Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
File: C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json)
Hash identifier: JtWzPccNsz7IrMJDuIQN6KWQrN5KvPBnJ4RRFbRWHP4=
Subject key identifier: ED:BA:34:AE:F1:4A:37:10:F9:AB:54:05:ED:86:60:18:D2:9F:EF:40
Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Certificate serial: 0C9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
Manifest number: 0C8A
Signing time: Tue 08 Apr 2025 18:10:08 +0000
Manifest this update: Tue 08 Apr 2025 18:10:07 +0000
Manifest next update: Tue 15 Apr 2025 18:10:07 +0000
Files and hashes: 1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: l1CpodgYbF364EmA4cf81pMP7NEG95oYC/Xa+BIUc2o=)
2: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: vuIx5uN5ZZTHGHOWV+i45uzSngomzzsL58ntfcnGCEs=)
3: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: eD8TajPOjrIE4f1nFZu3J+ZWCoHsnqirX9VK+G/Tflw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 18:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3231 (0xc9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91473F8
Validity
Not Before: Apr 8 18:10:07 2025 GMT
Not After : Apr 15 18:10:07 2025 GMT
Subject: CN=67f56680-d654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:79:78:cc:55:84:dd:68:89:ad:61:7d:53:11:
f7:b9:bf:e0:5b:c2:9e:99:dd:9d:bd:59:a8:d9:aa:
c5:94:4d:7f:fd:68:29:58:39:13:79:10:1f:07:46:
5c:95:17:9d:20:6a:03:01:03:59:10:d7:2b:9b:b1:
16:fa:8d:b0:54:ff:33:da:20:c6:d2:78:63:32:16:
60:20:99:43:c6:ef:5c:5d:ad:67:ff:9f:4b:4d:46:
67:63:d6:a4:a3:ed:57:86:b0:0f:e2:8e:e8:88:ca:
be:34:80:e0:95:5e:77:e3:51:ce:20:af:41:53:bf:
db:e8:ea:00:f7:6d:84:64:79:e2:f2:78:6f:bf:83:
2b:6c:a6:99:1f:50:45:d9:e7:e7:00:85:a1:c7:58:
a0:7a:05:fe:42:cb:26:7b:cc:e9:dd:17:b0:a0:81:
e8:3d:f1:22:5f:5a:c1:10:0c:ef:29:9e:78:2f:03:
a9:fa:ff:f4:89:07:32:03:25:24:a8:dd:27:d7:70:
35:15:83:b5:14:01:26:11:47:c4:0a:bc:85:0a:fa:
31:f7:57:73:05:b7:0b:da:98:88:00:67:1d:1e:81:
4e:9e:b2:46:64:10:e8:f1:5b:ac:55:eb:02:b4:47:
53:9c:3b:8b:e0:c8:ea:0f:24:54:d5:7d:c6:f1:d0:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BA:34:AE:F1:4A:37:10:F9:AB:54:05:ED:86:60:18:D2:9F:EF:40
X509v3 Authority Key Identifier:
keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9a:8d:4c:46:5e:bd:61:57:14:cc:2e:9c:0b:40:19:76:14:
ef:1e:49:e7:63:93:3b:94:97:62:c5:42:f7:9d:71:5f:8f:0a:
6f:0b:59:55:72:b6:76:ec:27:f2:5e:c4:6b:70:00:2b:02:79:
65:99:91:0f:55:c0:34:7c:3d:2b:6d:a8:5f:09:94:c4:cd:55:
37:4d:d1:d2:aa:c6:64:5c:5e:8a:9a:5b:33:05:65:69:31:f5:
8f:90:32:73:5d:cc:be:20:99:ed:30:5c:0e:84:ba:c4:d7:07:
8d:8c:92:72:e6:85:e2:21:9d:f6:9f:23:57:82:7f:3f:d4:14:
06:25:13:d0:66:36:f0:5a:ff:ec:a3:48:d1:76:fd:9a:85:49:
8a:46:4d:fc:43:b8:e2:0a:be:8f:39:e6:0c:ff:1d:7b:6c:5e:
25:27:30:8f:27:a2:c1:0f:38:d2:f0:e0:ef:c5:b9:b4:b9:ee:
c7:6a:53:50:fe:59:8d:57:5f:e8:b4:c8:d0:7d:30:75:65:49:
5d:72:9b:0c:20:64:bb:ab:ae:48:03:41:73:7d:0a:de:37:69:
8e:5c:c4:bf:da:46:b0:94:46:e2:93:4b:fd:28:8b:f0:7f:0a:
9b:cf:e6:4d:3d:ee:6b:2d:f9:c9:21:b8:9f:86:5d:3a:5c:37:
e6:b8:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:56:12 2025 by rpki-client