Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft
File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json)
Hash identifier: PgYyAWltbvhvfEIAup3rvXSONX9+ZCLVzs4mL4q6WqA=
Subject key identifier: 53:C3:93:0D:47:9A:6F:FD:A8:B7:F8:47:DD:7B:6E:47:2A:F6:70:D7
Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
Certificate serial: 0C67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft
Manifest number: 0C06
Signing time: Wed 16 Apr 2025 18:47:21 +0000
Manifest this update: Wed 16 Apr 2025 18:47:20 +0000
Manifest next update: Wed 23 Apr 2025 18:47:20 +0000
Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: jChcPwIn2Vv39P+lwpoMi1Zl8xyKanj/Du0sJDctjF0=)
2: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: WVkxMnAPmYEx2pir9yJBj6S9Ri2HeWB84QrUcGBIgX0=)
3: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: JKDdsewbmTds8DX8z5n44dixpiguXnj1mkHopckNnnI=)
4: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: yVyxrQ/XexxsyDCtzcGEooxv2C0cJKVEzNUoJUfFCpg=)
5: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: mpanMW6E++IIJhwRfBokQkjYWR4BXeWQNkL+zlkPQk0=)
6: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: uM9esMnbJemVTDXSBi0eBdZiTFnt+Mq64Yuw7Vo5ff8=)
7: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: EXrq9SaZzH6ZvSPXc9dAkv/CRi57VwFICygbDK3FbAQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl
rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Apr 2025 18:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3175 (0xc67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
Validity
Not Before: Apr 16 18:47:20 2025 GMT
Not After : Apr 23 18:47:20 2025 GMT
Subject: CN=67fffb38-9439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2a:f0:3d:70:d4:8b:5a:1b:1f:a8:57:78:80:
fe:ba:f8:ff:d7:98:30:da:74:da:55:8e:67:77:3e:
6a:6a:ad:85:8b:fc:6b:00:99:71:31:f0:fe:e7:26:
35:09:e2:69:a9:0b:cc:b5:33:68:4b:69:2a:e1:7e:
19:1b:88:45:97:21:7d:d8:65:0d:cf:58:46:74:05:
c4:b3:4f:10:6a:21:96:a0:d3:2d:24:d6:b4:72:ac:
01:ff:9e:55:21:53:6b:b2:e7:dd:d4:42:33:ff:c1:
0c:5d:43:d3:46:0b:10:35:77:e8:38:79:02:54:89:
33:d4:f2:74:b1:42:48:50:ab:8d:b2:f7:3d:a1:f7:
59:b7:cd:56:a8:b6:e1:2e:04:4d:38:d7:41:c9:1c:
64:98:a5:3e:74:f1:92:37:e6:b0:4d:24:68:e2:41:
a9:32:75:cd:b4:9f:f2:fb:9e:9c:0a:4d:d8:e3:f4:
9f:57:0c:92:f7:1c:ad:f4:70:fd:45:f7:2f:23:18:
5f:40:c8:42:6f:2e:7b:13:de:ed:e6:20:db:0b:98:
1a:8e:dd:44:5b:dd:9d:e1:1b:24:c4:7d:f9:99:14:
92:3f:19:75:14:a9:de:b0:44:75:f9:80:92:c8:25:
90:6c:1f:b6:82:a6:74:0d:04:fa:d5:e8:5d:65:68:
3a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C3:93:0D:47:9A:6F:FD:A8:B7:F8:47:DD:7B:6E:47:2A:F6:70:D7
X509v3 Authority Key Identifier:
keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f0:10:7f:4d:7a:42:f8:6c:f9:f4:51:47:da:e0:18:be:69:
2f:24:27:75:9c:6f:23:56:87:cd:1d:3f:af:6b:82:00:94:cb:
9c:3b:d9:71:2f:43:f8:34:4b:b6:2b:ea:34:20:ed:1c:28:69:
dc:f5:7d:e4:73:35:f9:6a:73:2d:61:3c:30:9d:1c:3e:cd:23:
54:f3:44:0e:a0:ef:75:c8:fb:e4:46:73:5f:e5:95:ef:3f:1a:
10:ae:78:17:0c:e5:bc:a2:21:6a:53:37:e3:a0:28:01:48:da:
1e:b9:a7:7e:31:91:cc:a0:29:a6:71:96:7b:8f:5d:23:7c:06:
02:69:09:ff:fd:4e:08:58:0d:f6:b4:10:9f:0d:23:a9:d5:a7:
7e:6e:75:99:f5:cf:5c:e2:22:45:7a:9f:07:4b:52:52:54:cd:
4f:3b:b1:32:2e:f3:43:15:fe:dd:fa:98:1b:1c:aa:1c:6a:a4:
a1:25:25:70:04:6c:4e:84:49:1b:67:49:b9:0c:e3:21:9a:02:
25:3d:b4:7b:e2:44:70:02:5f:be:61:63:5f:66:45:e5:68:e4:
24:73:53:88:61:7c:bc:49:37:d5:45:86:a9:4e:25:bf:02:a2:
2d:f4:ec:91:3d:56:2d:16:61:99:40:d6:cb:28:3e:31:52:f7:
db:8c:bb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:26:37 2025 by rpki-client