Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
File: wLnBGxsWDzIbiuxM_N3a2JX8R94.mft (raw, json)
Hash identifier: bdj8OPf0EI04xvLk+02Lh+Wc1rFzJ625+R2m0R9KU5Q=
Subject key identifier: 7C:C7:3B:71:7F:8F:3A:C8:E9:A1:F7:11:3E:2E:E1:DF:62:0C:EC:53
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial: 0E65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
Manifest number: 0E4C
Signing time: Sat 12 Apr 2025 17:39:22 +0000
Manifest this update: Sat 12 Apr 2025 17:39:22 +0000
Manifest next update: Sat 19 Apr 2025 17:39:22 +0000
Files and hashes: 1: wLnBGxsWDzIbiuxM_N3a2JX8R94.crl (hash: VztRzqDZ9EXtukFCoRxVKlEay7mern2DIqWGRQ2/i+w=)
2: DC185D0CB0A111EE8C78834EC4F9AE02.roa (hash: zVf7fP7T9Wlmc5kqlhyBV7WQ1wTAT5AIwMfxCy+bFh0=)
3: A2369FBA595F11EF8C3B3D31C4F9AE02.roa (hash: bwOilKkFH3gA2ITdGBNjHTtXXoE0VHn2T54WZ0kqiDg=)
4: E54A88DE595F11EFB2BAB431C4F9AE02.roa (hash: vNgqnIHOyFrG+kBff2/fqp9MtS/6uUeV76Dqat02ibo=)
5: A2E6430C595F11EF8C3B3D31C4F9AE02.roa (hash: uTNV8vfPbOqOvQgw4kqLGgweQoS/h+YACeR/Qh/rfj8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 17:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3685 (0xe65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Validity
Not Before: Apr 12 17:39:22 2025 GMT
Not After : Apr 19 17:39:22 2025 GMT
Subject: CN=67faa54a-2e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:9b:5c:e1:ae:0c:39:3f:e5:c4:17:e9:15:
d9:15:18:82:b1:dc:53:de:a6:e0:57:15:e8:b0:89:
2d:e0:71:cc:72:88:79:bf:7c:25:ee:d1:23:fc:6c:
fe:e5:fa:0f:cc:60:39:56:16:44:42:86:bf:61:9e:
ad:30:7f:09:1b:b0:7c:87:54:b6:8b:6c:21:a2:18:
cc:ca:81:eb:26:37:76:eb:52:d0:6d:5e:3b:01:f1:
c2:ca:71:54:01:8c:e1:8c:46:8d:fc:f1:47:58:98:
e8:dc:d2:e8:0c:67:70:e6:21:f8:a6:ed:d7:d8:c5:
26:7e:dd:75:c6:bc:76:fd:b9:82:8d:59:c9:ae:7a:
f3:6d:6a:05:69:97:98:ca:cd:53:6a:1c:43:a9:e0:
be:ae:12:aa:60:b6:57:8f:d2:83:df:0b:a7:1a:3b:
c1:e3:d7:6b:8c:14:6d:c8:55:82:43:70:31:06:93:
8d:16:74:d3:95:cb:81:1d:c0:6d:db:0e:ae:3a:26:
41:ea:16:20:48:02:76:78:96:d0:84:87:35:7a:4a:
72:d5:28:3f:f9:52:56:4f:e0:5d:25:74:98:65:2f:
b0:d4:34:6b:61:4c:02:d8:86:0b:af:86:2d:53:cc:
63:58:59:8c:77:f6:c1:4d:5a:e7:32:0d:25:03:4b:
48:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C7:3B:71:7F:8F:3A:C8:E9:A1:F7:11:3E:2E:E1:DF:62:0C:EC:53
X509v3 Authority Key Identifier:
keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:2c:77:97:04:93:2d:20:f6:19:30:4b:db:56:56:0f:d2:c2:
30:37:36:88:bf:c9:15:2d:e3:43:cc:8b:7c:20:7f:77:e3:73:
52:be:13:26:ff:36:4f:13:12:5f:16:32:41:8c:86:12:80:97:
5d:37:7f:27:8e:57:c6:a5:db:79:f4:49:5e:af:70:a8:47:72:
28:34:4b:db:e3:09:fc:d1:06:bc:8d:c4:91:44:f2:e7:f8:8b:
0a:66:11:7e:ff:5e:87:d1:6b:87:98:9f:ef:14:4a:ee:49:91:
7e:9c:d0:81:b6:68:98:f0:70:49:e8:28:5d:94:56:54:74:30:
0f:9f:75:18:5f:c0:3e:cd:dd:81:df:c7:fc:87:2e:37:93:1d:
42:41:7d:28:2f:c3:0e:10:79:70:0d:d3:7a:1f:db:86:d4:b7:
b3:59:77:2a:d6:da:d3:ea:83:73:0c:27:59:2d:bc:d2:46:ee:
c7:02:43:ba:bf:19:87:95:5e:ae:10:e4:c9:dc:37:e7:d8:76:
b5:da:62:59:6c:6e:76:be:29:aa:26:f5:51:8b:a3:2b:87:2c:
db:e5:ba:3a:3e:f9:4e:33:89:3e:b0:9b:76:85:fa:6f:39:9f:
b4:3b:d7:28:90:ea:d8:64:e0:92:1c:c0:c0:0e:ba:85:72:39:
46:13:4a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:27:19 2025 by rpki-client