Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
File: MOI2HN2l66cF86ay--vl232vEPE.mft (raw, json)
Hash identifier: KTpQibRbTYKniYCCSdly0i/1VsoRR/Q27RgaYTkvVwI=
Subject key identifier: 30:21:6D:66:C0:5F:9E:91:58:EC:B2:BB:A1:84:CC:69:DB:27:1F:1A
Authority key identifier: 30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1
Certificate issuer: /CN=A91386E8/serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1
Certificate serial: 05FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
Manifest number: 05F3
Signing time: Sat 12 Apr 2025 22:36:15 +0000
Manifest this update: Sat 12 Apr 2025 22:36:15 +0000
Manifest next update: Sat 19 Apr 2025 22:36:15 +0000
Files and hashes: 1: MOI2HN2l66cF86ay--vl232vEPE.crl (hash: yq59lquqYbOVWEcr1P8vUmncgUBHVTkzVa8dtStzJgI=)
2: 65C6DD42E15211EC8EEE9668C4F9AE02.roa (hash: LDk3Seu3QVripuVl2tqg++SzvTjmU8fS2eeY7JVY2JQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl
rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 22:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1531 (0x5fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91386E8, serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1
Validity
Not Before: Apr 12 22:36:15 2025 GMT
Not After : Apr 19 22:36:15 2025 GMT
Subject: CN=67faeadf-bb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:a3:93:e8:1d:54:41:68:54:74:65:07:30:
b9:e0:6d:be:a6:d6:84:f3:c0:b3:aa:7c:07:bd:fc:
98:40:98:ac:c0:27:8f:9a:5f:76:30:40:f7:40:64:
b6:9a:e9:73:20:a5:34:e5:44:12:74:3b:4e:30:84:
9e:00:18:d2:b2:f5:04:39:cc:a4:63:f0:1b:5f:8a:
52:b9:ae:06:66:8b:c1:4f:35:16:bb:60:51:87:76:
49:02:d8:20:98:27:05:a0:12:3a:c6:45:c9:de:e5:
ea:85:1c:0e:3f:2a:05:1d:de:16:7f:56:8b:7c:99:
d9:88:db:15:7a:84:b0:16:0e:4b:c7:7d:e0:1f:28:
8a:47:96:ed:78:c9:41:3b:b2:48:62:d2:4a:31:71:
fb:4d:b0:d1:3f:10:bf:34:f0:99:c0:fa:1d:36:13:
36:8a:ec:29:d3:1e:92:1b:4f:bc:31:96:9b:91:c2:
c5:a4:23:50:bd:57:f3:19:27:ae:b8:02:3c:d6:a7:
e9:a6:f0:87:9e:c7:02:de:0a:94:96:c7:5d:a7:fa:
41:e2:96:27:49:db:7b:a8:2b:29:58:61:d5:09:38:
53:d2:27:06:a1:d9:83:62:38:29:9d:30:d2:3f:c1:
88:e1:a1:67:ff:3a:9b:b8:57:18:57:52:03:9d:24:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:21:6D:66:C0:5F:9E:91:58:EC:B2:BB:A1:84:CC:69:DB:27:1F:1A
X509v3 Authority Key Identifier:
keyid:30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7f:43:e2:d2:59:44:7e:a6:48:79:55:74:57:18:d4:15:70:
8d:e7:29:5e:46:b1:bb:4c:87:81:2f:fb:7a:db:0d:13:5c:3f:
78:93:85:58:cc:e4:3c:02:d0:a7:6a:70:22:b3:f5:ce:8b:69:
d3:d9:d8:de:39:55:5a:23:dc:0c:2d:52:07:f3:f6:40:5f:c1:
a6:20:c7:d1:ff:3e:6a:b2:52:85:8e:b1:ed:c7:97:5a:a4:35:
28:b0:f9:08:3d:40:04:1d:d9:bb:d8:a3:a1:35:24:78:2d:8e:
ff:9e:b8:22:73:34:6b:09:73:e9:d6:3b:fc:c0:3b:6d:0f:1b:
97:5f:4b:05:1e:7a:08:2a:89:a7:71:6a:5b:ac:74:45:1e:7f:
c7:45:4e:12:98:85:4c:b1:1f:1c:93:02:62:a9:e0:84:ba:ac:
b5:27:d0:91:53:27:96:c5:9c:a4:95:e7:bf:d3:22:72:ff:51:
b9:d1:62:68:f9:90:96:22:8e:1c:60:05:61:3f:5f:26:08:da:
cc:a8:30:3e:0a:46:34:b7:ea:5a:f8:05:30:03:ec:34:38:ae:
fd:ab:89:2b:4e:33:c3:e4:b0:80:99:a2:a8:0d:70:3c:a5:c3:
5b:90:81:d5:90:2d:60:4a:db:ce:f8:36:bf:71:a0:b4:1a:24:
fb:1b:ad:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:06:37 2025 by rpki-client