Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft
File: aw5C2IWeCxzeVBV6y412BK0_8bM.mft (raw, json)
Hash identifier: 8GIQ2NCfJGmZUvqIwdVM/BOp3FpTOPnGJcVmtcYaLV0=
Subject key identifier: FC:89:74:79:C1:34:8B:6B:BE:5C:BC:F3:4E:7A:81:5F:83:8A:40:AA
Authority key identifier: 6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3
Certificate issuer: /CN=A9153457/serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3
Certificate serial: 3561
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft
Manifest number: 34FC
Signing time: Sat 12 Apr 2025 14:21:11 +0000
Manifest this update: Sat 12 Apr 2025 14:21:11 +0000
Manifest next update: Sat 19 Apr 2025 14:21:11 +0000
Files and hashes: 1: aw5C2IWeCxzeVBV6y412BK0_8bM.crl (hash: BDUR+eo+3C/6VW9drZ8AjDgte3eizTE/LMyE/AsfU/o=)
2: 4265BD864D5811EF98470D6DC4F9AE02.roa (hash: DI0whxBE0VRYz5yAE2OsMixzXg5yBtVwc2go7LOY180=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.crl
rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 14:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13665 (0x3561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153457, serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3
Validity
Not Before: Apr 12 14:21:11 2025 GMT
Not After : Apr 19 14:21:11 2025 GMT
Subject: CN=67fa76d7-aaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:2e:5b:c5:26:38:20:71:43:e1:58:f0:f0:
a9:1f:37:c6:3f:51:60:be:af:64:82:98:19:c5:29:
3b:80:dd:34:c0:e4:08:3c:fd:30:e0:b8:9b:c1:a8:
10:d0:5b:d1:7a:bd:6d:fe:e0:33:88:f4:85:0a:9c:
52:a9:69:30:07:0e:9b:cb:38:0a:d9:d4:0d:6f:69:
a1:69:11:c9:73:fb:72:e5:69:08:65:dd:10:03:81:
18:40:c4:42:34:bd:ec:20:e2:5c:8a:27:7d:59:b8:
ac:d6:0c:3b:e4:28:47:53:3e:88:1f:27:c5:7a:7c:
2b:37:36:bf:45:ce:6c:e9:10:94:b9:c9:9d:bf:77:
12:e7:e2:c6:f4:b8:3d:5e:2c:86:98:3f:cc:21:eb:
ab:2f:47:c1:29:85:b6:66:7d:81:e1:0d:92:58:f0:
be:f7:d9:45:4e:42:7e:78:f4:c1:fa:c9:4e:04:53:
4a:49:1c:f0:f9:2d:25:fd:78:54:04:35:5e:ab:f0:
ed:03:42:cb:2b:94:f4:6c:32:a5:72:e3:18:94:f7:
95:2a:83:d9:ed:c0:fe:3b:4f:32:ce:ae:e6:1b:60:
24:43:5e:1f:55:a1:f6:20:44:96:2d:d1:81:b8:30:
03:93:98:f0:ca:95:6b:02:0a:09:d4:a7:a6:30:2f:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:89:74:79:C1:34:8B:6B:BE:5C:BC:F3:4E:7A:81:5F:83:8A:40:AA
X509v3 Authority Key Identifier:
keyid:6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:6b:e9:26:1d:51:69:13:41:77:59:1f:df:1d:6b:fe:cf:3f:
95:e0:40:2f:be:87:6a:a5:dc:f9:61:40:dd:25:ac:e3:90:e0:
76:56:84:71:bc:85:5d:32:f2:53:cf:53:51:0d:99:67:c9:24:
9b:ff:07:ed:5a:65:58:f0:7c:05:dc:33:e2:2f:90:99:cb:f8:
1b:ea:6d:0f:cd:b7:ee:45:80:a1:df:21:72:87:53:b0:ef:f9:
77:cc:8b:68:cf:2a:5f:45:35:d0:6a:a4:7f:2c:fa:3a:34:00:
72:3e:fa:e1:4b:1a:f1:84:49:2c:04:91:88:f4:f9:d6:1c:4d:
cb:18:09:43:00:bd:e7:e3:d9:81:13:b1:77:27:04:13:f5:a3:
27:ff:a6:40:8f:96:b6:21:d4:3c:1a:d1:d5:6c:84:25:af:f0:
71:14:eb:67:7f:4a:ab:c0:26:00:5b:5d:0b:15:89:25:5c:8d:
40:25:66:d0:d8:d9:0e:73:fd:51:5c:a6:8b:0a:30:5e:45:6a:
fd:31:f9:41:6e:30:6e:cf:44:bf:d7:0e:d6:5a:6c:15:39:a2:
72:97:33:65:f2:51:dc:1a:31:82:61:03:1a:2b:b5:ee:96:94:
0b:9a:83:e0:93:27:b1:51:2b:f5:8a:67:c5:4d:0e:f1:4b:a8:
39:f8:a1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 19:12:57 2025 by rpki-client