Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft
File: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft (raw, json)
Hash identifier: PYpCSUOPooj4xPj3UVBL0UpUv5y5cnkb0SQ+q6Ms3tQ=
Subject key identifier: D7:51:4C:ED:F2:76:9F:8C:52:F2:9D:D1:A9:D7:D0:F5:91:0A:AE:62
Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47
Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
Certificate serial: 2563
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft
Manifest number: 252E
Signing time: Wed 16 Apr 2025 14:20:27 +0000
Manifest this update: Wed 16 Apr 2025 14:20:26 +0000
Manifest next update: Wed 23 Apr 2025 14:20:26 +0000
Files and hashes: 1: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl (hash: fSuKRo4fvxfRyvq1phIaAB1bYntBmW8lg30lXC/To54=)
2: 19FEDB562AB611EC93861F65C4F9AE02.roa (hash: IctK1F2f+smhGbfiZwt5TjovlvY8GgFhI80wuux0L94=)
3: 87B992CE90E211EDB4035D5EC4F9AE02.roa (hash: 9Mx2YbXgiyB8AIZIQ7AHexIPVIu7UgKFpNuf1xsWr8w=)
4: 0171064E1E7511EFA136126DC4F9AE02.roa (hash: XFxbQQJDj0rE3ZIrAGCdNw3StLs+W3TJQN2I+ajNUy8=)
5: C40F099A1E7411EF818FAE6CC4F9AE02.roa (hash: B3CcjXzeJ4dABXXB8sqhv86VgPvTtQb+NKigWAQp3Ao=)
6: 3373DB98902C11EA898EFD7FC4F9AE02.roa (hash: IbE+JWM/Bgx4LvXRfO5AkKCxabxFW5QHg0Anl0b9X1Q=)
7: E7D3D36A406911EC83A0470DC4F9AE02.roa (hash: QuRY0ECb/GscIKQG3TIAOw51gGl4J73Kmkxl36DZ8mE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl
rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Apr 2025 14:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9571 (0x2563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
Validity
Not Before: Apr 16 14:20:26 2025 GMT
Not After : Apr 23 14:20:26 2025 GMT
Subject: CN=67ffbcaa-8d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:94:45:8f:43:b6:1d:fd:72:33:fd:34:77:
26:87:50:96:41:f8:c1:d8:ac:73:1d:77:bb:42:ef:
15:7d:0f:73:f6:f7:a1:b8:b0:1b:1c:c1:5e:07:37:
3b:1b:96:a2:a3:1f:c8:ea:85:bd:23:ae:38:1f:32:
ac:71:b8:e4:f9:b0:cd:0c:ee:9c:18:0c:21:c1:7f:
a2:7e:34:c1:89:f5:88:a8:2e:06:eb:5d:ac:53:01:
18:76:14:bb:0d:b8:6d:3e:1e:00:86:2a:15:eb:a1:
75:8e:05:3e:03:06:d1:e9:35:49:d9:6c:75:27:ba:
66:91:62:ac:5b:58:67:0f:ea:a5:f6:58:34:d4:8b:
65:b2:c4:29:3c:02:cc:ca:97:8c:d4:44:24:1f:ff:
3e:ab:69:ff:93:65:ed:41:36:91:d1:d8:8e:69:27:
12:a8:f2:8a:b1:6a:ca:15:cc:c4:ee:74:c0:70:f6:
c4:ad:5d:26:03:1e:34:c1:41:39:7a:b9:99:b3:41:
fc:7f:64:c9:c7:ae:1d:bd:a1:5c:a3:5e:5b:f5:55:
65:b4:38:ad:06:15:40:a1:83:f3:70:ee:05:1d:5e:
ff:c4:be:81:84:ce:86:b3:0d:17:3b:a8:66:d3:a1:
a9:f6:f3:53:96:c8:4c:08:10:7e:be:74:19:53:3f:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:51:4C:ED:F2:76:9F:8C:52:F2:9D:D1:A9:D7:D0:F5:91:0A:AE:62
X509v3 Authority Key Identifier:
keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:27:cd:28:e1:1d:b8:83:df:5b:21:63:09:90:53:cb:ac:fc:
cc:8a:b2:ea:e1:85:46:f9:6f:cd:1b:50:d5:5e:ff:6a:93:7d:
8d:df:91:12:55:e0:91:3f:f9:d7:3a:7e:76:c3:a1:d7:22:e9:
78:e8:42:9b:4b:db:4e:57:3f:72:27:84:6f:ac:ae:b4:4e:90:
3b:93:ff:0a:28:38:dc:a6:60:31:e2:b6:4a:b5:b9:3c:6d:1d:
ac:47:ff:7a:b0:20:6c:0b:ed:14:09:f0:30:1d:1c:93:81:fc:
aa:54:30:35:27:b8:86:fd:4b:5a:25:d7:73:45:c8:a3:a9:74:
d8:64:8b:3d:02:7d:b6:c2:a9:5b:50:43:81:71:dd:67:7c:55:
4d:71:48:76:f5:9b:ff:2b:6c:71:c5:40:c7:bc:09:5a:e1:26:
19:c6:2c:e4:a2:73:e0:42:7b:67:fe:4d:d5:70:28:e0:e6:9e:
3c:b0:f8:a5:d6:ae:6a:18:75:8b:46:9b:28:16:f8:91:85:cf:
d3:ca:69:32:88:77:f8:00:58:d8:f9:3e:11:7c:47:a8:d9:c4:
75:cc:f1:3b:27:a0:bb:92:30:4d:69:d4:3e:9c:cd:07:56:2f:
ac:a3:a2:89:2a:6c:c2:05:d3:31:69:61:c3:c0:8d:4e:00:62:
28:13:0e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:10:24 2025 by rpki-client