Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
File: 7D2Af3k8nPX84zXuFeCYREm0MJY.mft (raw, json)
Hash identifier: UIRolG5A8bNWOYEUr1a+tNCNvcdBWmSjNPLEfzNediY=
Subject key identifier: 1D:65:E4:B8:4E:C9:BC:D5:08:6C:66:5E:67:63:F2:5C:9E:2E:AD:A1
Authority key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
Certificate issuer: /CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
Manifest number: 44
Signing time: Sun 13 Apr 2025 06:10:26 +0000
Manifest this update: Sun 13 Apr 2025 06:10:25 +0000
Manifest next update: Sun 20 Apr 2025 06:10:25 +0000
Files and hashes: 1: 7D2Af3k8nPX84zXuFeCYREm0MJY.crl (hash: v4lu+PJoOwxN/myUoerYzfXWprfos4w/dSGRyN0iqlQ=)
2: 18164B6AB2C811EFA702DF80C4F9AE02.roa (hash: 7UFK5IvMzRZ9oqAbFOWW72hTsQEiovxWyIoXLKQd8RE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl
rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 06:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91517CF, serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Validity
Not Before: Apr 13 06:10:25 2025 GMT
Not After : Apr 20 06:10:25 2025 GMT
Subject: CN=67fb5552-c7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:0f:31:48:de:03:16:ea:01:eb:cc:01:87:
2f:c4:94:1b:45:30:bb:19:c7:8b:af:c9:65:f1:a2:
5c:a5:f6:5b:f2:ea:24:c0:43:b1:17:00:8b:5b:7b:
08:12:a2:58:e7:1c:64:b1:08:35:e0:78:99:0c:c9:
70:bf:47:5b:75:85:ff:c4:8c:fe:2f:3a:ed:b0:e5:
ff:9f:84:f4:8f:4e:f9:81:5f:fc:98:f1:46:d6:bb:
c5:01:c4:b4:1a:1d:f3:d0:7b:56:a7:0d:bb:1c:db:
3a:ed:8f:bc:08:e4:02:ec:b3:cc:d5:90:86:f7:5d:
be:28:89:2a:14:b7:e8:ec:e6:2e:7e:44:bf:7f:b3:
2a:17:95:2e:e6:69:9d:30:07:62:ec:c1:e5:6d:ea:
1d:db:1b:3a:ed:99:8b:c8:4f:8a:e7:69:a7:24:9a:
10:e7:01:43:82:62:5f:ce:85:73:4d:02:4c:51:13:
31:a4:93:16:88:11:37:4f:16:dd:06:58:fd:f0:77:
b2:26:85:14:2d:73:10:ff:5d:bc:06:59:71:6f:e3:
4e:e4:fc:59:f5:6b:07:44:d7:25:15:27:6f:f5:e2:
e9:1b:7e:ff:3a:07:70:fa:e1:e9:4e:46:6c:d8:9b:
5b:28:55:69:86:34:b6:b1:59:d7:7e:9d:b2:4d:1f:
46:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:65:E4:B8:4E:C9:BC:D5:08:6C:66:5E:67:63:F2:5C:9E:2E:AD:A1
X509v3 Authority Key Identifier:
keyid:EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:02:ab:88:e3:fe:0a:9c:b8:ba:88:9e:f1:54:5e:1f:52:2d:
96:67:59:48:1e:8e:81:1a:46:08:aa:f1:4b:7b:99:3a:7e:0b:
