Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json)
Hash identifier: 5xRVEr41ysgfWP1RBzayLz6N/trsacXlssVrtcTRlss=
Subject key identifier: 0D:62:37:A5:0B:42:A7:A3:D8:05:D1:4D:A4:8F:CE:DD:67:16:47:53
Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Certificate serial: 091D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
Manifest number: 090F
Signing time: Sat 12 Apr 2025 20:06:15 +0000
Manifest this update: Sat 12 Apr 2025 20:06:14 +0000
Manifest next update: Sat 19 Apr 2025 20:06:14 +0000
Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: ql0niTjbQOEq5EJlNBh0UTlwwOwfepETVdsmfoQZbis=)
2: 649A355C5F0F11EBBDB7C113C4F9AE02.roa (hash: bw4sMGnKDiftNLfRmiZR5SdnMpNduWFQjTQlPL6jZYY=)
3: 20544B84F14511ECA1AE5F4EC4F9AE02.roa (hash: FPAklaM71rdV3Mf7CFthJcOnotN1vw1BtN7p9xcPR+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 20:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2333 (0x91d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Validity
Not Before: Apr 12 20:06:14 2025 GMT
Not After : Apr 19 20:06:14 2025 GMT
Subject: CN=67fac7b6-9f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:2d:e7:47:cf:a2:e5:26:25:fa:28:18:b1:
53:46:c5:9f:e7:7c:bd:25:c8:75:72:1c:af:26:20:
35:e1:ce:66:17:cc:09:48:c4:aa:f3:fd:1b:a1:f4:
f5:59:3e:63:ad:d1:c4:56:b0:87:89:33:e0:54:62:
49:eb:d3:75:2c:5c:26:e7:d0:ff:b9:28:9b:3f:7f:
00:e7:d5:33:22:41:0b:31:aa:3c:d1:12:7e:53:fc:
ce:9c:d6:4c:e5:2f:5d:09:b6:df:cf:0c:80:67:5e:
6b:bd:11:e2:d4:a8:33:31:8f:3f:ce:55:d5:45:69:
f6:eb:e3:a6:95:9a:4e:2f:60:81:c0:ca:c7:6f:dd:
c1:53:35:81:aa:16:58:3a:ea:f1:f5:d8:06:67:e2:
89:91:43:7d:22:b3:22:12:fb:9b:55:40:f6:42:af:
a4:cf:d0:6b:9f:c2:ad:f8:f9:60:90:78:4a:02:f0:
33:99:e7:38:fe:ff:dc:9b:bf:40:a9:de:2c:69:67:
99:77:0d:b5:93:f4:9f:ba:29:8a:5c:20:3f:68:83:
6f:e0:9b:4f:75:e1:39:4c:f9:3b:36:2f:83:24:75:
c8:da:01:2d:b9:42:67:12:b1:11:45:26:82:02:df:
b1:1f:54:54:24:aa:29:75:a8:d0:65:8a:03:2d:c8:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:62:37:A5:0B:42:A7:A3:D8:05:D1:4D:A4:8F:CE:DD:67:16:47:53
X509v3 Authority Key Identifier:
keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:42:89:e2:28:79:40:86:04:1b:b9:8a:88:58:73:83:a3:56:
d2:1f:b8:ed:09:05:79:a7:a3:51:82:db:2b:71:48:fb:89:8d:
78:6f:8b:04:ad:f4:ac:c8:7e:22:6f:84:76:4e:4a:2d:e7:53:
da:ee:db:a2:71:66:e8:fb:9f:f6:ce:f3:31:c8:e2:56:a4:ff:
fc:c3:2c:9e:a6:16:d3:e5:5f:75:fa:4b:27:cc:27:d3:4d:b8:
f5:a4:0b:58:c1:fc:34:f8:bb:35:c4:70:28:ae:0c:1e:56:06:
25:67:18:f1:2b:d9:f6:3b:0f:a4:88:5b:da:ab:08:5f:48:8b:
8f:e9:f3:2b:cf:f3:5e:d1:63:fc:97:16:b8:8e:10:ab:f3:a0:
b6:56:c8:a8:c1:0d:90:f3:4a:3a:bb:d4:20:b1:7a:e9:35:51:
3d:9a:49:e8:0b:f5:4b:ad:84:12:6e:14:03:52:14:cf:61:c3:
7c:80:a4:35:61:62:fa:aa:a1:9d:78:f9:b5:e1:42:60:a1:79:
44:a3:03:52:ce:b4:e4:b1:bd:1c:e6:44:21:9e:46:e6:98:b3:
10:4e:3e:1f:15:a1:57:17:70:b9:6d:96:f9:c8:f6:f9:59:11:
72:2c:c1:2e:c1:95:3f:89:4f:3e:8b:1f:45:7b:10:27:95:20:
ea:94:bb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:06:40 2025 by rpki-client