Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json)
Hash identifier: hg35GbTtjTEgyaegxUYkR0YXf50l6r5GwCguC9Az7/o=
Subject key identifier: AA:89:46:18:EE:71:B3:E5:B5:ED:5A:6D:2C:AD:9C:2D:0A:80:D1:A6
Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
Certificate serial: 0173
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
Manifest number: 0166
Signing time: Wed 09 Apr 2025 03:04:26 +0000
Manifest this update: Wed 09 Apr 2025 03:04:26 +0000
Manifest next update: Wed 16 Apr 2025 03:04:26 +0000
Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: qVhlZezgC/csH4lPqt8g5j177V7JJt2klJpIEYifvPQ=)
2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: g1Yxh4X4gr9QP8BwAN2yJktOsO1m01aHRbfwGJbCyik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl
rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 03:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91215B3
Validity
Not Before: Apr 9 03:04:26 2025 GMT
Not After : Apr 16 03:04:26 2025 GMT
Subject: CN=67f5e3ba-4165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:0f:ed:f8:c8:df:c0:0c:86:98:fb:0a:67:
21:4c:a9:2f:b1:fc:d7:f6:5c:87:d2:ba:ea:e4:a2:
82:fd:81:80:46:2f:41:99:9f:9d:f4:b1:73:64:f6:
b5:99:af:fa:32:3b:42:a6:79:3c:fb:da:77:9d:d9:
8c:1d:d3:d9:16:5d:76:6a:13:a8:41:6d:41:5b:03:
a1:da:46:f1:69:e7:12:37:b0:72:4b:92:83:6d:87:
76:f6:a2:62:e3:2d:26:4b:86:ef:f2:1c:7d:7d:1c:
ba:95:e8:19:b6:ef:9e:67:9c:52:69:68:23:72:29:
17:e1:1d:3d:20:f0:33:fa:9e:39:22:ab:14:30:18:
18:79:ef:8d:b0:05:45:aa:df:bd:f4:ed:09:86:54:
ed:34:1c:e4:3f:f4:a5:5e:7a:47:11:2a:c8:9f:4b:
3e:fe:d9:ba:2d:43:f8:2b:0c:a2:49:70:e6:a7:68:
fa:f3:cd:7c:08:66:77:a6:0e:f1:d5:0d:9d:80:d9:
be:f6:e5:c4:a3:4d:c5:b7:af:0a:2f:c5:bc:29:8e:
5e:92:2f:69:7a:b3:b8:be:25:eb:a2:e9:34:87:af:
75:f1:26:10:8b:7e:5e:97:30:78:3b:11:24:df:c5:
af:a0:dc:cf:fc:27:6b:dd:b2:57:99:bc:11:4a:7e:
dd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:89:46:18:EE:71:B3:E5:B5:ED:5A:6D:2C:AD:9C:2D:0A:80:D1:A6
X509v3 Authority Key Identifier:
keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:22:c9:f0:43:ed:80:72:78:00:99:6f:d8:db:74:1f:03:07:
8f:96:f1:b3:61:28:88:19:7c:57:2f:67:b8:ba:95:b2:1a:43:
8a:eb:36:ef:c9:1b:a6:b5:70:4c:1a:f4:f0:da:ba:5d:40:98:
9c:fe:19:ec:d9:2f:fd:66:62:52:3a:c7:b0:1b:15:95:3a:09:
c8:15:4a:57:f3:16:17:fe:21:99:33:7e:86:97:c6:b0:b6:f9:
c6:00:93:f7:a5:7e:9c:20:ae:72:d2:f3:af:e5:9a:4f:b6:bb:
3b:bc:c3:3e:92:8d:44:b0:0e:f4:99:3a:cc:35:24:ea:e0:54:
69:d2:9b:a1:8a:1d:1c:e2:4c:49:2b:e7:b0:f5:57:b1:46:e8:
e0:0a:d6:e9:09:66:b2:e0:6d:ec:fc:5c:41:26:ac:24:2c:7c:
0d:7f:d1:1f:63:c6:9c:a0:52:1b:e2:e9:0e:61:ef:87:da:49:
c5:6c:94:09:ad:91:00:2a:30:97:9d:3e:ab:ef:ba:a4:80:de:
3a:78:5c:94:d5:66:a2:99:0c:12:03:a0:f7:9d:de:12:e9:09:
8d:e9:84:7b:d1:48:7a:44:85:94:df:80:17:8a:d0:f1:c8:6d:
84:0f:56:28:ba:69:4d:25:19:42:a0:bc:d4:3e:dd:2e:31:1a:
4a:65:d9:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURDNEI1NTc4NzA3
Nzc2MzcyQUUwHhcNMjUwNDA5MDMwNDI2WhcNMjUwNDE2MDMwNDI2WjAYMRYwFAYD
VQQDEw02N2Y1ZTNiYS00MTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2sP7fjI38AMhpj7CmchTKkvsfzX9lyH0rrq5KKC/YGARi9BmZ+d9LFzZPa1
ma/6MjtCpnk8+9p3ndmMHdPZFl12ahOoQW1BWwOh2kbxaecSN7ByS5KDbYd29qJi
4y0mS4bv8hx9fRy6legZtu+eZ5xSaWgjcikX4R09IPAz+p45IqsUMBgYee+NsAVF
qt+99O0JhlTtNBzkP/SlXnpHESrIn0s+/tm6LUP4KwyiSXDmp2j68818CGZ3pg7x
1Q2dgNm+9uXEo03Ft68KL8W8KY5eki9perO4viXrouk0h6918SYQi35elzB4OxEk
38WvoNzP/Cdr3bJXmbwRSn7dpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqJRhju
cbPlte1abSytnC0KgNGmMB8GA1UdIwQYMBaAFJFIUMS4pROy+OTtxLVXhwd3Y3Ku
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTVCMy9FNkY2OEYwNjBC
NEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3TDQ1TzNFdFZlSEIzZGpj
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tVaFF4TGlsRTdMNDVPM0V0VmVIQjNkamNxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3
TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAqIsnwQ+2AcngAmW/Y23QfAwePlvGzYSiIGXxXL2e4upWyGkOK6zbv
yRumtXBMGvTw2rpdQJic/hns2S/9ZmJSOsewGxWVOgnIFUpX8xYX/iGZM36Gl8aw
tvnGAJP3pX6cIK5y0vOv5ZpPtrs7vMM+ko1EsA70mTrMNSTq4FRp0puhih0c4kxJ
K+ew9VexRujgCtbpCWay4G3s/FxBJqwkLHwNf9EfY8acoFIb4ukOYe+H2knFbJQJ
rZEAKjCXnT6r77qkgN46eFyU1WaimQwSA6D3nd4S6QmN6YR70Uh6RIWU34AXitDx
yG2ED1YoumlNJRlCoLzUPt0uMRpKZdkG
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:37:13 2025 by rpki-client