Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
File: 5G6s3CFDhcFCA0Z05Gxo57vilSU.mft (raw, json)
Hash identifier: vydIWYzNwDyXxQUbAnS7k0GQtkHlDqmF4wesoa9Q3BM=
Subject key identifier: 24:BF:23:96:95:7F:DB:7D:F0:E3:29:7E:A0:F7:65:EB:8A:F6:B8:F2
Authority key identifier: E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25
Certificate issuer: /CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525
Certificate serial: BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
Manifest number: BB
Signing time: Thu 17 Apr 2025 04:46:47 +0000
Manifest this update: Thu 17 Apr 2025 04:46:46 +0000
Manifest next update: Thu 24 Apr 2025 04:46:46 +0000
Files and hashes: 1: 5G6s3CFDhcFCA0Z05Gxo57vilSU.crl (hash: ouCwSmv6gON8i6pd/H4WdlVku9W1WHmogpZooR2E0iY=)
2: 44B42A0EFDE511EEAD5A6432C4F9AE02.roa (hash: N/lCfyLCfQ6pGJZnFWlWQxmi4U70D1DfmNioR3drqK8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl
rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Apr 2025 04:46:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91372E6, serialNumber=E46EACDC214385C142034674E46C68E7BBE29525
Validity
Not Before: Apr 17 04:46:46 2025 GMT
Not After : Apr 24 04:46:46 2025 GMT
Subject: CN=680087b7-4d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:bf:78:26:e9:58:c1:98:68:88:2e:73:59:
d7:23:d1:2f:5a:80:7a:b2:d7:6d:db:28:d1:3e:7e:
61:c7:32:e0:aa:1f:f2:45:fc:2f:ae:2e:1a:91:d7:
c1:2f:91:31:4d:16:7d:b3:bd:02:38:4e:95:5d:4a:
cb:59:8e:59:01:b8:a4:73:c3:1a:82:fe:1d:43:b9:
31:a7:b4:e3:ed:9a:ef:15:21:08:9a:5e:8d:56:ca:
fc:79:0f:18:7e:ff:f9:99:6e:7f:ef:8f:6d:5d:68:
ca:fc:09:87:b4:35:c9:33:7b:e5:33:0b:82:d0:63:
64:86:e7:a3:aa:a8:ba:97:50:f9:04:0b:e2:6a:50:
94:8b:f7:11:2d:28:7c:a5:f9:2c:07:c5:a0:31:29:
f6:32:5a:7a:39:86:ab:4b:e2:80:54:b5:a6:3e:8f:
2e:e6:7e:ae:94:7f:a0:c9:68:3a:29:4d:91:d1:97:
20:26:75:e9:a3:9b:e5:c0:31:20:f3:0a:71:f1:df:
4d:08:11:aa:1f:9b:77:ba:4b:33:63:4d:6b:9b:5e:
de:27:a8:dc:61:f2:86:09:96:7b:34:e4:b3:ec:71:
a7:ea:bc:54:c9:c2:0c:44:4f:58:53:09:5c:3b:51:
38:51:f7:e6:be:2b:d3:50:dc:82:9d:fb:c5:15:1e:
0a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BF:23:96:95:7F:DB:7D:F0:E3:29:7E:A0:F7:65:EB:8A:F6:B8:F2
X509v3 Authority Key Identifier:
keyid:E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ca:90:3f:0d:98:74:a7:90:41:ad:55:aa:2b:3e:43:5a:a3:
ee:f2:a3:48:26:cf:9d:91:fb:ba:be:e3:f7:e0:25:f1:eb:9e:
94:e4:36:79:50:94:c8:63:5b:7c:5b:bc:ca:bd:8c:02:dd:87:
1b:d2:70:94:bd:4a:7a:f6:b2:e7:97:35:76:32:71:19:4f:fe:
88:c3:5f:36:f2:51:6a:84:6a:39:e8:30:d9:ba:54:cb:fe:f4:
c8:be:21:60:3e:73:78:44:fd:6f:1a:24:f4:11:b8:9e:a1:fe:
f3:f3:a1:ca:28:06:24:79:a5:3e:8a:03:5d:7b:f4:d9:0f:78:
c7:51:15:99:c0:7f:dc:f8:6b:54:b2:a6:22:40:8f:db:1c:40:
3a:0d:a5:bf:ba:97:ff:db:5b:05:25:d4:f8:0e:0f:a4:e1:f2:
df:fd:96:7f:db:75:d6:bc:20:0b:9e:c7:85:2c:6b:ec:ba:37:
1b:03:a1:07:9f:18:46:ce:6c:84:d2:be:55:b2:44:4d:fc:58:
24:01:86:75:9d:54:1d:66:b6:4b:ce:f4:a4:a9:47:d9:87:1a:
dd:08:4b:95:8d:fc:41:f3:6d:1f:de:92:ab:d9:02:d5:0e:2b:
bb:f4:6f:ed:9e:b4:33:30:0b:4e:01:c7:2e:3a:8e:ae:cf:4c:
fc:80:db:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:31:40 2025 by rpki-client