Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
File: g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json)
Hash identifier: +Sz7P7O9qljnxrhahy1MAii7Ju/zkctztLTrCIzs68g=
Subject key identifier: 04:56:25:AD:DC:D1:18:EB:FE:D1:75:B9:E1:95:7E:9C:9A:39:02:1B
Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1
Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1
Certificate serial: 096D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
Manifest number: 0967
Signing time: Sat 12 Apr 2025 19:56:33 +0000
Manifest this update: Sat 12 Apr 2025 19:56:32 +0000
Manifest next update: Sat 19 Apr 2025 19:56:32 +0000
Files and hashes: 1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: eDkbMIdDkjS3MpaZ52fMbeCcdmgdSnOBkeoPImTTbrA=)
2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: LjFZkARdigofgjMJFtc/qBM/m3OntU9kJkRF62lZTLE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl
rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 19:56:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2413 (0x96d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1
Validity
Not Before: Apr 12 19:56:32 2025 GMT
Not After : Apr 19 19:56:32 2025 GMT
Subject: CN=67fac571-9eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8c:42:be:83:6b:f6:1b:ac:5d:90:e4:c9:50:
85:b3:a5:2b:7d:45:b7:23:b2:71:59:98:63:90:77:
63:77:8d:46:41:2f:74:1a:d3:ee:e4:5f:a3:9d:06:
84:5d:09:15:72:0a:32:39:59:a2:14:4d:41:c9:06:
cb:b0:b8:e5:d1:2a:d0:cc:72:db:c0:e9:d6:d1:22:
a7:d2:09:a7:d2:83:ff:19:28:ef:62:7f:db:bd:5d:
84:d9:0a:1b:2a:55:66:b4:d5:ef:c4:7f:5c:e1:7a:
a7:f6:0d:2e:2d:eb:ee:79:c7:b9:57:4b:b1:7f:fe:
a1:55:b1:c3:98:f5:01:d3:4f:1a:b9:9b:41:1e:65:
8d:3a:b5:5b:e6:33:fb:64:fa:d0:d9:5c:bf:f0:3a:
57:a9:53:0f:6a:43:33:00:b0:14:d5:7f:e3:4c:23:
15:74:87:36:62:7d:8e:59:ac:aa:ec:c7:bf:e8:68:
c8:ef:84:98:12:e9:e3:1a:6f:c0:32:16:36:68:33:
2c:fd:37:59:de:86:5f:7b:36:dc:b7:46:46:f9:42:
5f:89:04:92:39:d0:9b:a6:38:9d:28:ba:e1:e1:0b:
5b:63:0b:e0:88:9b:69:a4:08:1f:27:aa:24:21:57:
fd:37:f2:7d:1c:1d:f9:95:2e:d7:7a:c3:bc:20:96:
a0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:56:25:AD:DC:D1:18:EB:FE:D1:75:B9:E1:95:7E:9C:9A:39:02:1B
X509v3 Authority Key Identifier:
keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:29:fb:5c:f9:21:23:0c:02:0d:46:57:02:da:29:e5:ea:e2:
a5:ce:9f:4c:ee:c9:58:47:d0:c6:e7:b8:88:08:66:6e:9f:f6:
8d:80:25:e4:8a:ae:3a:4a:ac:aa:72:12:46:0d:85:61:d9:0c:
71:ca:35:37:89:a3:6a:8b:58:f0:84:36:3e:99:53:ae:b8:65:
2e:ab:37:9a:68:e1:6c:92:8e:53:1a:3b:3e:d7:b2:c0:e4:fa:
87:d3:77:45:99:5a:49:ba:ea:1c:de:f0:aa:25:37:1c:28:12:
f8:74:c5:f1:69:ed:cd:20:60:14:7a:ac:4c:9a:67:91:6a:a4:
0d:77:b9:eb:a0:d9:a5:24:2a:97:68:ec:cc:96:ab:29:6d:2b:
76:bc:6f:fe:b9:b7:07:00:c9:21:ff:cf:f7:3b:41:72:9c:23:
7a:7c:5a:bc:73:59:12:72:c3:e1:6b:6b:a2:be:45:21:8a:a7:
6d:c9:31:d1:cf:ee:09:7e:49:dc:67:7b:cb:cf:d5:3c:63:21:
49:f3:12:00:78:fe:a8:3f:6c:de:18:96:87:14:cc:60:d1:9e:
4d:f3:7f:9f:ed:0c:14:ff:6c:6c:27:9c:52:e5:f7:da:8d:3d:
41:e9:84:67:b1:1f:f5:fe:74:c5:cb:8a:40:82:9f:0c:95:99:
78:4b:24:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:43:27 2025 by rpki-client