Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
File: 86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json)
Hash identifier: doxWqhUcvTch4k1TrguEbKdzYvWdDMGutSshhb5pTJ4=
Subject key identifier: 60:55:67:90:88:77:40:EE:B4:5D:A8:6A:AD:57:D4:C5:5F:F3:70:7D
Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C
Certificate issuer: /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C
Certificate serial: 01C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
Manifest number: 01C0
Signing time: Sun 13 Apr 2025 01:59:15 +0000
Manifest this update: Sun 13 Apr 2025 01:59:14 +0000
Manifest next update: Sun 20 Apr 2025 01:59:14 +0000
Files and hashes: 1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: vrZRHim6Xuxkgjic1bmXXutjGgMRhberuv876b4MYBw=)
2: C7E21B026AED11ED97121F2BC4F9AE02.roa (hash: qsaIGRiFRWstbJ88ir6bwAs/8uMjkIf/J02kliFht7Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl
rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 01:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135395, serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C
Validity
Not Before: Apr 13 01:59:14 2025 GMT
Not After : Apr 20 01:59:14 2025 GMT
Subject: CN=67fb1a72-14bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:aa:2d:60:ea:9e:8c:8d:6c:5b:5b:86:7c:
be:0a:f2:c5:b3:03:4d:9c:5a:7d:09:db:04:75:29:
b1:ec:b5:a5:e7:21:70:42:04:75:01:a4:6d:eb:77:
6e:d7:bf:2f:8d:33:22:bd:7b:17:4a:89:13:22:c5:
6e:41:c0:f2:a4:98:da:7c:a9:e5:61:11:01:d5:0b:
5b:8a:ed:3c:26:94:34:fe:85:c7:4a:94:1e:ee:f4:
a3:be:b1:52:a3:f4:fc:fa:78:0f:fc:f7:ef:7d:ed:
0b:c0:ab:e5:1b:88:1a:e1:7d:07:f4:89:03:ef:72:
f1:bb:82:31:f6:48:be:45:7e:0c:87:e7:70:b3:8e:
5e:9c:5a:7a:7a:5d:40:81:d9:61:80:ee:e2:a0:a8:
94:7b:18:36:61:55:99:2a:0a:00:c9:03:5b:67:48:
d3:8b:89:48:0c:ae:23:ba:1b:3f:96:75:11:8b:a2:
f1:5b:36:d3:71:a2:62:30:fa:62:d2:89:a7:89:b0:
30:5b:ed:cc:e6:da:ea:2e:94:06:87:01:45:78:86:
0b:eb:9e:27:46:eb:83:26:60:36:a8:08:13:f9:f3:
33:cb:9d:89:0b:1a:f6:77:06:05:73:47:bc:0b:05:
b5:ef:0e:ce:12:26:28:3e:02:36:44:4b:53:82:e8:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:55:67:90:88:77:40:EE:B4:5D:A8:6A:AD:57:D4:C5:5F:F3:70:7D
X509v3 Authority Key Identifier:
keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:55:ad:48:7a:a9:1e:fa:e3:0f:ae:d8:b7:d9:21:f2:ae:f7:
42:96:c3:d3:bf:fa:f9:c3:d5:12:07:1b:6d:e5:ac:df:52:f9:
51:72:ac:65:d9:a0:bd:66:c2:f0:66:d9:9a:9a:3d:c9:5e:3d:
39:14:5e:57:1b:b4:e2:4e:8f:49:a4:c4:0d:69:bb:11:2d:1c:
e7:1b:46:a3:70:74:16:15:be:b8:ce:50:f8:97:2f:fc:0e:fa:
56:0a:ca:21:0a:70:76:8b:72:e2:0e:b3:2e:b0:b0:07:7d:9d:
15:5d:e0:07:b6:e8:f5:c7:d8:75:4f:c8:88:74:e9:23:60:e9:
5f:40:c0:9d:77:04:00:79:03:29:eb:5d:35:64:e7:7f:fb:6a:
31:f6:7f:27:8f:d2:62:98:bb:cb:d3:2c:94:bf:ae:a7:b1:6f:
dc:17:54:49:ef:93:52:9e:a7:81:5c:f1:8e:9e:dc:0f:74:20:
e6:b3:e5:76:bb:0a:f8:98:f8:3e:2c:a6:4f:e7:0f:85:02:ff:
02:b6:6f:8d:a0:cc:43:0b:18:b7:69:c6:21:f5:9d:34:96:f6:
5e:27:91:04:97:55:50:64:3e:e9:93:b2:52:48:4d:09:95:02:
1e:e2:79:91:5e:bc:ee:21:84:ab:0a:e9:e7:11:30:6f:40:34:
6e:67:9f:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzUzOTUxMTAvBgNVBAUTKEYzQTBENzJENjMzMEQ3MjE1NkEwMEQ5RjQ2RUFCMEM5
RkM5M0JDOEMwHhcNMjUwNDEzMDE1OTE0WhcNMjUwNDIwMDE1OTE0WjAYMRYwFAYD
VQQDEw02N2ZiMWE3Mi0xNGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuGmqLWDqnoyNbFtbhny+CvLFswNNnFp9CdsEdSmx7LWl5yFwQgR1AaRt63du
178vjTMivXsXSokTIsVuQcDypJjafKnlYREB1Qtbiu08JpQ0/oXHSpQe7vSjvrFS
o/T8+ngP/Pfvfe0LwKvlG4ga4X0H9IkD73Lxu4Ix9ki+RX4Mh+dws45enFp6el1A
gdlhgO7ioKiUexg2YVWZKgoAyQNbZ0jTi4lIDK4juhs/lnURi6LxWzbTcaJiMPpi
0omnibAwW+3M5trqLpQGhwFFeIYL654nRuuDJmA2qAgT+fMzy52JCxr2dwYFc0e8
CwW17w7OEiYoPgI2REtTguhZYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBVZ5CI
d0DutF2oaq1X1MVf83B9MB8GA1UdIwQYMBaAFPOg1y1jMNchVqANn0bqsMn8k7yM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTM5NS81N0UxRDE4NDZB
RTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5RldvQTJmUnVxd3lmeVR2
SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg2RFhMV013MXlGV29BMmZSdXF3eWZ5VHZJdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTM5NS81N0UxRDE4NDZBRTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5
RldvQTJmUnVxd3lmeVR2SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBAVa1Ieqke+uMPrti32SHyrvdClsPTv/r5w9USBxtt5azfUvlRcqxl
2aC9ZsLwZtmamj3JXj05FF5XG7TiTo9JpMQNabsRLRznG0ajcHQWFb64zlD4ly/8
DvpWCsohCnB2i3LiDrMusLAHfZ0VXeAHtuj1x9h1T8iIdOkjYOlfQMCddwQAeQMp
6101ZOd/+2ox9n8nj9JimLvL0yyUv66nsW/cF1RJ75NSnqeBXPGOntwPdCDms+V2
uwr4mPg+LKZP5w+FAv8Ctm+NoMxDCxi3acYh9Z00lvZeJ5EEl1VQZD7pk7JSSE0J
lQIe4nmRXrzuIYSrCunnETBvQDRuZ5/n
-----END CERTIFICATE-----
Generated at Mon Apr 14 14:34:06 2025 by rpki-client