Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
File: mlZqEuG8RjUyb14CrunbcYHdO94.mft (raw, json)
Hash identifier: YZ4+Vgyfnh9T7enAAezhdVlQLMPSKhbbGxY35OQvmbQ=
Subject key identifier: 0F:DB:54:97:8B:4D:EE:C5:AB:D0:D4:D1:48:46:AF:CE:F7:65:0F:52
Authority key identifier: 9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE
Certificate issuer: /CN=A9142B64/serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE
Certificate serial: 3470
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
Manifest number: 3470
Signing time: Sat 12 Apr 2025 14:54:17 +0000
Manifest this update: Sat 12 Apr 2025 14:54:17 +0000
Manifest next update: Sat 19 Apr 2025 14:54:17 +0000
Files and hashes: 1: mlZqEuG8RjUyb14CrunbcYHdO94.crl (hash: FOZj0WvhFfKknSESxi8Zkh0tPoe+DfRTgtRdE8ClpmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl
rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 14:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13424 (0x3470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142B64, serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE
Validity
Not Before: Apr 12 14:54:17 2025 GMT
Not After : Apr 19 14:54:17 2025 GMT
Subject: CN=67fa7e99-f8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:36:0c:a7:ca:53:4d:5e:00:55:b0:c8:64:
f3:79:0b:01:7f:5f:43:3d:61:b2:13:5d:d4:d8:4a:
3f:9b:01:5d:e6:6f:16:78:cb:69:f6:a6:5f:96:51:
b2:e5:1f:a7:b5:6a:d2:cf:18:c6:f7:a2:4c:41:3b:
36:3e:80:5a:1f:e9:b5:a1:a5:78:f0:5c:e6:1f:27:
94:4c:0d:0c:e4:36:b0:95:d6:61:49:62:b6:0b:a3:
b8:27:23:38:f2:73:97:be:7b:dd:ab:e6:87:96:f1:
b8:f1:b2:1a:31:35:74:90:d3:25:9e:22:6c:4c:20:
4a:9b:51:f7:73:61:05:c1:66:a2:8a:19:5f:6c:d7:
20:74:d7:1d:ad:8d:ef:dc:a6:12:a8:c2:29:20:be:
8a:75:0f:3d:d2:e0:67:3a:53:6d:5f:00:0c:1e:6c:
c9:88:c4:12:71:68:a6:c9:a7:94:02:e5:2b:31:39:
21:15:f1:70:f0:93:3f:bc:0e:c6:e4:dc:4c:d9:f1:
6c:11:c6:6e:43:0d:54:da:0e:c9:da:3e:24:77:d0:
84:f9:5d:6d:30:70:38:48:67:e7:d3:3c:95:48:0c:
ec:dd:6f:1a:59:b4:4b:65:22:aa:a4:f2:86:ed:51:
6e:c5:79:82:fd:25:4d:31:53:71:9a:ee:dd:11:1f:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DB:54:97:8B:4D:EE:C5:AB:D0:D4:D1:48:46:AF:CE:F7:65:0F:52
X509v3 Authority Key Identifier:
keyid:9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:57:59:ed:2a:67:26:84:33:79:a0:36:06:d3:06:0c:80:2f:
25:40:4d:58:95:18:e0:d2:ec:2d:3d:5c:de:b1:ed:3d:cf:94:
d0:7a:b4:cf:4f:a4:4f:ab:1f:26:bd:42:c8:fd:39:8b:df:82:
23:6a:98:d0:da:66:dc:32:34:1d:39:a5:7b:32:9d:58:7d:8a:
43:2c:09:7f:f1:fd:39:e2:85:67:e5:02:16:b3:ed:a4:7b:2b:
10:8d:c0:e3:a3:5c:db:08:2c:b4:38:48:46:75:80:cc:e0:bd:
ac:08:67:2f:c0:68:9f:44:34:d9:39:39:5b:d0:d6:64:9e:2a:
82:61:fd:69:7d:b8:0f:54:14:83:3e:59:4c:cc:a2:d1:0b:40:
be:7e:11:81:56:69:fd:e1:c6:ec:62:99:33:27:ec:21:61:d1:
9d:34:6e:45:8a:b6:14:20:9d:c4:13:91:ac:24:cb:57:ab:ce:
32:74:f0:54:46:70:02:ca:d8:9f:16:23:0b:ec:52:4c:72:14:
b1:02:6b:6d:58:0e:49:1e:d1:17:fd:e8:19:5b:fb:4a:59:ec:
dc:05:24:15:ad:3d:5e:2c:d2:61:3d:5d:95:d1:4b:ee:93:ae:
74:17:7e:51:51:3b:4c:91:be:92:10:f2:c0:f3:9a:1a:61:99:
e2:77:3b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:25:17 2025 by rpki-client