Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json)
Hash identifier: rp6Dp0pPWrj3SV1z4YfI3ihxDoPLSIGi/+v+E/mpDU8=
Subject key identifier: D4:53:A9:57:72:59:19:42:FC:AB:8C:EC:EE:29:C5:79:A8:BC:0D:97
Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Certificate serial: 012C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
Manifest number: 0128
Signing time: Thu 17 Apr 2025 03:34:08 +0000
Manifest this update: Thu 17 Apr 2025 03:34:07 +0000
Manifest next update: Thu 24 Apr 2025 03:34:07 +0000
Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: HFGkJM3NCKFx8ys1+dEAHqBX+g+tXyQSlpOAvMH47iE=)
2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: PHAPD39R0/+5V+WCmlH3xcXfFFqLnGp5Euy8i5sqtnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl
rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Apr 2025 03:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Validity
Not Before: Apr 17 03:34:07 2025 GMT
Not After : Apr 24 03:34:07 2025 GMT
Subject: CN=680076af-8c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:b8:3f:13:dc:bc:4f:d2:d8:09:f4:82:d9:
ae:85:b4:9d:9b:f0:01:81:13:fe:a0:49:4f:bf:33:
f4:f3:3f:13:1a:db:a1:e3:82:2f:ee:7b:02:a7:25:
8b:cc:cf:28:df:32:c2:c1:79:3d:58:c2:fe:f7:66:
7d:a5:2f:21:ef:c8:bf:1c:1a:cb:10:4a:71:63:8d:
e0:a9:1f:66:2b:20:6d:2d:94:a9:a4:9d:a6:15:17:
ba:22:3d:e1:2e:c6:57:c3:3e:f1:78:20:7a:38:ce:
8d:58:82:eb:03:87:f7:cd:e0:b7:66:5b:23:99:84:
7b:27:5f:f3:41:12:ce:9e:74:2e:b5:ea:01:75:ef:
5d:c0:d9:56:07:da:b0:eb:27:43:7a:c7:23:12:ca:
f1:70:36:77:b7:0b:56:ca:c4:95:cb:b1:13:ad:8c:
9b:f7:87:3f:6a:d6:17:bf:97:d1:11:0b:92:01:da:
a7:1d:7f:c0:ff:b0:98:55:48:7b:cb:14:53:cc:0d:
56:b5:9c:60:16:ed:09:cb:20:f1:da:bb:e9:bf:24:
08:45:17:4b:6b:d0:f4:f8:4e:75:79:11:50:59:89:
03:05:5e:c2:44:74:2c:47:90:2f:91:93:96:ad:89:
37:8d:37:98:49:da:92:b6:b8:b4:82:53:b4:f5:29:
40:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:53:A9:57:72:59:19:42:FC:AB:8C:EC:EE:29:C5:79:A8:BC:0D:97
X509v3 Authority Key Identifier:
keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:c9:d8:5c:05:87:91:74:98:f8:b9:75:7a:2c:3a:0a:b2:ba:
41:1d:13:2e:72:6b:11:16:55:cb:c8:ed:97:b3:e9:7e:ee:25:
2c:4f:16:d2:48:f3:1e:20:4f:84:ac:68:3c:78:68:36:cc:b7:
bc:e4:91:e2:6f:a4:2e:61:ba:80:82:d9:01:df:ea:73:a6:82:
2c:0e:6b:8e:d8:49:ca:78:7d:e8:09:ca:10:d7:e9:b9:3b:76:
88:9f:73:65:89:98:ed:df:a1:cf:d6:af:c2:77:46:8e:5f:9d:
34:a9:7e:3b:c7:61:9c:91:b0:3c:a5:5a:28:7e:7b:97:1f:5c:
65:5b:6a:a5:6e:da:38:00:47:ce:77:23:b1:65:86:87:94:72:
82:d0:e8:e2:13:be:9e:d6:94:4d:5a:42:a4:6f:b0:53:2c:d8:
e2:9e:19:37:0a:51:3f:dc:36:58:41:13:c2:94:89:e1:57:99:
d3:ef:dd:12:ec:48:02:52:50:27:4e:84:ca:c2:a0:2a:5d:35:
67:a7:5e:0d:01:fd:66:9b:42:11:5b:63:29:89:f2:cc:5d:b4:
cd:b2:17:68:eb:f6:61:fb:31:85:d3:f8:e7:8a:b9:fe:16:73:
84:62:b7:3a:db:e0:e1:ca:d3:b6:c5:e2:8b:73:03:6d:7b:be:
d7:43:a6:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzc0QkIxMTAvBgNVBAUTKEIzMTJDMjJGM0QwQjk3QkFBRjMyNzNFNUM2NkI4RjE0
MDIwM0UyRjkwHhcNMjUwNDE3MDMzNDA3WhcNMjUwNDI0MDMzNDA3WjAYMRYwFAYD
VQQDEw02ODAwNzZhZi04YzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsNO4PxPcvE/S2An0gtmuhbSdm/ABgRP+oElPvzP08z8TGtuh44Iv7nsCpyWL
zM8o3zLCwXk9WML+92Z9pS8h78i/HBrLEEpxY43gqR9mKyBtLZSppJ2mFRe6Ij3h
LsZXwz7xeCB6OM6NWILrA4f3zeC3ZlsjmYR7J1/zQRLOnnQuteoBde9dwNlWB9qw
6ydDescjEsrxcDZ3twtWysSVy7ETrYyb94c/atYXv5fREQuSAdqnHX/A/7CYVUh7
yxRTzA1WtZxgFu0JyyDx2rvpvyQIRRdLa9D0+E51eRFQWYkDBV7CRHQsR5AvkZOW
rYk3jTeYSdqStri0glO09SlA7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRTqVdy
WRlC/KuM7O4pxXmovA2XMB8GA1UdIwQYMBaAFLMSwi89C5e6rzJz5cZrjxQCA+L5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzRCQi82NDg1NDJDODVC
NkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3cXZNblBseG11UEZBSUQ0
dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N4TENMejBMbDdxdk1uUGx4bXVQRkFJRDR2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzRCQi82NDg1NDJDODVCNkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3
cXZNblBseG11UEZBSUQ0dmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBnydhcBYeRdJj4uXV6LDoKsrpBHRMucmsRFlXLyO2Xs+l+7iUsTxbS
SPMeIE+ErGg8eGg2zLe85JHib6QuYbqAgtkB3+pzpoIsDmuO2EnKeH3oCcoQ1+m5
O3aIn3NliZjt36HP1q/Cd0aOX500qX47x2GckbA8pVoofnuXH1xlW2qlbto4AEfO
dyOxZYaHlHKC0OjiE76e1pRNWkKkb7BTLNjinhk3ClE/3DZYQRPClInhV5nT790S
7EgCUlAnToTKwqAqXTVnp14NAf1mm0IRW2MpifLMXbTNshdo6/Zh+zGF0/jnirn+
FnOEYrc62+DhytO2xeKLcwNte77XQ6Zs
-----END CERTIFICATE-----
Generated at Thu Apr 17 12:01:55 2025 by rpki-client