3:5d:c5:02:16:fe:97:45:1c:7a:cd:9e:00:37:47:
5e:d4:50:f9:ef:df:c9:38:a0:7e:4e:e3:d9:f5:e5:aa:6d:94:
47:50:95:7b:95:14:d7:ae:3c:b8:34:28:c6:35:9c:74:84:2f:
10:29:7e:bb:ef:8c:b9:53:d5:b5:fa:c3:f3:83:fa:a1:d0:e3:
d0:6e:95:f0:42:98:ed:6b:ca:60:43:98:bd:3d:7d:c9:29:00:
ea:79:8f:d9:84:16:a1:a4:77:3d:29:c6:e0:dc:af:5e:1d:ca:
d5:ae:05:de:3d:ca:56:c4:a7:d7:4c:48:31:73:f3:c8:e6:13:
d8:2a:dd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:01:59 2025 by rpki-client