Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
File: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft (raw, json)
Hash identifier: C278miP3zZ1qZdIKQZlTxXqOSX+a3P3eFA520B3G+e4=
Subject key identifier: 5F:75:02:6C:28:97:C4:30:D5:59:AD:A1:5C:E3:DF:04:8E:CE:1B:9F
Authority key identifier: 90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25
Certificate issuer: /CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25
Certificate serial: 0103
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
Manifest number: 0100
Signing time: Sun 13 Apr 2025 03:58:54 +0000
Manifest this update: Sun 13 Apr 2025 03:58:53 +0000
Manifest next update: Sun 20 Apr 2025 03:58:53 +0000
Files and hashes: 1: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl (hash: 4CuH4tga/uGnJ+fVsFz/yWnofWCIzM6oARvFoDvrIAg=)
2: 38F9C792948F11EEAE636E0FC4F9AE02.roa (hash: 3QR/UvKzS+sKKfIIK9uHF2so+MGpUcPtji7e/5xzyuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl
rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 03:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157378, serialNumber=90B9BABD742B275743FB715E135975638E9C2F25
Validity
Not Before: Apr 13 03:58:53 2025 GMT
Not After : Apr 20 03:58:53 2025 GMT
Subject: CN=67fb367e-0838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:80:16:3a:bb:2d:35:b3:2f:f8:6d:78:ac:
e8:7b:8c:f9:3b:7c:ed:a7:01:b0:88:a8:2a:a8:cf:
f6:20:9c:0e:b2:24:34:df:8a:a8:a0:b3:58:4e:fe:
ce:b5:97:d2:d2:a4:88:f4:5d:3b:53:55:db:fd:6c:
24:c2:a7:4e:af:6b:54:5e:da:0c:0a:de:94:da:d7:
04:35:47:52:c0:3d:7c:5e:d6:8e:de:27:13:65:21:
1b:b1:e2:47:14:0a:bd:47:28:fc:e7:31:ce:f3:c9:
a8:8b:e2:e4:d3:75:1b:9d:6b:a3:75:c0:51:ae:5b:
5d:17:8b:9b:79:10:75:ac:8b:38:bc:d2:de:ac:bf:
f2:0e:6e:32:f3:3c:81:6f:29:7a:c8:cf:2c:03:d2:
c4:93:48:bd:0e:ac:c9:f6:8c:94:6c:eb:df:6b:28:
d6:4d:ca:b4:f7:d1:9b:5b:a0:10:4c:4c:2c:ea:ce:
26:05:a1:ef:47:1a:fa:b0:81:83:3d:08:92:83:e5:
d0:49:c2:26:d8:40:d1:82:52:87:dd:a2:5c:15:18:
63:49:07:24:da:9e:f4:60:d5:dd:2b:1f:61:00:09:
7e:de:7d:95:d2:be:57:03:89:5d:93:f7:7b:82:be:
1b:c7:b4:6a:7a:67:ca:5e:ce:63:cc:a1:9b:08:e2:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:75:02:6C:28:97:C4:30:D5:59:AD:A1:5C:E3:DF:04:8E:CE:1B:9F
X509v3 Authority Key Identifier:
keyid:90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:09:32:26:de:1e:32:9d:7b:dc:16:5d:ca:e6:cd:b2:b9:89:
34:d9:c6:48:20:55:87:79:ff:f7:22:84:f8:57:8b:b3:3b:1e:
c1:b7:5a:fa:63:5d:ec:41:1d:21:a5:75:2d:f9:b5:89:63:c9:
d1:e6:3e:f0:2b:fe:3c:4c:a1:8b:9d:f3:71:c2:47:aa:7d:52:
80:d1:2f:5b:ff:d4:06:19:8e:63:59:82:8a:ee:33:7e:11:cc:
22:5f:5a:4e:5f:ff:62:ac:b7:94:c4:19:c6:02:aa:8b:02:6d:
8a:40:16:7a:b7:c4:f4:4d:eb:03:7b:08:b7:2f:69:c2:48:11:
75:19:f7:80:68:51:e8:84:d4:b5:55:31:2d:46:67:75:4c:f8:
74:44:0d:4f:f6:db:6b:37:65:30:68:f2:48:6c:3f:04:f5:1e:
be:f1:93:25:a2:bc:a2:82:93:f7:1e:b5:48:a7:97:ec:b3:a3:
60:e4:06:0f:28:94:ee:19:a5:fb:ed:00:17:de:bd:f8:bb:84:
1f:6b:af:20:ed:8f:fb:69:41:66:34:67:5d:aa:0a:28:89:92:
ad:f8:3b:04:c8:47:a7:a9:e1:fc:c9:f3:42:e5:5b:d5:b5:c6:
24:e9:d8:04:af:19:7e:11:65:0b:f9:b6:7b:33:81:7b:0c:58:
4b:c7:99:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:38:30 2025 by rpki-client