Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
File: dRH-79yX09DgVRW7QMF431FGqcQ.mft (raw, json)
Hash identifier: 1APKncM9ZGlHq8Qa8i/dSa5R5AAEk64VFhMbV7qjOeQ=
Subject key identifier: 51:9D:F4:E7:22:DA:14:A1:5A:C6:A0:95:F6:BE:29:0B:BE:75:B9:4E
Authority key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4
Certificate issuer: /CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4
Certificate serial: 0E49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
Manifest number: 0E37
Signing time: Sat 12 Apr 2025 17:42:09 +0000
Manifest this update: Sat 12 Apr 2025 17:42:08 +0000
Manifest next update: Sat 19 Apr 2025 17:42:08 +0000
Files and hashes: 1: dRH-79yX09DgVRW7QMF431FGqcQ.crl (hash: PzsDwI3DuSSduhAL+AfmMFkaY8+2HQvGWvB+njPg3nc=)
2: 251E7880A1FA11E9AF723E1BC4F9AE02.roa (hash: fpeKB2QHI1uWHCoYD8BitgZ5PPyuSxcH4PwOIiEgEHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl
rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 17:42:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3657 (0xe49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131F8A, serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4
Validity
Not Before: Apr 12 17:42:08 2025 GMT
Not After : Apr 19 17:42:08 2025 GMT
Subject: CN=67faa5f1-068c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bb:f3:4c:a9:a4:63:4c:6c:b9:61:12:fa:ce:
45:08:b4:41:d2:d5:d6:46:37:27:84:b8:23:5f:cd:
87:9e:ac:bf:8c:e0:dd:b9:79:8a:5d:13:6f:9c:e6:
11:eb:44:7c:a3:9a:a9:19:d4:65:e3:28:f1:b4:d3:
15:2f:fc:6d:f4:9c:fd:ab:8d:92:b2:29:fd:5a:b0:
92:4f:80:c3:b4:14:ea:08:05:3e:5c:1e:a8:fa:0f:
21:3c:31:fa:b6:9c:76:48:b1:1e:79:24:5a:0f:01:
cf:0b:96:8a:95:04:bd:99:59:d3:b4:bf:03:94:1e:
0a:21:72:26:0f:d5:86:bf:ef:c7:f9:bd:74:07:38:
fa:60:a1:55:2f:2c:46:72:97:6f:86:1c:d6:0e:19:
a6:3a:fe:27:a6:e7:b1:56:42:e6:3e:61:5f:dd:61:
fd:3b:32:3e:f5:c7:75:7b:a9:8d:ff:c5:77:78:7d:
46:e0:fe:72:97:53:49:30:c8:f3:40:06:f4:81:d9:
a5:9b:b8:22:29:ea:ff:ee:a3:9b:87:fa:2e:4e:14:
ef:ca:5d:5f:b1:6b:1c:fc:e0:17:f8:2b:73:2d:1f:
2a:57:20:45:7f:b5:e7:58:a6:00:24:a0:d2:3f:65:
33:c8:11:23:94:db:02:05:53:1d:ed:6a:4a:8d:56:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9D:F4:E7:22:DA:14:A1:5A:C6:A0:95:F6:BE:29:0B:BE:75:B9:4E
X509v3 Authority Key Identifier:
keyid:75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6d:75:5a:8f:c6:81:de:a1:14:1d:ef:c5:ab:7d:39:e8:38:
69:11:b6:bc:99:7f:92:6f:8b:21:93:84:f7:ed:2b:d0:f5:70:
bd:21:56:20:dd:1d:bd:75:d1:8a:69:6a:92:de:bb:2c:ce:74:
00:42:f0:23:08:71:81:74:7e:84:2f:b9:37:72:3d:19:39:13:
a9:41:ce:7f:3c:d2:a7:f5:f1:25:5f:48:9c:0c:fe:aa:eb:e3:
c7:8f:48:99:1d:27:54:9f:80:9d:d2:c8:b1:50:79:bb:1c:e8:
84:27:f9:bf:5e:8c:8a:3b:6f:1d:fa:be:ef:00:3e:af:2a:84:
3a:f4:51:67:9c:c3:62:30:6a:6f:08:e9:15:dd:06:c5:22:40:
bf:cb:2b:cb:8c:42:17:09:fc:f8:5c:37:f3:37:2c:8c:b2:ae:
36:a2:b1:a3:4c:05:14:4f:f6:7b:24:57:0f:58:b0:1f:67:bb:
3b:98:c3:bf:87:8f:46:93:ac:c3:24:c2:34:ae:d6:ab:31:6e:
a5:df:5b:df:78:29:9d:4b:47:f3:12:a2:dd:be:d6:2d:17:3b:
53:04:cf:96:c8:e2:a5:c0:07:0e:95:00:f3:85:4d:92:88:19:
f0:13:82:4b:bb:88:10:d0:36:43:7e:4e:b5:3d:86:f3:ce:b6:
f5:53:14:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzFGOEExMTAvBgNVBAUTKDc1MTFGRUVGREM5N0QzRDBFMDU1MTVCQjQwQzE3OERG
NTE0NkE5QzQwHhcNMjUwNDEyMTc0MjA4WhcNMjUwNDE5MTc0MjA4WjAYMRYwFAYD
VQQDEw02N2ZhYTVmMS0wNjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAorvzTKmkY0xsuWES+s5FCLRB0tXWRjcnhLgjX82Hnqy/jODduXmKXRNvnOYR
60R8o5qpGdRl4yjxtNMVL/xt9Jz9q42Ssin9WrCST4DDtBTqCAU+XB6o+g8hPDH6
tpx2SLEeeSRaDwHPC5aKlQS9mVnTtL8DlB4KIXImD9WGv+/H+b10Bzj6YKFVLyxG
cpdvhhzWDhmmOv4npuexVkLmPmFf3WH9OzI+9cd1e6mN/8V3eH1G4P5yl1NJMMjz
QAb0gdmlm7giKer/7qObh/ouThTvyl1fsWsc/OAX+CtzLR8qVyBFf7XnWKYAJKDS
P2UzyBEjlNsCBVMd7WpKjVZSTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGd9Oci
2hShWsaglfa+KQu+dblOMB8GA1UdIwQYMBaAFHUR/u/cl9PQ4FUVu0DBeN9RRqnE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUY4QS80MTI3Q0UzRUEx
RjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5RGdWUlc3UU1GNDMxRkdx
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RSSC03OXlYMDlEZ1ZSVzdRTUY0MzFGR3FjUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MUY4QS80MTI3Q0UzRUExRjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5
RGdWUlc3UU1GNDMxRkdxY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBcbXVaj8aB3qEUHe/Fq3056DhpEba8mX+Sb4shk4T37SvQ9XC9IVYg
3R29ddGKaWqS3rssznQAQvAjCHGBdH6EL7k3cj0ZOROpQc5/PNKn9fElX0icDP6q
6+PHj0iZHSdUn4Cd0sixUHm7HOiEJ/m/XoyKO28d+r7vAD6vKoQ69FFnnMNiMGpv
COkV3QbFIkC/yyvLjEIXCfz4XDfzNyyMsq42orGjTAUUT/Z7JFcPWLAfZ7s7mMO/
h49Gk6zDJMI0rtarMW6l31vfeCmdS0fzEqLdvtYtFztTBM+WyOKlwAcOlQDzhU2S
iBnwE4JLu4gQ0DZDfk61PYbzzrb1UxSb
-----END CERTIFICATE-----
Generated at Mon Apr 14 09:10:16 2025 by rpki-client