Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
File: SJpvztfcY7erNmbjW9UJ2eoVdeA.mft (raw, json)
Hash identifier: zTG1c1iHuBR7NU6cLFbYtSwsQNCpfdYDX9FX9vkGZVs=
Subject key identifier: 5E:B2:3A:4D:B5:1C:DF:48:A3:BC:F2:C8:D7:F5:25:94:84:A9:89:5B
Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
Certificate issuer: /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
Manifest number: 0B
Signing time: Sun 13 Apr 2025 06:55:13 +0000
Manifest this update: Sun 13 Apr 2025 06:55:13 +0000
Manifest next update: Sun 20 Apr 2025 06:55:13 +0000
Files and hashes: 1: SJpvztfcY7erNmbjW9UJ2eoVdeA.crl (hash: e/YbZ5T2ko2vNNCSNhnGfPuD3UjMhY6xmAJoSBFQWvk=)
2: 3057138E143F11F08A345E0AC4F9AE02.roa (hash: litZH04YNtCR4iuEOlm91tI8Ccgt0oYZlfR5gRznpNA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 06:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Validity
Not Before: Apr 13 06:55:13 2025 GMT
Not After : Apr 20 06:55:13 2025 GMT
Subject: CN=67fb5fd1-fdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:6b:1e:31:46:89:a3:59:79:ee:67:a7:71:
2c:c2:2c:42:ad:99:56:0b:67:25:73:64:05:0d:e3:
27:33:1b:ec:72:d4:3b:c6:bc:b5:cd:50:22:40:47:
02:64:d9:88:e4:fb:e2:83:c7:93:20:27:70:a1:7b:
fd:ab:59:59:5a:9e:e7:a4:3e:c7:05:4c:c3:07:bc:
35:cf:98:58:18:e0:56:cc:ee:18:7e:6c:ca:0e:86:
14:73:db:50:c2:73:a7:68:94:7f:98:78:f5:fc:80:
6b:74:05:2a:0a:97:02:3e:ae:3b:33:71:4e:83:65:
6a:3f:0a:a8:23:bc:58:6e:13:d8:65:93:2d:a5:b9:
6a:2b:d3:f5:bb:69:dd:3d:25:bb:e0:51:6d:60:21:
99:31:7f:58:7b:b2:0d:6e:03:ed:c1:f5:2f:7a:dd:
9b:3f:2b:d7:81:93:c5:eb:c3:e4:ea:50:c5:9e:ec:
0e:0a:fb:86:d1:9a:94:29:24:3f:88:77:31:6c:e1:
91:48:b5:b4:ad:77:c8:f0:79:7e:51:f6:7e:24:ea:
50:f0:ff:15:ad:d3:60:f5:d8:d3:0f:26:7e:13:df:
b9:ce:c8:cb:9e:19:32:17:a3:fb:76:e7:47:00:f4:
81:9c:25:63:23:ed:14:2a:94:cb:5e:a9:80:ad:6b:
ef:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B2:3A:4D:B5:1C:DF:48:A3:BC:F2:C8:D7:F5:25:94:84:A9:89:5B
X509v3 Authority Key Identifier:
keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:66:ff:22:60:b0:9e:6a:02:5c:a6:94:b1:84:89:e9:c4:f5:
6d:52:03:6b:06:04:b3:4b:b3:b9:8a:32:c1:84:b1:19:e8:04:
29:fc:74:92:12:df:5c:f4:1f:00:b0:fd:42:58:ba:12:21:53:
51:f5:f3:e3:87:23:46:d9:ec:fa:2f:ee:75:ee:23:36:44:0d:
c0:03:12:6e:b4:cd:6f:c4:e8:06:09:88:22:cf:2f:79:e0:da:
94:8c:99:ff:b4:cc:ff:1c:b1:fb:b5:83:96:ba:03:86:e5:0d:
3e:68:97:a6:6c:b5:4a:44:b9:9a:c0:eb:0f:6b:a2:84:29:a2:
43:07:73:4f:b1:80:35:e0:d4:9d:0c:61:7f:84:6f:fa:ae:55:
4f:ed:1b:63:fe:db:c1:3e:fd:16:52:bc:73:88:fd:c3:2e:7f:
75:57:a8:3f:34:7e:51:7c:ad:3a:49:20:6d:a4:6e:a1:94:2e:
e5:84:0f:f9:f7:b6:3d:52:f4:2f:5c:56:3c:0e:26:0b:3b:6c:
88:c0:3e:93:69:08:6a:54:f3:28:12:dd:86:44:10:89:dd:45:
10:e0:55:04:0a:8e:83:f9:55:1a:f9:3d:97:c2:34:65:53:81:
09:f6:46:c6:8b:0e:dc:9c:76:19:51:5a:d4:10:3e:32:56:ed:
a6:ba:58:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:23:31 2025 by rpki-client