Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json)
Hash identifier: 8PRc7eO+RmiQ38lqXmbkTd56ENUMDVGEywinmOGo1+8=
Subject key identifier: C6:D1:5C:F7:CE:88:BC:26:43:03:7B:CD:D1:30:9B:01:B0:47:86:82
Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
Manifest number: A5
Signing time: Wed 09 Apr 2025 05:03:23 +0000
Manifest this update: Wed 09 Apr 2025 05:03:23 +0000
Manifest next update: Wed 16 Apr 2025 05:03:23 +0000
Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: 1LD5PH9i6MmUAHZRZ4SLePwsFUaQFZ+g545N78N1zOo=)
2: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: 4EHRpeMi8/g5A65WYX96AeSBYgGFYLJaPZfMVf/nA+U=)
3: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: 6APWnum5XO+1AjxPLod4M585Hvd075IxDDxMYdDbIE0=)
4: 680D797023E611EF8165F17BC4F9AE02.roa (hash: A1M8cgXwpueoyV//ap2OtyS//Qc9zVR+BitCHlrnuUc=)
5: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: qoBV7sb5eaX6g1s+qv3xkdJSZExJ62bMwOk41VIcbsE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 05:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156F14
Validity
Not Before: Apr 9 05:03:23 2025 GMT
Not After : Apr 16 05:03:23 2025 GMT
Subject: CN=67f5ff9b-d19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:e3:7d:1b:76:71:fc:d0:cf:00:04:8c:07:
1a:48:59:4b:8c:0f:ed:41:08:63:03:07:10:d4:58:
de:2c:9a:6d:4c:20:92:c6:ac:7b:16:0b:7b:e6:f4:
8f:9d:a9:ad:1f:6a:83:0d:15:f1:da:9c:35:d2:6f:
84:54:9c:50:56:4c:0a:b5:8f:5e:f3:c7:23:58:e4:
e1:a3:7b:cf:c2:72:24:52:4f:66:90:2f:d9:ba:96:
9d:99:22:78:72:b2:8a:dd:e4:b8:f3:6f:85:a4:68:
20:ba:cd:c7:1f:56:e3:61:c4:71:cb:5e:fc:7d:0b:
a3:51:55:fc:8e:83:46:91:a8:83:bb:c7:a5:dc:7a:
f6:8e:c1:08:61:b5:0f:28:ff:f7:04:70:ca:7a:90:
e2:dd:79:89:7e:70:84:a5:22:06:fc:64:d2:73:ec:
7c:91:ed:a9:c4:a3:65:8f:7b:b0:b6:f2:44:da:dd:
b9:ab:71:f7:a5:b1:03:10:19:cc:68:e2:31:67:13:
b0:d4:a0:a2:27:e4:50:99:2f:7a:78:ea:f6:dd:cb:
75:41:5d:29:19:8a:50:1b:9a:03:38:cc:42:bd:6b:
01:0b:ac:79:ce:15:de:d5:79:5d:27:dc:83:1c:58:
fa:cc:77:df:ca:30:98:1c:e7:79:b8:cf:12:e3:76:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D1:5C:F7:CE:88:BC:26:43:03:7B:CD:D1:30:9B:01:B0:47:86:82
X509v3 Authority Key Identifier:
keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a3:f4:60:89:02:9d:c3:56:9f:22:fe:3b:99:23:f7:ea:4b:
6c:98:b6:8c:16:74:51:61:54:ce:ca:20:1b:cc:77:1f:b6:b3:
de:78:60:6d:48:28:7a:a2:51:01:5b:df:24:ce:8a:74:22:a3:
64:17:42:11:83:55:22:b5:7d:d7:ed:15:a2:27:55:81:97:1b:
d0:10:02:25:3f:b8:90:36:e6:6c:16:ae:41:90:df:24:7c:97:
b4:9a:73:e4:25:8b:d1:0b:1d:ce:e7:1d:fc:bf:e7:e8:84:6d:
73:34:76:48:22:f8:82:d8:eb:4e:64:f8:aa:01:0e:b0:5a:4c:
42:5d:5c:73:ad:9d:38:8f:f6:7b:4c:42:a6:94:f3:a0:bc:8b:
23:66:b4:9c:e4:87:03:fb:4b:93:52:7b:ea:c6:4d:6d:26:83:
39:93:26:ed:be:87:37:31:03:72:7d:73:41:8e:00:83:0d:77:
52:b6:13:ad:bd:7e:1a:80:a8:36:f0:26:6b:a9:d4:94:e2:d6:
93:2c:6b:2a:da:5e:a7:31:48:cb:77:66:f3:e8:07:74:de:b1:
5f:2f:98:63:19:48:db:e4:5d:a0:3a:25:70:6a:49:1b:21:78:
d3:77:11:e0:f9:ea:4b:72:f3:cd:92:f9:5e:ee:20:c5:af:6d:
ab:9b:50:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:50:53 2025 by rpki-client