Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
File: eSaDgGyL46wTYU03XpAZJ0CZvHs.mft (raw, json)
Hash identifier: O/rNz+8Y1t4fTp3xVvjOoznIVk23/tg8RpQujbtpyWg=
Subject key identifier: 28:DA:D6:7A:90:11:B1:E3:89:ED:63:B8:13:E8:79:CC:0C:46:F1:80
Authority key identifier: 79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B
Certificate issuer: /CN=A914A92C/serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
Certificate serial: 52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
Manifest number: 4F
Signing time: Sun 13 Apr 2025 06:03:22 +0000
Manifest this update: Sun 13 Apr 2025 06:03:21 +0000
Manifest next update: Sun 20 Apr 2025 06:03:21 +0000
Files and hashes: 1: eSaDgGyL46wTYU03XpAZJ0CZvHs.crl (hash: fps9HFUC5iPNxdStq5zlzpkmuQXkhv9oo5uuMo0Mz1E=)
2: 55B355DCA60F11EF82E7691DC4F9AE02.roa (hash: Gw+0qN7nHcP5/UJQ2iKvlQ13obyIJUpO0k6xHzRKL2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl
rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 06:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A92C, serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
Validity
Not Before: Apr 13 06:03:21 2025 GMT
Not After : Apr 20 06:03:21 2025 GMT
Subject: CN=67fb53a9-e959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:b3:e8:2e:ac:c8:3b:a1:f6:67:a3:0c:b1:
cd:54:c0:7b:ac:b1:35:88:72:02:b6:0b:36:9c:ed:
b7:89:51:35:23:45:24:49:ca:e6:a0:8f:28:f4:53:
30:37:66:08:59:24:3d:b3:5f:09:77:72:9d:7d:c0:
03:19:c0:fd:a7:e6:db:a5:91:1d:3b:f5:71:6d:ef:
9d:32:9e:5d:80:8e:fd:8b:4d:a7:74:04:15:e7:99:
7a:c0:50:80:13:16:59:b9:35:b3:e8:87:29:f9:05:
9f:d4:ce:16:1e:3d:bc:63:72:67:36:fe:ec:c6:1a:
65:ca:b6:7f:1d:2c:b8:d9:48:12:30:33:aa:0e:a0:
80:58:9d:fb:65:b7:f0:1d:7b:25:52:24:eb:e8:92:
7f:07:0f:2e:a8:df:98:86:c8:73:65:f2:e8:e3:ff:
c5:4e:af:3c:a6:ad:ee:a4:b0:f2:e4:85:83:fe:75:
94:fd:07:9e:43:43:06:6d:35:db:45:92:ab:81:09:
ad:24:19:ff:3a:04:70:eb:f3:8b:6e:9e:c8:67:af:
56:ff:84:cd:33:2f:60:13:2d:f9:62:63:b2:f0:a4:
fd:0c:ff:e5:15:9b:f6:a5:1a:b8:2c:d3:ee:6e:95:
9e:17:69:10:5a:b9:cf:46:08:8d:28:4f:7e:97:12:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DA:D6:7A:90:11:B1:E3:89:ED:63:B8:13:E8:79:CC:0C:46:F1:80
X509v3 Authority Key Identifier:
keyid:79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:e0:56:2f:f3:8e:28:e7:0e:03:eb:51:93:df:3d:4c:ea:57:
a2:4a:fb:e8:b4:a0:f7:94:67:34:31:99:b5:6d:ab:4c:79:3a:
92:44:da:70:24:46:a4:b9:fe:e1:29:1a:ce:4b:76:f8:e1:2d:
ee:91:0f:a8:b8:25:95:a0:a2:ca:11:c4:4a:05:d2:02:6f:16:
3b:9f:e6:af:8a:15:51:da:7d:ee:23:3c:2a:cc:dd:b8:8b:fb:
24:32:f2:44:b4:2e:6f:09:75:4e:d7:7f:c6:16:81:0d:46:92:
da:a8:7f:7a:4a:7b:5d:5c:05:56:d7:21:b4:3b:e5:14:ee:56:
a1:06:c2:0c:16:03:73:06:57:08:25:cd:7b:28:90:20:dc:ae:
e3:56:7f:dd:bd:45:c2:83:b8:24:db:4a:1e:9a:26:b9:55:f4:
c9:f1:33:cc:a1:e9:79:f3:08:55:d9:31:8f:b2:96:7f:75:f8:
87:70:9c:df:f0:d9:09:7f:7c:b5:b6:0b:1a:c4:25:c8:6a:b4:
de:92:cd:64:73:fa:8f:e2:e8:be:e1:d5:80:ba:07:37:51:f4:
60:72:9b:82:96:68:97:11:4f:44:67:8a:97:37:80:b9:4f:ba:
5a:c9:b2:79:e0:a6:c8:49:15:ce:8f:b5:5d:af:d9:6b:42:7f:
ff:7a:27:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:29:20 2025 by rpki-client