Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
File: 9U-AgBarS7BveWqJRmfHC91I-_Y.mft (raw, json)
Hash identifier: r86XeoKzkVPCr3uvNYsn/TDWaLhGRckouR5IrNgsj44=
Subject key identifier: BF:56:DD:35:9A:50:70:78:C2:F8:A6:1D:02:C7:06:00:E9:26:E2:53
Authority key identifier: F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6
Certificate issuer: /CN=A9151932/serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
Manifest number: 72
Signing time: Thu 17 Apr 2025 05:39:57 +0000
Manifest this update: Thu 17 Apr 2025 05:39:57 +0000
Manifest next update: Thu 24 Apr 2025 05:39:57 +0000
Files and hashes: 1: 9U-AgBarS7BveWqJRmfHC91I-_Y.crl (hash: 8k2mJgeaelcM5zgZNG4H8NbdA7s0L/HjPrp7PpAzv8s=)
2: 21642FDA720811EF8F352D23C4F9AE02.roa (hash: 3wZO5NpUkTFN/tJddHseNs+Usy8EJHQkjD9s+ZGedQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl
rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Apr 2025 04:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151932, serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6
Validity
Not Before: Apr 17 05:39:57 2025 GMT
Not After : Apr 24 05:39:57 2025 GMT
Subject: CN=6800942d-0a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:b1:19:61:81:bb:e4:da:e9:b8:6b:48:6c:
a0:41:14:5f:4d:71:a4:2d:00:4d:f9:72:21:65:6c:
2c:32:6c:29:d7:2a:3f:d7:4d:f0:f9:62:6f:77:7b:
54:2d:3d:9b:bf:9d:83:4b:6a:b7:3e:69:57:ab:55:
e3:bc:9b:e6:65:fd:36:72:9a:34:c5:28:5c:52:6b:
35:24:0c:fe:e6:27:c5:8b:81:e4:4a:3c:42:00:63:
40:7a:2c:d0:fc:19:6e:21:ac:fe:b2:60:69:55:de:
84:34:45:ec:2b:f5:96:62:9d:c3:78:26:88:0a:c9:
9e:a0:c7:5a:79:2a:f2:98:39:a6:1c:b4:ec:ef:a8:
ad:4b:3c:f0:45:c8:b7:dc:b6:82:d0:6e:0a:cb:51:
89:95:fc:64:30:1c:54:67:e9:21:20:e0:15:43:9f:
a6:03:dd:a3:93:cd:2e:e3:8d:ad:c6:0f:24:6f:36:
36:ec:4b:46:8d:65:8d:3c:87:a7:bb:62:6e:e6:0c:
0a:69:96:82:3f:40:67:44:e5:65:a3:a7:47:45:e4:
04:4d:e2:81:a2:4c:da:4f:9b:d1:6b:cd:b9:3a:82:
a9:71:43:da:20:29:b4:c6:24:de:52:bb:d6:86:f0:
f2:9d:a0:26:83:45:22:d4:27:19:1a:8e:f2:6a:9d:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:56:DD:35:9A:50:70:78:C2:F8:A6:1D:02:C7:06:00:E9:26:E2:53
X509v3 Authority Key Identifier:
keyid:F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:76:c0:96:4f:06:1c:86:1f:81:04:6b:65:ce:2f:e2:7f:f4:
e4:99:a6:b6:60:61:58:2d:9e:f5:d0:d5:33:3b:24:dc:8c:fc:
e3:ec:60:d4:0f:68:69:7b:08:2f:d7:47:1f:4c:80:8e:61:e7:
73:bf:0e:5b:6d:b9:b5:ba:35:a2:04:76:ee:f1:76:d6:a1:19:
8b:54:d4:3d:a6:d6:3f:75:95:68:de:cc:11:30:4a:7e:2e:a3:
ce:ec:db:ca:1e:12:8a:0e:81:53:28:03:16:19:74:65:74:6d:
5f:bb:03:90:d2:64:8b:96:da:39:5b:15:e4:a6:87:52:29:a1:
ec:37:99:af:0f:87:08:0e:df:b9:ff:94:37:b4:1f:b5:ff:16:
fa:a0:ce:af:2d:32:f3:fd:26:f6:da:f8:85:54:b9:7b:3d:17:
63:13:68:de:7c:aa:5e:ba:ea:57:2a:6d:da:3a:44:c6:7b:ef:
80:20:c0:c1:54:46:8e:00:92:e2:c5:b9:13:13:ec:cd:29:f4:
2f:b4:bb:98:fa:e3:f9:e8:91:5e:ee:07:71:f6:9f:b6:f5:37:
3c:80:dc:02:a1:4b:e5:d0:24:8c:00:1d:5a:d9:39:5e:8a:29:
74:ce:16:49:20:02:f2:16:a3:22:53:65:b2:66:f2:c6:07:1b:
f1:ff:1d:10
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MTkzMjExMC8GA1UEBRMoRjU0RjgwODAxNkFCNEJCMDZGNzk2QTg5NDY2N0M3MEJE
RDQ4RkJGNjAeFw0yNTA0MTcwNTM5NTdaFw0yNTA0MjQwNTM5NTdaMBgxFjAUBgNV
BAMTDTY4MDA5NDJkLTBhNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCy4rEZYYG75NrpuGtIbKBBFF9NcaQtAE35ciFlbCwybCnXKj/XTfD5Ym93e1Qt
PZu/nYNLarc+aVerVeO8m+Zl/TZymjTFKFxSazUkDP7mJ8WLgeRKPEIAY0B6LND8
GW4hrP6yYGlV3oQ0Rewr9ZZincN4JogKyZ6gx1p5KvKYOaYctOzvqK1LPPBFyLfc
toLQbgrLUYmV/GQwHFRn6SEg4BVDn6YD3aOTzS7jja3GDyRvNjbsS0aNZY08h6e7
Ym7mDApploI/QGdE5WWjp0dF5ARN4oGiTNpPm9Frzbk6gqlxQ9ogKbTGJN5Su9aG
8PKdoCaDRSLUJxkajvJqndahAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv1bdNZpQ
cHjC+KYdAscGAOkm4lMwHwYDVR0jBBgwFoAU9U+AgBarS7BveWqJRmfHC91I+/Yw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxOTMyLzQ3Q0EzNUU0NzIw
NzExRUY5REM4QkEyMUM0RjlBRTAyLzlVLUFnQmFyUzdCdmVXcUpSbWZIQzkxSS1f
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvOVUtQWdCYXJTN0J2ZVdxSlJtZkhDOTFJLV9ZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx
OTMyLzQ3Q0EzNUU0NzIwNzExRUY5REM4QkEyMUM0RjlBRTAyLzlVLUFnQmFyUzdC
dmVXcUpSbWZIQzkxSS1fWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMx2wJZPBhyGH4EEa2XOL+J/9OSZprZgYVgtnvXQ1TM7JNyM/OPsYNQP
aGl7CC/XRx9MgI5h53O/DlttubW6NaIEdu7xdtahGYtU1D2m1j91lWjezBEwSn4u
o87s28oeEooOgVMoAxYZdGV0bV+7A5DSZIuW2jlbFeSmh1Ipoew3ma8PhwgO37n/
lDe0H7X/Fvqgzq8tMvP9Jvba+IVUuXs9F2MTaN58ql666lcqbdo6RMZ774AgwMFU
Ro4AkuLFuRMT7M0p9C+0u5j64/nokV7uB3H2n7b1NzyA3AKhS+XQJIwAHVrZOV6K
KXTOFkkgAvIWoyJTZbJm8sYHG/H/HRA=
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:31:24 2025 by rpki-client