Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft
File: xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft (raw, json)
Hash identifier: 7BHtEKlykGheE7k3KTfKg7a9Y2CmarVI6SuBTvyNqIw=
Subject key identifier: 64:77:D7:F7:FE:22:D8:59:E5:1A:62:62:EE:3B:A0:55:66:30:FB:C4
Authority key identifier: C4:D2:6A:C0:6C:8A:65:25:8A:D4:49:1B:69:DF:83:29:0B:E1:83:7B
Certificate issuer: /CN=A9132DC8/serialNumber=C4D26AC06C8A65258AD4491B69DF83290BE1837B
Certificate serial: 016D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNJqwGyKZSWK1Ekbad-DKQvhg3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft
Manifest number: 016A
Signing time: Wed 09 Apr 2025 02:50:54 +0000
Manifest this update: Wed 09 Apr 2025 02:50:54 +0000
Manifest next update: Wed 16 Apr 2025 02:50:54 +0000
Files and hashes: 1: xNJqwGyKZSWK1Ekbad-DKQvhg3s.crl (hash: tYkrSic+SrD9PyTa70OhdCE3yjAqetT8rFL3jeKELlo=)
2: 59AFB718ECB911ED99732649C4F9AE02.roa (hash: +N1Z+YRZBmqUzAg48fb4th5gmmSesIwu/VfApSVKW6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.crl
rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNJqwGyKZSWK1Ekbad-DKQvhg3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 02:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132DC8
Validity
Not Before: Apr 9 02:50:54 2025 GMT
Not After : Apr 16 02:50:54 2025 GMT
Subject: CN=67f5e08e-5315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:18:bd:6d:9d:85:93:14:b3:cc:77:d1:26:
83:87:36:bd:1a:4b:a7:8b:2f:67:a9:39:19:9a:9c:
8b:72:7f:b0:2e:a5:b0:79:d4:4f:9d:e3:f9:42:bf:
a9:8c:82:31:67:65:72:17:01:3c:34:c2:5f:92:5b:
da:d4:92:0f:eb:8b:39:45:fc:ae:1e:61:1c:b2:0e:
24:91:1c:52:1f:87:62:15:3c:67:67:d1:95:ce:6a:
83:32:30:6e:1b:66:82:b7:f2:9e:eb:47:b0:d9:59:
62:17:5c:38:ce:56:b5:f4:83:44:b8:d8:a2:fc:0d:
96:72:0a:1b:b3:60:3c:f1:b6:b8:67:ed:4d:e5:6e:
5c:95:14:4f:20:db:9f:53:9e:f8:c7:e7:41:f6:79:
da:00:55:81:f7:18:fc:92:c0:4f:9a:36:27:bc:42:
01:ed:d5:93:a5:8f:e1:2b:6a:ec:8c:96:81:80:75:
6b:10:15:61:83:0b:79:3a:ed:44:ad:de:ab:7c:28:
e2:a9:33:38:ba:65:ab:36:4d:01:58:2f:20:0d:d2:
39:08:23:2e:cc:ac:59:84:92:12:bf:e9:a9:fc:28:
dc:c7:6f:03:94:3a:dc:bf:47:cf:bd:b4:9a:a7:34:
2d:28:25:cb:30:55:1e:d9:d5:e1:e7:92:93:1d:f2:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:77:D7:F7:FE:22:D8:59:E5:1A:62:62:EE:3B:A0:55:66:30:FB:C4
X509v3 Authority Key Identifier:
keyid:C4:D2:6A:C0:6C:8A:65:25:8A:D4:49:1B:69:DF:83:29:0B:E1:83:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNJqwGyKZSWK1Ekbad-DKQvhg3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:e6:bd:7c:3f:73:c3:d8:aa:bb:4e:45:7e:4b:18:9a:ec:9c:
d9:59:b9:a8:41:5d:39:63:04:19:ab:47:c8:a0:84:3c:d1:aa:
15:aa:c7:a8:4d:0b:14:1b:c8:27:07:b2:26:a6:6b:b9:72:60:
67:50:e1:c3:4c:ed:8b:f1:e1:67:39:c8:04:47:d1:cc:13:85:
9d:95:58:e7:4b:12:62:71:d3:bb:62:f3:b3:13:04:0a:dc:38:
a3:59:65:23:45:97:df:da:3a:c3:3e:f2:8b:5b:7c:7e:35:e1:
cb:85:2b:49:bf:91:f9:8e:18:0f:7f:f4:7d:c9:5f:99:25:84:
71:56:48:3b:3c:78:e3:17:cf:c6:0e:76:6f:1d:a9:92:81:bf:
2f:8b:2b:09:8f:a7:20:5e:51:d6:f3:d2:8f:51:16:b1:87:4c:
e0:3c:dd:6d:76:e5:21:49:61:2b:46:71:9a:de:5b:61:60:e5:
90:c5:4c:27:4c:94:95:41:ce:a1:59:7b:a2:79:9f:94:ce:19:
09:bd:64:4e:24:60:54:dd:00:19:dc:bb:a4:64:c2:93:ec:e9:
7e:8b:3e:e1:8f:aa:42:86:41:3c:e6:1b:20:e2:41:6e:61:f3:
95:b3:87:f8:75:dd:46:5e:d9:d8:f0:2c:84:cc:b1:d6:12:b8:
7d:be:73:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:59:22 2025 by rpki-client