Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
File: i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json)
Hash identifier: fTbB5AMG2pp9Idz9UaBWaViBsGCYi9LeArAcRA5Tf8s=
Subject key identifier: 47:03:6E:89:5F:12:B1:64:18:61:B0:27:3B:D8:93:D2:FE:4D:15:E0
Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
Certificate issuer: /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
Manifest number: 0106
Signing time: Wed 09 Apr 2025 03:59:52 +0000
Manifest this update: Wed 09 Apr 2025 03:59:52 +0000
Manifest next update: Wed 16 Apr 2025 03:59:52 +0000
Files and hashes: 1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: 8utf5lhlShqAJqJojcIwwEMMATgxyvqENyJRJc8sDGI=)
2: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: 1BbW+GzFmicFxrJi47abULi9jqJhPlJkmCnwzd461wM=)
3: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: uYX2IlbgkFVHpSI6ncTYHrhhVumZeL9bEclaECevCas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 03:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127C2D
Validity
Not Before: Apr 9 03:59:52 2025 GMT
Not After : Apr 16 03:59:52 2025 GMT
Subject: CN=67f5f0b8-2842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:b4:14:14:23:08:73:5e:7f:b5:d5:92:ca:
3a:45:d4:99:61:eb:ce:64:aa:e0:ef:f8:8b:57:0a:
7a:30:e9:47:e9:b8:8e:ca:a9:9c:5e:ac:58:17:34:
b1:a5:bb:eb:10:4f:74:24:cc:ac:95:fa:7e:0c:78:
ec:90:1e:b6:60:d8:2f:b6:5a:48:60:5e:fd:6a:51:
5e:e3:14:5b:4a:90:01:63:8b:53:37:26:ea:9c:2f:
41:80:5a:e7:87:06:02:07:82:e4:37:55:84:c5:94:
a4:73:2d:43:94:69:3c:20:59:10:0e:ba:58:b3:f1:
90:5c:a1:c5:c7:e6:ba:0f:e8:0d:a9:c4:ea:83:1b:
91:82:cd:23:2d:0c:b8:b2:9b:f0:e0:72:a9:1c:38:
96:82:f2:74:f7:14:30:04:02:79:a9:65:8b:11:5f:
9d:a0:b9:0c:87:56:89:fc:02:b8:5d:7c:29:0a:aa:
c7:70:30:5c:01:aa:8d:3a:7f:46:ad:99:ce:2b:ed:
2d:04:92:4a:8f:89:6a:e6:26:6a:1f:6f:d7:3a:6b:
a4:63:7e:e9:bf:26:19:d0:69:eb:7f:90:0e:e7:a5:
fe:cc:a8:20:a2:6f:a7:db:60:d1:20:fe:6d:d5:6d:
3a:bb:ee:4a:3a:1b:52:25:df:8b:c5:15:4f:4e:92:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:03:6E:89:5F:12:B1:64:18:61:B0:27:3B:D8:93:D2:FE:4D:15:E0
X509v3 Authority Key Identifier:
keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:a7:d4:fa:2a:ce:6e:e7:8f:51:e7:80:87:d7:1b:f5:e3:84:
cd:bc:23:e3:eb:c0:90:d8:f9:ae:72:ec:71:9f:18:77:42:b7:
7e:fa:85:87:59:d1:12:dc:80:93:9c:86:1e:af:c0:4c:b6:72:
12:e4:85:02:25:cd:76:af:9c:b8:26:51:4c:e6:6e:59:0f:09:
00:7a:2a:0f:3e:01:90:d3:20:1b:ac:c6:49:bc:14:b7:99:d1:
5a:f5:2c:ae:06:7b:96:ec:60:86:67:0c:1a:a7:69:e0:0d:6e:
22:bd:8a:97:74:86:e7:d4:33:93:5b:46:7b:db:5a:e8:41:af:
3d:61:44:f2:fb:19:7b:33:dc:ce:f3:4d:cb:4c:fe:de:5a:cb:
47:43:14:63:e0:51:64:d2:bb:2a:fe:aa:d3:49:84:ae:bf:fa:
58:4f:75:9b:73:7b:33:98:7a:f2:94:f4:f0:12:0c:39:bf:98:
10:68:5c:56:21:83:80:1f:6a:e2:12:a6:a9:5a:f4:54:39:87:
9c:f8:8e:8e:ae:f6:a0:f9:af:9e:8c:7d:dc:35:88:43:f3:e4:
93:b9:e6:8d:9c:97:99:4d:be:d6:2a:48:8f:4a:9a:47:50:72:
83:65:ea:76:6b:19:22:ac:07:8a:92:70:57:9a:86:d6:66:55:
34:d4:73:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdDMkQxMTAvBgNVBAUTKDhCNjVBNTI5NDM3N0Q2ODYzNzhDNDZCM0U5REFEN0NE
QjVCNjY3OTEwHhcNMjUwNDA5MDM1OTUyWhcNMjUwNDE2MDM1OTUyWjAYMRYwFAYD
VQQDEw02N2Y1ZjBiOC0yODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAscu0FBQjCHNef7XVkso6RdSZYevOZKrg7/iLVwp6MOlH6biOyqmcXqxYFzSx
pbvrEE90JMyslfp+DHjskB62YNgvtlpIYF79alFe4xRbSpABY4tTNybqnC9BgFrn
hwYCB4LkN1WExZSkcy1DlGk8IFkQDrpYs/GQXKHFx+a6D+gNqcTqgxuRgs0jLQy4
spvw4HKpHDiWgvJ09xQwBAJ5qWWLEV+doLkMh1aJ/AK4XXwpCqrHcDBcAaqNOn9G
rZnOK+0tBJJKj4lq5iZqH2/XOmukY37pvyYZ0Gnrf5AO56X+zKggom+n22DRIP5t
1W06u+5KOhtSJd+LxRVPTpLkUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcDbolf
ErFkGGGwJzvYk9L+TRXgMB8GA1UdIwQYMBaAFItlpSlDd9aGN4xGs+na1821tmeR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0MyRC85RTM5RjkzNjhD
OUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFvWTNqRWF6NmRyWHpiVzJa
NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2kyV2xLVU4zMW9ZM2pFYXo2ZHJYemJXMlo1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0MyRC85RTM5RjkzNjhDOUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFv
WTNqRWF6NmRyWHpiVzJaNUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAp9T6Ks5u549R54CH1xv144TNvCPj68CQ2Pmucuxxnxh3Qrd++oWH
WdES3ICTnIYer8BMtnIS5IUCJc12r5y4JlFM5m5ZDwkAeioPPgGQ0yAbrMZJvBS3
mdFa9SyuBnuW7GCGZwwap2ngDW4ivYqXdIbn1DOTW0Z721roQa89YUTy+xl7M9zO
803LTP7eWstHQxRj4FFk0rsq/qrTSYSuv/pYT3Wbc3szmHrylPTwEgw5v5gQaFxW
IYOAH2riEqapWvRUOYec+I6Orvag+a+ejH3cNYhD8+STueaNnJeZTb7WKkiPSppH
UHKDZep2axkirAeKknBXmobWZlU01HMW
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:27 2025 by rpki-client