Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft
File: ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft (raw, json)
Hash identifier: FIBKfdDE+j9Q3Nvf2KYG2YTmUnOzsg0obiMrzL0dDsw=
Subject key identifier: 63:43:A3:5E:1F:3A:B4:A6:1A:76:52:2C:D0:CD:A7:F1:91:0A:4F:C5
Authority key identifier: 66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49
Certificate issuer: /CN=A9123DB1/serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849
Certificate serial: 13AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft
Manifest number: 13A7
Signing time: Tue 08 Apr 2025 17:00:34 +0000
Manifest this update: Tue 08 Apr 2025 17:00:34 +0000
Manifest next update: Tue 15 Apr 2025 17:00:34 +0000
Files and hashes: 1: ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl (hash: 3rZPOVbMypfL6X091rYOnSzD808v0bHn0k4IKBs2NdY=)
2: A59866188BC311E88445685EC4F9AE02.roa (hash: UY4nyIE+VkK/iFAfXsE3PqiNSHJ4rK/Ulyy62xkzmis=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl
rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5038 (0x13ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123DB1
Validity
Not Before: Apr 8 17:00:34 2025 GMT
Not After : Apr 15 17:00:34 2025 GMT
Subject: CN=67f55632-6d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:05:03:ad:58:1d:c5:b3:ea:c1:a0:a6:2b:b4:
ee:5a:33:0d:d2:f3:8f:63:f4:f8:50:31:52:15:f5:
b7:af:52:0b:1b:54:5f:03:64:fb:e7:52:b1:22:4f:
95:e1:06:bc:37:7b:61:d9:68:fd:a6:e3:fb:1e:87:
8f:62:76:8c:9c:fd:56:4f:01:83:8e:f2:f9:32:9d:
07:19:1c:40:fa:d9:f4:8f:db:1b:f2:a4:55:af:2f:
d2:ea:79:24:ec:81:c7:b6:73:07:0b:8f:8e:b9:5d:
bd:09:66:d9:21:f8:5c:ce:3e:c3:d5:52:de:eb:58:
44:ce:d3:1f:f0:80:ed:92:c2:49:15:e7:c8:75:2f:
8f:27:05:93:c8:24:f4:0d:97:a0:66:07:6d:fb:00:
fa:fa:ad:06:66:57:9d:10:7a:6c:3f:92:73:40:66:
f1:eb:5d:dd:12:21:da:a9:d1:f2:de:9c:91:4e:26:
67:c1:d1:c0:e6:dc:90:52:fc:bf:47:0f:3c:23:d0:
da:42:d1:24:66:96:36:7e:cf:e0:6f:66:5d:b0:5a:
16:19:cf:82:57:9f:8a:80:01:ab:ad:cc:50:69:54:
3b:44:e2:5f:07:f9:48:27:05:81:0b:47:14:bd:73:
b5:94:ba:d2:f8:87:ac:47:be:b8:c1:15:37:70:23:
a6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:43:A3:5E:1F:3A:B4:A6:1A:76:52:2C:D0:CD:A7:F1:91:0A:4F:C5
X509v3 Authority Key Identifier:
keyid:66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:00:66:75:ca:b1:d1:56:00:5c:4b:22:54:a1:b2:d4:c8:1a:
09:78:e2:f8:97:5c:5e:26:98:fb:ab:4d:13:ef:84:19:3d:63:
1b:84:92:58:34:88:dc:a0:a8:c6:37:76:99:7e:06:bc:ef:74:
43:a3:bc:05:38:49:d2:02:63:a5:d0:5c:6c:0f:ec:b0:28:52:
fd:0c:17:f0:31:d9:0e:73:bc:cd:31:14:af:cb:a5:ca:2c:51:
22:81:c8:1c:d9:49:98:83:72:88:91:16:ad:a7:50:cf:37:53:
f1:10:ed:39:54:62:10:22:54:f2:33:99:a3:3b:3e:56:9b:87:
66:61:44:77:2a:17:a0:bf:a8:bc:b3:9e:d6:dd:4a:48:50:8a:
22:ed:e0:9a:63:aa:e7:76:25:5d:ae:f3:0b:cb:f9:89:37:b8:
bc:b0:a2:cc:f5:01:cc:c6:4d:4a:60:6f:9c:10:59:cb:e0:4a:
87:5c:fa:b5:9a:83:a9:49:b2:e1:8b:30:0f:7d:e5:28:2a:77:
41:a4:c5:f2:9c:cf:a3:6a:99:cd:fe:48:87:13:8d:c4:1f:1f:
39:b6:00:f3:17:ff:56:3b:ba:a5:c0:b6:30:90:e8:00:90:2b:
c1:5a:62:3d:4d:f8:11:8f:4c:71:11:34:5f:ee:03:aa:10:6d:
18:46:3f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:57:37 2025 by rpki-client