Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
File: X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft (raw, json)
Hash identifier: WhEJuLDeseVNbHhlO8dh9UNvUXn+dJdO2MhUz26rlvE=
Subject key identifier: 00:81:8F:47:32:12:F7:1C:D1:9B:87:06:91:5C:76:3F:76:D2:2E:06
Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
Certificate issuer: /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
Manifest number: 01D2
Signing time: Sun 13 Apr 2025 01:50:20 +0000
Manifest this update: Sun 13 Apr 2025 01:50:20 +0000
Manifest next update: Sun 20 Apr 2025 01:50:20 +0000
Files and hashes: 1: X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl (hash: wvVqRpA5zSyGIE8tGJGQyQc4PjVbxREXyoE/vr/PEZU=)
2: 5637146C507611EDB59D9E2EC4F9AE02.roa (hash: EH2CgKpJsudgq4d5ghs/SJTUKeHCisdiJwkRQRkot80=)
3: D1FCB742514711ED92E3885EC4F9AE02.roa (hash: Js88dwnU0hyC4RLKD1NQ44jyQxJzu0X07dqPCT3Ukh0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl
rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 01:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156255, serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Validity
Not Before: Apr 13 01:50:20 2025 GMT
Not After : Apr 20 01:50:20 2025 GMT
Subject: CN=67fb185c-3c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:d7:ce:63:6f:c9:0d:39:db:22:66:81:21:
35:28:b9:2c:3e:29:b2:f7:d3:32:7d:51:94:db:e7:
0e:32:fd:8d:6b:f2:bf:25:4f:67:67:55:2c:85:db:
ef:f6:c6:a4:67:e3:16:08:bf:b7:70:40:ce:3f:57:
ef:1d:ca:9c:2b:ef:b1:af:91:5d:5b:12:a4:61:36:
de:60:ff:fa:c6:ba:57:57:53:68:ce:a0:35:62:be:
b6:84:4b:3c:d0:01:50:c5:15:e2:55:5f:9d:d6:ea:
e5:14:e8:55:b2:cd:bc:a7:76:83:0e:27:27:bc:bb:
4d:65:00:c5:78:ce:fc:98:8f:c7:42:61:5b:9a:9c:
44:74:66:d9:3f:e5:f8:33:d5:0a:1f:62:1f:19:b3:
18:c7:c4:c8:20:f7:e9:2e:e1:ab:b4:ff:5e:a4:fe:
c2:21:69:7c:6d:2e:55:45:0e:0a:18:0d:07:00:07:
15:f6:3c:28:ea:ca:91:c8:90:27:0f:13:67:ec:07:
b2:35:72:b8:f1:72:4b:a3:82:8b:09:41:50:72:85:
37:f6:f0:8d:57:10:84:1e:ad:75:8e:3b:2a:d7:9d:
d8:1a:45:47:57:0e:04:bb:ca:96:7e:d9:aa:94:0b:
6a:ef:1b:8d:31:4d:ce:e1:06:c7:c7:a1:d0:03:4c:
c3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:81:8F:47:32:12:F7:1C:D1:9B:87:06:91:5C:76:3F:76:D2:2E:06
X509v3 Authority Key Identifier:
keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:be:6e:e0:54:37:da:3a:36:52:3b:85:3b:29:9e:80:d5:59:
7f:56:c6:e7:5e:68:4c:eb:ab:f9:90:c1:16:ee:fc:9e:68:09:
08:8b:47:38:f7:70:1d:b2:28:cf:04:c7:e8:0e:92:28:f1:9f:
8b:2f:fb:40:e9:be:8a:62:b2:35:ab:b0:8a:11:4f:2b:b4:a2:
35:c6:d7:6c:08:1a:d9:8c:f9:6a:f7:cf:c4:43:a7:bf:14:59:
62:3c:fd:fe:72:ac:24:28:62:b2:9d:87:84:8a:71:52:82:d8:
08:02:9d:19:2f:b2:03:2f:12:63:74:35:43:ee:71:c0:26:1f:
15:2d:24:2c:7f:6e:22:4c:16:77:00:d7:4c:bc:6e:fd:ee:a9:
c7:80:d5:1b:3e:87:88:f2:a3:99:90:28:9a:99:a6:7f:b1:34:
be:06:a8:cc:f7:40:e9:fb:f8:fb:6d:ef:6f:3b:e1:6f:5d:48:
e9:a0:27:6a:ec:22:e0:b4:4a:e5:e2:39:f7:5e:10:3a:e3:85:
39:96:19:6d:d4:10:99:93:d2:ad:dd:c3:a9:a5:11:b2:3f:a9:
7f:1d:b2:7f:a4:0b:1e:bf:63:6e:dc:bb:09:ef:e6:52:7d:e0:
a1:02:99:5b:4c:68:4c:9e:dd:99:01:9a:d0:54:dd:e1:f4:b1:
4c:7c:6d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:35:48 2025 by rpki-client