Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json)
Hash identifier: wj3R59K3/ExMzhWeWMEvkTzsuXzaG0ii/xV03NP8Ijg=
Subject key identifier: 9E:7B:70:7D:ED:74:A8:B1:66:5D:4B:EB:D2:52:26:3C:71:22:6E:C8
Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
Manifest number: 64
Signing time: Sun 13 Apr 2025 05:47:27 +0000
Manifest this update: Sun 13 Apr 2025 05:47:26 +0000
Manifest next update: Sun 20 Apr 2025 05:47:26 +0000
Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: ZDyxcAKjKpK4G19IDe6tpMxfrG2Vyu1hZVmNLccLzVY=)
2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: 8wQaCvv1woKjsPYKk6t73PO7JjxXLb0AQ69vXhKv7NA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 05:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Validity
Not Before: Apr 13 05:47:26 2025 GMT
Not After : Apr 20 05:47:26 2025 GMT
Subject: CN=67fb4fee-d1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:da:82:eb:bf:ec:8b:6f:3f:3f:d0:34:d0:
ed:49:42:69:27:ea:27:97:98:9c:8d:21:f1:a7:56:
69:0e:f1:8a:b3:49:94:8f:bc:be:b3:52:07:de:3e:
1f:9f:54:b7:93:ef:58:bc:ff:87:27:6f:18:dd:0e:
01:ec:e2:02:2f:ec:56:a4:df:ad:dc:15:1e:94:02:
72:00:19:37:c7:c2:f6:a1:59:d3:a0:1a:36:97:69:
be:e2:09:85:48:93:89:28:b9:9d:8f:ba:bc:8b:11:
45:4f:a5:26:26:79:22:a6:f1:d2:18:a0:c4:92:be:
08:6e:21:d6:b5:a6:31:6a:ae:ee:78:7c:c6:71:d9:
c7:8b:c4:15:d2:51:eb:e9:21:28:8f:12:5a:6b:33:
53:45:0e:c7:ff:0c:4c:70:b6:3b:44:e6:35:f5:90:
cb:be:95:88:61:a3:b4:f3:94:cb:f8:39:97:53:9e:
f3:7f:34:48:52:ba:d8:a0:22:14:95:6a:57:8a:38:
2c:ba:7b:3f:9c:4e:7e:6b:ae:1e:e9:ca:db:8f:24:
da:5f:54:28:1d:a6:15:20:3d:85:66:cd:6a:c7:7a:
e7:16:5a:01:1b:92:ea:fc:92:64:66:79:91:33:e1:
90:73:3e:7a:25:9b:c2:71:12:d1:0d:52:58:e8:4f:
62:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7B:70:7D:ED:74:A8:B1:66:5D:4B:EB:D2:52:26:3C:71:22:6E:C8
X509v3 Authority Key Identifier:
keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:e3:b2:b6:3f:74:f8:7e:9c:82:38:f0:1b:2c:91:df:3e:66:
4e:07:17:2a:09:61:e7:cc:c6:aa:f0:5c:37:0a:61:4c:6f:ff:
1f:1d:a0:2f:6b:f6:df:0a:97:d2:a3:8f:5b:cb:49:34:75:14:
69:43:78:da:dc:39:ae:c3:28:1b:15:1a:63:63:7d:ef:ea:19:
b5:13:82:24:e8:58:5c:fb:62:da:8b:fe:61:df:be:37:fb:5e:
90:d2:a4:56:e8:09:01:b8:d3:3d:49:56:98:aa:de:85:d0:e1:
7a:fc:43:40:44:8c:88:d2:14:8d:11:d6:39:e9:4f:c4:e7:cf:
6c:72:07:cd:fb:e6:d9:fa:70:92:1b:5d:69:f8:d7:9f:41:49:
36:7d:e4:47:fe:ba:8a:fe:db:7d:ce:0b:c0:0e:f0:c5:2e:d2:
0b:cb:e7:74:15:f2:92:54:f5:3d:3c:e6:7d:66:84:c8:f9:b9:
47:e1:22:61:eb:b7:92:74:ea:cd:da:e4:aa:f7:43:10:7a:53:
1e:c5:0d:be:50:b2:af:c2:d1:ee:00:1a:d2:b9:72:b4:a0:34:
59:f5:f6:fb:59:b0:fc:3f:a9:a3:2f:3f:be:e1:23:48:8b:48:
f4:9a:03:90:4a:d1:4b:8c:79:54:77:0c:25:03:5d:c4:35:01:
69:30:7e:9c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MTIwQTExMC8GA1UEBRMoODlENzc5QzUwRjE0RUQxMUZDNUFEQjg0MDM3ODkyQjI2
MEI5OTVFNjAeFw0yNTA0MTMwNTQ3MjZaFw0yNTA0MjAwNTQ3MjZaMBgxFjAUBgNV
BAMTDTY3ZmI0ZmVlLWQxZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6TtqC67/si28/P9A00O1JQmkn6ieXmJyNIfGnVmkO8YqzSZSPvL6zUgfePh+f
VLeT71i8/4cnbxjdDgHs4gIv7Fak363cFR6UAnIAGTfHwvahWdOgGjaXab7iCYVI
k4kouZ2PuryLEUVPpSYmeSKm8dIYoMSSvghuIda1pjFqru54fMZx2ceLxBXSUevp
ISiPElprM1NFDsf/DExwtjtE5jX1kMu+lYhho7TzlMv4OZdTnvN/NEhSutigIhSV
aleKOCy6ez+cTn5rrh7pytuPJNpfVCgdphUgPYVmzWrHeucWWgEbkur8kmRmeZEz
4ZBzPnolm8JxEtENUljoT2JRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnntwfe10
qLFmXUvr0lImPHEibsgwHwYDVR0jBBgwFoAUidd5xQ8U7RH8WtuEA3iSsmC5leYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMjBBLzgyOUE3NEE4ODZG
MzExRUZCRTAyNTM2QkM0RjlBRTAyL2lkZDV4UThVN1JIOFd0dUVBM2lTc21DNWxl
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaWRkNXhROFU3Ukg4V3R1RUEzaVNzbUM1bGVZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx
MjBBLzgyOUE3NEE4ODZGMzExRUZCRTAyNTM2QkM0RjlBRTAyL2lkZDV4UThVN1JI
OFd0dUVBM2lTc21DNWxlWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGHjsrY/dPh+nII48Bsskd8+Zk4HFyoJYefMxqrwXDcKYUxv/x8doC9r
9t8Kl9Kjj1vLSTR1FGlDeNrcOa7DKBsVGmNjfe/qGbUTgiToWFz7YtqL/mHfvjf7
XpDSpFboCQG40z1JVpiq3oXQ4Xr8Q0BEjIjSFI0R1jnpT8Tnz2xyB8375tn6cJIb
XWn4159BSTZ95Ef+uor+233OC8AO8MUu0gvL53QV8pJU9T085n1mhMj5uUfhImHr
t5J06s3a5Kr3QxB6Ux7FDb5Qsq/C0e4AGtK5crSgNFn19vtZsPw/qaMvP77hI0iL
SPSaA5BK0UuMeVR3DCUDXcQ1AWkwfpw=
-----END CERTIFICATE-----
Generated at Mon Apr 14 04:06:40 2025 by rpki-client