Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
File: RCHzqdfkHW9Ht4b90-eojeQrB7k.mft (raw, json)
Hash identifier: voitFWSEkFlz6d15pL6NQcc2V5XD4IzY3+sJNS992MU=
Subject key identifier: EA:54:29:4E:A0:B5:E1:AC:FC:B1:02:71:07:C7:7D:E5:53:22:81:79
Authority key identifier: 44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9
Certificate issuer: /CN=A913442A/serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9
Certificate serial: 0290
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
Manifest number: 028C
Signing time: Wed 09 Apr 2025 01:15:27 +0000
Manifest this update: Wed 09 Apr 2025 01:15:26 +0000
Manifest next update: Wed 16 Apr 2025 01:15:26 +0000
Files and hashes: 1: RCHzqdfkHW9Ht4b90-eojeQrB7k.crl (hash: S9p8t7AgvZDW3CGjtk3EgbdByTgTr3kgvKeWWy4QSeY=)
2: 0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa (hash: 5LtQSX5vsNltnL8EwaCWb4W4bCqyFzBXrqfQ3KUZW5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl
rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 01:15:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913442A
Validity
Not Before: Apr 9 01:15:26 2025 GMT
Not After : Apr 16 01:15:26 2025 GMT
Subject: CN=67f5ca2f-3317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:6e:19:42:cb:52:ee:03:42:08:20:38:29:
87:24:78:21:04:22:0a:aa:30:c2:39:54:15:38:83:
3f:03:88:81:21:6d:0a:cf:0a:72:a1:30:46:20:1a:
63:b1:9f:bb:aa:20:8d:71:17:71:b0:f2:e3:63:a3:
ce:ab:d6:58:23:02:c0:be:33:bb:98:5e:b8:38:23:
47:92:a8:bf:43:26:3e:e5:9c:e4:25:97:d6:ca:47:
a7:6b:0f:b6:24:a5:fb:4f:1b:f5:fa:46:05:89:18:
1d:a8:99:c2:d2:7a:23:2c:a6:4b:be:18:43:9e:d4:
64:9a:89:93:13:28:09:43:e2:75:8a:d7:bb:c1:b9:
54:67:e9:5e:ca:dd:c1:15:62:d3:13:0d:b1:d5:72:
cf:21:28:27:2a:65:80:2a:f3:79:e1:85:d1:ec:32:
2c:aa:21:68:57:3e:6b:78:8e:9a:9d:b9:dc:37:f6:
71:95:74:2a:db:30:19:56:79:65:0e:b3:1e:af:83:
39:21:87:a1:10:31:c4:97:63:fd:67:b4:f5:41:a5:
69:68:1b:46:3d:75:b4:57:94:c8:48:9a:bb:b2:61:
f4:41:08:91:34:c5:a0:1c:53:6e:d4:19:6f:64:f2:
86:0b:7e:42:e5:3d:f6:d3:ed:da:e4:c6:58:44:2e:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:54:29:4E:A0:B5:E1:AC:FC:B1:02:71:07:C7:7D:E5:53:22:81:79
X509v3 Authority Key Identifier:
keyid:44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:87:b9:11:28:c0:3d:86:4a:40:2f:76:09:25:ef:4c:04:ec:
45:ee:24:7c:f8:cf:1f:27:46:2b:af:b2:fb:91:51:8d:33:47:
98:c9:6a:cb:42:fb:e8:1a:84:82:62:1c:cf:03:82:a4:46:9d:
1f:5f:41:b7:c1:ee:e5:5f:7e:ec:3f:65:36:01:dc:c6:66:52:
8c:c9:1b:15:cf:59:7d:8f:5a:fa:95:0d:fd:47:6e:70:62:a9:
d0:bf:53:0f:d9:8b:cc:b6:bb:4d:d6:42:c8:bc:e3:54:9e:89:
24:23:ec:ba:de:fb:ce:f8:7b:27:43:0a:24:a5:d7:4f:b4:5d:
b3:13:3a:d9:5e:68:27:8c:3d:b0:84:6b:9c:07:a6:53:4c:5c:
67:16:2c:70:fa:f7:e1:b9:74:01:64:2e:af:7c:01:b2:e1:32:
82:6f:a5:da:a9:0e:d5:e8:c5:ff:5c:ed:11:3c:63:09:34:4a:
f6:4d:35:70:8a:a8:64:72:d3:29:06:52:f9:37:94:e3:84:27:
13:ec:53:ee:c0:63:72:ef:88:4a:6d:b8:d0:08:38:9f:85:ca:
90:df:a5:7f:1b:ca:58:f2:89:0c:97:c0:3b:89:16:90:69:19:
e6:68:64:76:ea:16:a9:28:8a:af:b7:dd:a7:6f:3c:64:a2:88:
e4:19:be:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:38:42 2025 by rpki-client