Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft
File: 6IdrUasrF3RAzUxM0uTwpZjgOBw.mft (raw, json)
Hash identifier: TrIEpYAL1yV9z489u6LvETnL/2ERjQnyv1iqC6+gSfI=
Subject key identifier: 38:9D:D3:79:CA:B5:05:D4:F2:8E:59:9C:73:55:6E:FB:BA:8A:D4:B0
Authority key identifier: E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C
Certificate issuer: /CN=A913AE23/serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft
Manifest number: A4
Signing time: Sun 13 Apr 2025 05:02:09 +0000
Manifest this update: Sun 13 Apr 2025 05:02:08 +0000
Manifest next update: Sun 20 Apr 2025 05:02:08 +0000
Files and hashes: 1: 6IdrUasrF3RAzUxM0uTwpZjgOBw.crl (hash: ftGcsLk2NLwQ8lKXqrBB+8+GfzXSiRbYKide76EqpR4=)
2: 20B02A7A2C6D11EF9E3D5230C4F9AE02.roa (hash: Rih/Wk+3SaEqReLV35PtgcGk6bxkA/LfVhv9nN+xmq4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl
rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 05:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE23, serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C
Validity
Not Before: Apr 13 05:02:08 2025 GMT
Not After : Apr 20 05:02:08 2025 GMT
Subject: CN=67fb4550-381e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:4d:d2:e0:24:2a:c3:cf:a0:0f:61:8e:0b:
1a:65:99:64:3b:5d:81:24:70:90:64:44:f7:e7:ec:
7b:9a:62:0f:c8:b6:e4:e9:68:8f:39:2f:25:61:54:
e2:dc:c3:05:25:24:d2:97:43:9d:87:f7:04:d3:7d:
1d:e2:7a:ff:02:fd:b4:16:a6:85:f9:07:b3:b6:78:
45:b5:cb:78:e5:80:e1:65:ad:b5:98:82:d4:b7:90:
38:c8:31:fd:5f:b5:c3:49:52:33:20:56:d2:72:9c:
53:e9:f2:39:cb:dc:ba:b1:82:1f:66:0f:20:ae:98:
a7:36:bc:8c:85:c1:65:09:77:13:94:80:68:a0:f8:
21:83:3c:74:89:e7:54:88:e8:e3:9e:e3:44:94:56:
ce:31:b9:81:2b:df:10:54:4d:3e:f6:aa:a3:cc:3a:
7e:73:84:38:fb:02:99:d2:62:c2:35:ea:1d:e1:ca:
d7:7f:da:42:a7:f7:da:4a:44:9a:b4:a4:6c:1d:16:
26:de:71:d7:d6:67:eb:16:fe:2a:fb:3b:ed:12:b4:
2a:86:2a:b3:a7:3c:8c:f9:b7:69:8f:50:64:86:f2:
cb:cc:9e:6c:6d:86:ec:cb:1c:49:84:73:ce:b7:f1:
48:75:9a:d6:74:57:73:ca:04:4d:32:2b:3e:a0:05:
32:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9D:D3:79:CA:B5:05:D4:F2:8E:59:9C:73:55:6E:FB:BA:8A:D4:B0
X509v3 Authority Key Identifier:
keyid:E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:51:6f:8a:a0:d4:3f:fa:76:98:13:de:31:eb:ac:f1:ae:a9:
60:3f:a0:6d:7b:99:62:37:d5:44:f1:78:e1:0e:e6:00:27:79:
06:81:c2:4a:9e:31:29:6e:cf:39:4a:2c:17:d4:c1:84:e1:e2:
e7:e6:57:4a:6a:f1:7c:31:86:dc:1a:e0:79:25:df:be:1b:ba:
f4:7b:79:97:de:bd:2c:ee:44:d8:b7:22:aa:25:e3:b0:f1:41:
dd:41:de:ad:78:dc:f0:cd:f8:54:0b:fa:f4:ca:ac:84:e4:75:
ba:17:67:95:7f:18:fc:f8:be:00:70:1b:8f:2d:9a:e4:f3:6b:
da:1a:de:18:be:69:b6:fc:73:5e:a5:fa:cc:77:6d:89:86:2c:
22:c3:be:a4:fd:ce:ac:67:55:72:37:a1:80:68:ab:0b:d2:62:
b3:69:48:c7:66:83:8c:e0:2a:4f:3b:48:5f:86:0b:6b:90:1c:
b0:f3:bc:8e:0d:54:4e:04:d3:f2:26:ac:26:b2:92:30:22:6f:
df:15:f4:20:1f:42:eb:73:9b:5b:e9:4e:2d:4a:97:75:f1:3f:
ae:1c:77:24:78:0c:43:e6:3e:61:20:b9:ea:e1:9a:2b:ce:f0:
2d:0f:89:b1:83:b2:68:94:c6:ed:a1:d9:5b:48:f5:08:c9:ef:
f1:a6:db:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:23:26 2025 by rpki-client