Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
File: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft (raw, json)
Hash identifier: rUescnJ5nkrGYCkjB7AKMEa6cIh6ttPKc6mSluPSuSM=
Subject key identifier: 49:B7:56:B4:A2:B9:70:D8:78:AA:F7:5B:9B:2C:12:15:2E:FD:81:82
Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
Certificate issuer: /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Certificate serial: 03B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
Manifest number: 03AE
Signing time: Wed 09 Apr 2025 00:25:14 +0000
Manifest this update: Wed 09 Apr 2025 00:25:13 +0000
Manifest next update: Wed 16 Apr 2025 00:25:13 +0000
Files and hashes: 1: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl (hash: sansNE54zKSDjoDE/awm+blUSkLYqMH6FhtsjdWgGok=)
2: A3FBC4668A3511ECB4502D0DC4F9AE02.roa (hash: EHGFFNKYLhkroKhaSJxD35WEinaxk7mhvnsD4zQjF4g=)
3: 3A51C4061DF211ED95A51A3EC4F9AE02.roa (hash: h8JGD2TX2zCZAvoeCATDFLy5kT17CJ7zwhERt61Mof0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 00:25:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950 (0x3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136429
Validity
Not Before: Apr 9 00:25:13 2025 GMT
Not After : Apr 16 00:25:13 2025 GMT
Subject: CN=67f5be6a-bb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:46:f5:bb:43:ec:e2:e6:df:77:27:ae:90:df:
e1:a2:d1:85:4a:49:ac:c9:9e:7f:3a:e2:80:9a:1f:
15:54:7a:c3:3b:f3:20:ba:f1:69:2d:76:9f:0f:87:
cc:8c:db:29:f7:68:73:be:0a:b3:93:46:15:e4:64:
8e:3a:60:4a:af:93:15:63:fb:5c:2d:47:0f:7e:85:
18:06:f8:9e:ae:31:e9:21:7f:be:77:e9:4a:64:7f:
ca:5f:22:21:7c:64:d4:b9:5a:89:73:54:37:ef:9d:
aa:6e:ae:c2:82:f5:55:12:e8:2b:14:5c:73:0a:6b:
8b:76:72:1a:13:b8:e9:de:1d:89:1e:fa:8c:7d:c4:
ad:97:ea:45:3d:b5:de:5c:8c:31:29:66:2c:30:49:
04:9f:26:c6:7c:6b:9a:5d:6b:47:49:95:f6:15:b9:
76:cb:92:35:c6:74:54:8c:90:35:0c:a3:02:4a:02:
2f:cb:4b:91:03:1c:4a:ae:65:f2:d0:f9:4f:b1:28:
7a:0b:51:b0:7f:d0:9b:58:b5:b7:93:5c:ad:90:12:
1d:67:26:42:67:63:3c:94:e3:64:4c:09:33:92:c7:
85:ba:e5:1b:b8:be:e4:0c:0b:d9:9f:78:32:46:91:
55:0c:10:48:04:c5:d4:df:bd:aa:f4:d0:fa:c6:6f:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B7:56:B4:A2:B9:70:D8:78:AA:F7:5B:9B:2C:12:15:2E:FD:81:82
X509v3 Authority Key Identifier:
keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d2:ff:03:d2:05:7b:1a:cc:08:ac:63:20:af:d0:ae:7a:c6:
d7:c0:9a:9a:83:ab:01:47:e2:3e:76:ca:ab:2e:ae:b0:27:b7:
4d:d9:de:5d:0f:a8:2a:25:8f:ed:60:49:97:84:7f:5c:cb:e6:
1f:0b:a0:31:d5:e8:a4:5b:41:0d:76:51:65:56:02:8c:a6:c5:
44:ff:da:1d:6d:ec:93:a9:fc:60:44:0b:b8:6d:f7:39:54:dd:
e9:2d:26:28:f7:b8:b6:29:52:40:1c:21:c9:a4:65:c6:f9:f2:
98:46:d8:33:fa:cd:ba:fa:02:39:7d:c7:de:30:71:66:d1:a3:
b3:cd:51:63:e5:be:c0:b1:ca:28:1b:da:eb:a4:2b:a1:75:d8:
f2:00:cc:c0:03:a9:76:1d:ad:48:ea:8e:d9:81:b8:33:c4:07:
a3:d2:e2:e5:cb:aa:dc:ba:c0:ef:24:46:52:46:fc:89:7d:c9:
d5:40:d3:a9:52:86:af:6f:94:b2:94:94:78:a2:78:58:3d:eb:
6f:a9:58:df:ff:65:c2:16:84:92:c6:5a:96:ad:0c:ec:4a:b1:
0f:ec:79:38:a7:00:d6:50:03:8f:7a:c5:f0:9c:78:8e:7e:cf:
b3:3d:ae:99:41:ce:75:c2:f3:b6:2d:bf:58:cf:4e:f4:9b:93:
5c:4a:3a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:18:26 2025 by rpki-client