Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft
File: WAfnFR1ax7dL8iyZCSvS6S6mBig.mft (raw, json)
Hash identifier: v5fseGX+V5kbTYUzO1o6iQP2oYBl1F5NXrZtBYdvHoc=
Subject key identifier: 3D:5A:E2:63:55:7D:D1:96:EE:C5:2B:B1:78:AF:FF:3D:A0:C3:04:A5
Authority key identifier: 58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28
Certificate issuer: /CN=A9144EC5/serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628
Certificate serial: 05AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft
Manifest number: 05A4
Signing time: Tue 08 Apr 2025 22:55:24 +0000
Manifest this update: Tue 08 Apr 2025 22:55:24 +0000
Manifest next update: Tue 15 Apr 2025 22:55:24 +0000
Files and hashes: 1: WAfnFR1ax7dL8iyZCSvS6S6mBig.crl (hash: 14bJYv0Mr9euRO7tj4WoENU/Z1Z+cmIoCgXNII6Pvpc=)
2: 9CCB30B0C5F411EB8A6F1525C4F9AE02.roa (hash: 3Rc3j+d1O8Ewr6XgYdHpoNd/omQ6+BrlDickanhKcdQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl
rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 22:55:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1454 (0x5ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144EC5
Validity
Not Before: Apr 8 22:55:24 2025 GMT
Not After : Apr 15 22:55:24 2025 GMT
Subject: CN=67f5a95c-7204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:e2:05:09:c2:75:5a:dd:1c:e0:3a:44:e9:
b2:d4:35:f5:1c:4c:4e:54:40:15:be:67:80:09:a5:
a9:09:86:9e:ae:e2:ea:f5:18:2b:4a:89:63:7f:6c:
ee:cf:ce:5a:93:4d:8c:b5:5f:e6:05:2b:d9:f4:1e:
a1:48:39:02:95:fe:c8:2e:af:32:20:ef:6b:85:b1:
29:de:7d:85:34:4b:36:cb:3d:f7:46:ae:98:27:9a:
69:db:b8:cb:b1:8c:38:4a:10:67:46:db:2e:9e:a9:
6c:28:01:d9:8e:62:52:ef:c6:aa:38:3a:97:7e:dc:
f4:af:52:c9:85:cb:05:13:f9:37:a0:25:b2:12:2b:
7f:ce:34:65:54:a0:f5:83:58:6d:7e:f5:50:bc:18:
c1:f4:b9:e9:54:0a:e0:0a:6c:28:69:de:ae:68:02:
fe:ee:e4:57:2a:61:df:d2:29:ef:b6:e5:22:7d:4f:
a5:18:8f:b8:13:d9:9f:06:3a:09:48:d3:8b:76:be:
54:b8:da:45:74:7c:59:4c:d6:06:cc:bc:3b:a4:3c:
c3:6e:c5:a2:36:8f:6d:b5:e4:65:15:ab:29:1d:7f:
2c:5e:de:5a:ed:0c:8a:05:d1:af:8e:d2:23:5e:eb:
22:f3:5d:e7:0f:e8:75:93:65:f9:e5:cc:33:e8:81:
aa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5A:E2:63:55:7D:D1:96:EE:C5:2B:B1:78:AF:FF:3D:A0:C3:04:A5
X509v3 Authority Key Identifier:
keyid:58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:62:cc:ac:28:83:6e:e3:80:2c:c1:72:0a:82:0e:cb:ff:dd:
b9:88:61:9a:1c:2e:61:5f:e8:80:2e:d7:0f:f7:3f:d6:98:ff:
55:fd:f9:71:44:20:04:af:dd:cd:75:e8:cf:e5:5e:41:a1:5c:
52:ad:77:cb:58:04:30:0c:3b:5e:23:ff:57:57:87:3c:2d:5f:
2b:47:03:d4:82:99:ad:f6:85:fa:97:d8:2f:ae:74:39:de:e4:
57:35:93:d9:41:79:7a:48:60:c1:59:bb:7f:98:e9:44:bd:9e:
62:3c:e1:04:40:94:31:b5:85:cd:6a:61:e3:05:72:09:9c:48:
b3:4c:ad:e4:fc:a4:6f:e8:10:84:9f:d7:d4:53:ce:ca:e7:e5:
5e:8f:71:0d:e8:d3:bd:10:c1:98:c8:19:3f:e9:1c:fd:f3:de:
5a:0c:53:b2:f5:42:5a:4f:e6:85:5a:65:49:a3:9c:52:1e:31:
d5:28:c8:a0:2b:81:ae:9e:57:82:99:3b:d9:3f:04:a8:85:a8:
25:74:7c:68:e9:5f:7d:c8:7e:5b:3e:4b:c5:b3:1d:c4:17:9c:
cd:73:62:8c:8b:0b:a5:db:71:fb:5a:b8:b4:85:71:c4:14:b2:
23:26:ec:e7:e4:4d:df:58:2c:b8:63:e9:18:23:a5:0f:8e:85:
44:ec:d8:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRFQzUxMTAvBgNVBAUTKDU4MDdFNzE1MUQ1QUM3Qjc0QkYyMkM5OTA5MkJEMkU5
MkVBNjA2MjgwHhcNMjUwNDA4MjI1NTI0WhcNMjUwNDE1MjI1NTI0WjAYMRYwFAYD
VQQDEw02N2Y1YTk1Yy03MjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzyLiBQnCdVrdHOA6ROmy1DX1HExOVEAVvmeACaWpCYaeruLq9RgrSoljf2zu
z85ak02MtV/mBSvZ9B6hSDkClf7ILq8yIO9rhbEp3n2FNEs2yz33Rq6YJ5pp27jL
sYw4ShBnRtsunqlsKAHZjmJS78aqODqXftz0r1LJhcsFE/k3oCWyEit/zjRlVKD1
g1htfvVQvBjB9LnpVArgCmwoad6uaAL+7uRXKmHf0invtuUifU+lGI+4E9mfBjoJ
SNOLdr5UuNpFdHxZTNYGzLw7pDzDbsWiNo9tteRlFaspHX8sXt5a7QyKBdGvjtIj
Xusi813nD+h1k2X55cwz6IGqCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1a4mNV
fdGW7sUrsXiv/z2gwwSlMB8GA1UdIwQYMBaAFFgH5xUdWse3S/IsmQkr0ukupgYo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEVDNS80MzlFM0MyOEM1
MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3ZEw4aXlaQ1N2UzZTNm1C
aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dBZm5GUjFheDdkTDhpeVpDU3ZTNlM2bUJpZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEVDNS80MzlFM0MyOEM1MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3
ZEw4aXlaQ1N2UzZTNm1CaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCIYsysKINu44AswXIKgg7L/925iGGaHC5hX+iALtcP9z/WmP9V/flx
RCAEr93NdejP5V5BoVxSrXfLWAQwDDteI/9XV4c8LV8rRwPUgpmt9oX6l9gvrnQ5
3uRXNZPZQXl6SGDBWbt/mOlEvZ5iPOEEQJQxtYXNamHjBXIJnEizTK3k/KRv6BCE
n9fUU87K5+Vej3EN6NO9EMGYyBk/6Rz9895aDFOy9UJaT+aFWmVJo5xSHjHVKMig
K4GunleCmTvZPwSohagldHxo6V99yH5bPkvFsx3EF5zNc2KMiwul23H7Wri0hXHE
FLIjJuzn5E3fWCy4Y+kYI6UPjoVE7Nhq
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:30:35 2025 by rpki-client