Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
File: TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft (raw, json)
Hash identifier: oshfHGMHxX2W+lyQHezZvZsAHdx1AC4+LTCCroyNRd0=
Subject key identifier: 45:4E:9A:65:07:A9:63:3E:6C:15:6F:96:C6:16:54:DC:79:42:64:50
Authority key identifier: 4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46
Certificate issuer: /CN=A9129023/serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
Manifest number: A0
Signing time: Sun 13 Apr 2025 04:58:20 +0000
Manifest this update: Sun 13 Apr 2025 04:58:20 +0000
Manifest next update: Sun 20 Apr 2025 04:58:20 +0000
Files and hashes: 1: TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl (hash: f4fMUjRX21K8qw37TavHSYC8jxaVQQQYGYwhVeKx8u4=)
2: FFE6CB36228111EFA702E016C4F9AE02.roa (hash: +BYuc5eNV9QVdOv8+l4kTKaLYQnJEvaUX1OVi3Uj8pM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl
rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 04:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129023, serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546
Validity
Not Before: Apr 13 04:58:20 2025 GMT
Not After : Apr 20 04:58:20 2025 GMT
Subject: CN=67fb446c-5592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:67:f5:29:b5:7f:f0:07:8d:09:f0:23:25:f4:
30:2f:07:ca:e3:15:93:f2:40:2c:33:a5:07:31:a7:
87:f9:86:dd:39:74:7a:4f:16:74:7a:f6:6f:48:19:
0f:2e:07:2c:ac:01:1a:2c:fb:63:cd:86:e8:af:dd:
1e:b3:af:2f:cf:c1:d9:bb:8b:d0:77:5a:d0:a6:81:
ac:57:d2:e8:c7:95:ac:db:dd:b0:94:c7:7d:b6:ce:
01:89:ad:3b:83:de:a6:09:ad:26:f9:59:60:66:f8:
28:a1:ac:d1:94:c9:6b:21:5e:f6:96:ba:e4:78:bf:
e1:f6:e9:b6:8e:a3:76:19:0e:df:90:7d:71:d9:0e:
7e:bd:d2:68:eb:93:ad:bf:a7:64:ff:41:23:99:18:
70:c1:a7:1c:2a:89:d3:2d:9b:36:e7:50:df:72:c3:
d3:28:70:d2:f6:48:1e:4f:44:50:3b:11:c9:73:c4:
1a:17:04:7c:be:55:1f:f5:f2:ec:14:a1:20:2a:27:
7d:a3:ba:1f:71:7b:c0:e6:5e:1f:92:ae:23:a8:2a:
9c:2a:cc:c9:fb:9b:5b:6b:98:fa:d3:33:e8:b5:85:
4e:bb:a2:11:1f:5b:3b:2b:5c:62:d8:5e:ed:23:67:
59:f9:c5:72:c1:ba:4c:80:9d:c5:d7:dc:72:72:45:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4E:9A:65:07:A9:63:3E:6C:15:6F:96:C6:16:54:DC:79:42:64:50
X509v3 Authority Key Identifier:
keyid:4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ad:bc:6d:b9:e7:fa:a4:50:85:12:44:df:f4:20:65:ca:c8:
9a:6c:54:4e:26:ca:ef:bd:d0:31:2d:a6:bc:be:4c:81:8b:cd:
2e:82:84:5b:8d:08:63:68:3f:2b:55:68:47:c4:b9:eb:70:f9:
dc:ef:93:a7:7a:45:03:92:c4:57:47:1d:f6:23:8c:4d:7b:63:
0d:ae:df:5c:63:4f:d7:6c:6f:f5:b6:3b:c3:c1:40:29:b5:1d:
24:f8:54:bb:07:70:9d:ac:18:b7:81:b0:28:8f:86:4b:90:e3:
a2:64:de:bf:20:24:70:27:60:92:d0:7d:a6:3a:2e:84:f1:27:
97:55:73:2d:b6:09:fa:e8:f6:99:0e:30:76:3f:bd:43:89:fb:
eb:5a:b3:68:f7:22:f3:9d:3f:5c:e2:4e:d0:69:f7:1c:d1:6e:
e2:ee:39:a6:f4:1a:77:e0:f6:4b:ab:6a:86:f3:89:f9:2e:3b:
48:4d:94:52:03:1d:d5:b7:a9:ec:30:a7:e7:ba:01:e1:83:f3:
03:29:3b:8c:a2:cd:38:68:f7:88:7b:eb:87:de:e3:97:62:7a:
a0:5b:e2:ce:7a:e7:05:71:52:a8:95:00:28:00:c5:85:13:37:
28:db:48:fc:2e:2c:63:13:7e:ef:c3:9e:02:2a:78:aa:37:85:
ed:f1:34:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:57:07 2025 by rpki-client