Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
File: nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json)
Hash identifier: r1Ft504+y6iNtZyZlPEM/ergiTNc0oIXp2rAa5F5uFM=
Subject key identifier: C2:7B:A9:D8:FE:63:3B:E3:59:0F:18:88:E4:B9:52:64:8E:EB:B7:4F
Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A
Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
Certificate serial: 0113
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
Manifest number: 010F
Signing time: Tue 15 Apr 2025 03:51:48 +0000
Manifest this update: Tue 15 Apr 2025 03:51:48 +0000
Manifest next update: Tue 22 Apr 2025 03:51:48 +0000
Files and hashes: 1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: Evu0GuKEgK+vRlAAL04lC4mKm12PdFyCfVNjX2Ry/MY=)
2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: rYwGjsQBpShXvyi5oxowpgOp3gdk00xJnm3EoG1TD+c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl
rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Apr 2025 03:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
Validity
Not Before: Apr 15 03:51:48 2025 GMT
Not After : Apr 22 03:51:48 2025 GMT
Subject: CN=67fdd7d4-658f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:51:5b:65:db:de:27:11:b1:5b:26:44:da:
22:24:50:52:38:fd:51:fa:f9:48:a9:be:79:7a:ad:
dd:45:a1:57:8f:1c:22:7b:ee:7d:77:77:71:da:9e:
cf:62:2b:33:1e:ab:3d:cf:f2:86:3b:53:03:d1:f4:
25:10:84:b0:04:8c:eb:98:bf:84:a0:2a:14:f3:69:
8a:12:2b:9f:fa:1a:6c:cc:40:5a:de:59:39:19:2b:
3f:ee:9f:3e:27:c7:76:9a:60:0f:7e:e4:9e:62:5c:
44:44:f6:dc:6f:be:14:76:3b:4d:9e:3d:49:04:c7:
01:1c:8e:43:41:46:ca:66:7f:9d:82:fa:0b:7e:4d:
e5:62:fd:5d:c1:e0:8a:93:1e:17:e2:f1:57:b6:2e:
b1:e4:eb:c1:24:fc:0f:51:a9:a7:69:cd:7d:de:c4:
d7:a7:cb:6d:4a:70:20:e4:8e:23:0f:dd:9d:09:6f:
e1:31:21:f6:be:60:64:0e:ef:7c:2b:75:ed:93:dc:
da:ea:03:5f:86:10:d2:6b:9e:bf:9e:bd:0d:f7:51:
a2:14:67:04:65:70:29:de:66:69:c5:e3:76:81:cd:
73:af:e6:d1:cc:95:9f:b2:c3:40:b4:8b:b0:c2:ad:
9b:a3:68:12:56:aa:0f:46:a2:cb:40:c1:91:b5:d0:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7B:A9:D8:FE:63:3B:E3:59:0F:18:88:E4:B9:52:64:8E:EB:B7:4F
X509v3 Authority Key Identifier:
keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:13:18:ed:68:88:aa:a9:4f:b8:93:19:e7:c5:ff:aa:fc:80:
b1:9f:5f:38:89:8b:02:0c:f0:74:b5:80:43:66:61:3a:b9:5d:
e5:e5:1a:a1:ef:d2:27:3d:2d:fb:fa:4b:1c:ae:89:5a:09:50:
52:1d:31:1d:e8:c2:11:d1:1d:0a:9d:cd:7b:2f:46:20:f4:91:
ea:02:5c:9e:0d:02:a7:3f:27:07:7e:37:dd:6e:80:e5:9a:20:
b8:08:5e:00:70:b7:18:2a:fb:61:aa:e6:69:69:0e:7c:70:17:
60:86:67:65:9b:f2:2f:04:e9:43:dc:a6:ce:97:ab:0a:e3:9b:
b0:3c:23:38:87:29:8f:e2:c6:29:ad:88:8b:2b:c1:8a:96:20:
ef:c0:1d:a5:2e:ec:71:aa:26:b4:ff:86:7a:aa:61:5f:29:9c:
3c:e5:08:a6:ca:73:83:3a:a5:bf:69:37:a5:64:ee:6e:4f:2c:
cd:5f:34:e7:7f:57:de:65:0d:84:85:5e:03:cb:c1:32:5d:41:
e1:8e:2d:0d:b7:6a:2e:f2:49:45:28:b0:e3:e0:d5:93:0c:12:
a6:3a:cc:35:fc:7c:bd:20:db:c5:fc:47:89:47:40:0d:44:48:
9c:32:14:de:63:07:f8:56:8a:fe:67:6a:f6:b2:66:99:c4:30:
f5:2c:0f:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJDQUMxMTAvBgNVBAUTKDlDQkUxMEQ3QzFERDQ0QjdFNTkwQjUwNzhCRkM0Rjg2
Q0Y4REIyNUEwHhcNMjUwNDE1MDM1MTQ4WhcNMjUwNDIyMDM1MTQ4WjAYMRYwFAYD
VQQDEw02N2ZkZDdkNC02NThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzIRRW2Xb3icRsVsmRNoiJFBSOP1R+vlIqb55eq3dRaFXjxwie+59d3dx2p7P
YiszHqs9z/KGO1MD0fQlEISwBIzrmL+EoCoU82mKEiuf+hpszEBa3lk5GSs/7p8+
J8d2mmAPfuSeYlxERPbcb74UdjtNnj1JBMcBHI5DQUbKZn+dgvoLfk3lYv1dweCK
kx4X4vFXti6x5OvBJPwPUamnac193sTXp8ttSnAg5I4jD92dCW/hMSH2vmBkDu98
K3Xtk9za6gNfhhDSa56/nr0N91GiFGcEZXAp3mZpxeN2gc1zr+bRzJWfssNAtIuw
wq2bo2gSVqoPRqLLQMGRtdDP4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJ7qdj+
YzvjWQ8YiOS5UmSO67dPMB8GA1UdIwQYMBaAFJy+ENfB3US35ZC1B4v8T4bPjbJa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNBQy8wMTUyMjU4RTgy
RjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJMZmxrTFVIaV94UGhzLU5z
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25MNFExOEhkUkxmbGtMVUhpX3hQaHMtTnNsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkNBQy8wMTUyMjU4RTgyRjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJM
ZmxrTFVIaV94UGhzLU5zbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7ExjtaIiqqU+4kxnnxf+q/ICxn184iYsCDPB0tYBDZmE6uV3l5Rqh
79InPS37+kscrolaCVBSHTEd6MIR0R0Knc17L0Yg9JHqAlyeDQKnPycHfjfdboDl
miC4CF4AcLcYKvthquZpaQ58cBdghmdlm/IvBOlD3KbOl6sK45uwPCM4hymP4sYp
rYiLK8GKliDvwB2lLuxxqia0/4Z6qmFfKZw85QimynODOqW/aTelZO5uTyzNXzTn
f1feZQ2EhV4Dy8EyXUHhji0Nt2ou8klFKLDj4NWTDBKmOsw1/Hy9INvF/EeJR0AN
REicMhTeYwf4Vor+Z2r2smaZxDD1LA/Y
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:57:43 2025 by rpki-client