Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
File: OWpdnmemeQypf7kxMEtE57CoIc8.mft (raw, json)
Hash identifier: WjNeAAs4dUz165ZKJ/UqMYdKZ8rf5U0TsrqkVPgyRPI=
Subject key identifier: 74:D0:72:EF:8B:F2:BE:2B:DA:95:ED:2F:61:EC:8F:F3:91:A2:88:C7
Authority key identifier: 39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF
Certificate issuer: /CN=A915664E/serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
Certificate serial: 08C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
Manifest number: 08B9
Signing time: Sat 12 Apr 2025 20:16:22 +0000
Manifest this update: Sat 12 Apr 2025 20:16:22 +0000
Manifest next update: Sat 19 Apr 2025 20:16:22 +0000
Files and hashes: 1: OWpdnmemeQypf7kxMEtE57CoIc8.crl (hash: xjF2Qdv+M70+3Xn7c1v8ZOwzki8BPrCHzAvOYF9U2d0=)
2: 442D6434B14411EAB852C134C4F9AE02.roa (hash: OW9lsUV5oixQaepXd0o9wvP+ydFKTMRn+aOMtcrsIqY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl
rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 20:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2243 (0x8c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915664E, serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
Validity
Not Before: Apr 12 20:16:22 2025 GMT
Not After : Apr 19 20:16:22 2025 GMT
Subject: CN=67faca16-59ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:7d:c7:2b:59:0f:9f:ed:47:06:29:a4:2e:
18:2d:10:8e:f4:46:69:e6:21:c0:8f:20:59:9e:3f:
e1:33:0e:5b:6e:21:fa:3f:1b:c4:b7:e7:4d:f2:45:
78:2a:c0:82:f7:d8:ac:6d:3b:39:f8:69:4e:84:35:
87:dc:84:12:33:63:a6:c6:36:2b:2d:c8:2f:5c:4e:
af:3d:62:f5:bc:21:d0:3b:8c:1c:26:2e:d7:b3:6b:
92:b5:9c:75:62:a5:6b:b7:80:c4:dd:46:36:99:af:
ce:e7:80:dd:87:82:0a:7f:ee:6c:4e:3a:e8:fb:fc:
60:55:e3:73:d9:ba:cf:9d:bc:f6:ea:4e:f3:0e:e6:
6e:c3:55:47:89:b6:81:f5:43:58:61:5a:3c:6e:9f:
ab:2c:43:95:41:97:bf:88:57:cc:7d:ac:90:d6:67:
30:34:79:d0:f1:48:e8:a4:c9:f6:6d:d7:f5:e7:fc:
7f:4b:28:31:e7:58:9b:4e:23:fb:c5:57:a8:ee:23:
1e:42:c9:2c:76:47:8d:bb:e5:f3:de:29:1d:6e:e0:
8f:50:a0:9e:03:df:77:4a:6b:d1:7a:44:66:f5:8c:
d9:a8:ee:a2:52:b2:06:b1:b3:b0:ea:78:6f:71:f5:
00:b7:18:46:fe:2b:34:d1:37:c6:97:dc:e7:81:68:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D0:72:EF:8B:F2:BE:2B:DA:95:ED:2F:61:EC:8F:F3:91:A2:88:C7
X509v3 Authority Key Identifier:
keyid:39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:49:2c:c2:4c:5f:93:f9:c6:c0:5c:c0:03:9b:4c:0d:ab:aa:
0d:10:3a:fb:60:a2:cc:cd:ab:0a:c5:85:ed:a7:b6:d9:64:ea:
71:a3:e7:34:4a:49:74:8e:47:a2:fb:b1:50:24:6f:45:d2:9b:
1f:71:d4:67:4b:a9:39:62:88:7f:a2:6e:65:d9:8b:4a:fe:d0:
99:06:7c:b8:b9:ae:f0:a4:a4:ba:9c:8c:1f:29:25:a7:f8:64:
e7:ec:be:e8:e5:35:17:75:ba:d5:b5:bf:57:f5:d7:e5:a3:aa:
01:6c:06:e9:22:90:36:64:01:24:0f:94:ef:8d:06:34:69:38:
cd:37:c6:88:fa:73:86:f2:ad:5d:d0:1c:88:36:fd:17:2c:8d:
a1:dd:23:49:dd:3d:f7:23:55:74:df:f2:db:01:c0:34:4e:da:
e0:43:59:a4:89:25:50:e7:37:6d:5d:12:21:ae:34:a8:8a:d1:
14:d8:4c:c0:15:62:0e:0e:e7:b0:7e:7d:6f:bc:dc:61:62:8a:
d0:bc:59:a1:e6:fe:3f:81:d3:3a:72:4e:4a:7d:c4:8b:06:a6:
95:0c:ff:ad:e6:1e:fd:65:9d:3d:30:c1:3b:9d:72:3d:8a:7f:
44:e5:86:b0:5e:e1:aa:5a:bd:d4:4a:1d:31:57:34:34:0b:69:
29:1d:bb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 08:59:24 2025 by rpki-client