ec:28:9a:f3:f1:06:fd:10:91:e8:46:3f:4b:a6:ab:f1:a1:b9:
f7:3b:77:0c:36:82:97:00:18:78:d1:cd:86:b8:e3:ed:b0:65:
d3:46:4c:a7:c2:95:e6:18:50:f7:58:3f:70:3f:cb:e6:d0:35:
a6:a8:7e:bc:27:c7:51:3f:78:2b:ad:8e:e1:ef:5b:c6:9b:87:
88:30:7d:cf:fb:ae:63:77:ac:27:bb:24:1f:4d:01:78:63:2b:
ab:0c:8c:07:46:b2:6a:3a:7c:f6:9c:71:74:df:ab:73:fc:37:
05:7e:d1:8f:da:95:60:2e:75:93:20:f6:bc:27:01:df:75:61:
f6:02:f4:9a:ea:c7:8f:74:ad:ff:84:08:08:9f:d1:dd:a1:b3:
11:c6:6b:81:0e:fd:84:24:ec:4c:6e:79:31:d6:cd:0a:0d:8f:
6b:41:63:4c:78:28:8b:0c:3b:a5:b9:f4:b6:19:33:78:ec:60:
8a:b3:1a:21:b4:9b:ed:57:c8:4c:93:ff:8a:be:ec:b7:04:00:
d6:08:0e:b4:24:9b:ef:27:fd:19:c3:58:41:2e:cf:f9:f7:b4:
7f:59:08:cd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MTdDRjExMC8GA1UEBRMoRUMzRDgwN0Y3OTNDOUNGNUZDRTMzNUVFMTVFMDk4NDQ0
OUI0MzA5NjAeFw0yNTA0MTMwNjEwMjVaFw0yNTA0MjAwNjEwMjVaMBgxFjAUBgNV
BAMTDTY3ZmI1NTUyLWM3ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDN6Q8xSN4DFuoB68wBhy/ElBtFMLsZx4uvyWXxolyl9lvy6iTAQ7EXAItbewgS
oljnHGSxCDXgeJkMyXC/R1t1hf/EjP4vOu2w5f+fhPSPTvmBX/yY8UbWu8UBxLQa
HfPQe1anDbsc2zrtj7wI5ALss8zVkIb3Xb4oiSoUt+js5i5+RL9/syoXlS7maZ0w
B2LsweVt6h3bGzrtmYvIT4rnaackmhDnAUOCYl/OhXNNAkxREzGkkxaIETdPFt0G
WP3wd7ImhRQtcxD/XbwGWXFv407k/Fn1awdE1yUVJ2/14ukbfv86B3D64elORmzY
m1soVWmGNLaxWdd+nbJNH0YtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHWXkuE7J
vNUIbGZeZ2PyXJ4uraEwHwYDVR0jBBgwFoAU7D2Af3k8nPX84zXuFeCYREm0MJYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxN0NGL0I0MTU1NDU4QjJD
NzExRUY5MTZCQjY3RkM0RjlBRTAyLzdEMkFmM2s4blBYODR6WHVGZUNZUkVtME1K
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN0QyQWYzazhuUFg4NHpYdUZlQ1lSRW0wTUpZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx
N0NGL0I0MTU1NDU4QjJDNzExRUY5MTZCQjY3RkM0RjlBRTAyLzdEMkFmM2s4blBY
ODR6WHVGZUNZUkVtME1KWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGUCq4jj/gqcuLqInvFUXh9SLZZnWUgejoEaRgiq8Ut7mTp+C+womvPx
Bv0QkehGP0umq/Ghufc7dww2gpcAGHjRzYa44+2wZdNGTKfCleYYUPdYP3A/y+bQ
Naaofrwnx1E/eCutjuHvW8abh4gwfc/7rmN3rCe7JB9NAXhjK6sMjAdGsmo6fPac
cXTfq3P8NwV+0Y/alWAudZMg9rwnAd91YfYC9Jrqx490rf+ECAif0d2hsxHGa4EO
/YQk7ExueTHWzQoNj2tBY0x4KIsMO6W59LYZM3jsYIqzGiG0m+1XyEyT/4q+7LcE
ANYIDrQkm+8n/RnDWEEuz/n3tH9ZCM0=
-----END CERTIFICATE-----
Generated at Mon Apr 14 06:22:30 2025 by rpki-client