Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft
File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json)
Hash identifier: HIFsLNsDriUeEgXRL9DNRedOCyWHEmXwOb+24Ghk0BI=
Subject key identifier: 28:7C:D9:DA:DE:4F:52:14:76:0D:21:BF:45:57:E4:ED:9E:19:C4:FA
Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26
Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026
Certificate serial: 0AF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft
Manifest number: 0AE3
Signing time: Sat 12 Apr 2025 19:14:59 +0000
Manifest this update: Sat 12 Apr 2025 19:14:58 +0000
Manifest next update: Sat 19 Apr 2025 19:14:58 +0000
Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: b6t2Lq1ITskin86rI7SzSAVV37vfKpUssukdNGgLoQE=)
2: 0F29204CB4B511EF86D6381EC4F9AE02.roa (hash: 2cXl/5f431sLYOEV9wOGgPMtNZFFmZ0haqZGiKbsEGE=)
3: 2E4BBE4EB4B511EF8A24821EC4F9AE02.roa (hash: UpMy5YvHwAoOrHu9/2m6YmhC+FBzuF02PJm6nhV30kU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl
rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 19:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2803 (0xaf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026
Validity
Not Before: Apr 12 19:14:58 2025 GMT
Not After : Apr 19 19:14:58 2025 GMT
Subject: CN=67fabbb2-39b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:81:e0:26:62:18:ee:8d:de:5b:31:86:bb:23:
19:f9:6d:5a:de:57:23:65:89:c5:4d:54:14:ac:71:
97:d7:67:7e:9b:77:9e:1d:e7:1d:7d:77:dc:45:e7:
52:4d:05:82:28:bd:5e:db:4a:58:30:c2:87:c4:d5:
43:92:88:94:61:bd:97:26:b5:b0:ad:9a:cb:70:cf:
64:63:5b:0d:22:59:08:0f:15:dc:10:7a:7c:6b:47:
b9:69:77:ae:e8:ce:29:24:e5:21:07:1d:62:a2:d8:
36:5a:b0:56:52:d4:7f:b8:4b:6e:7a:18:4b:ba:5c:
3c:2d:47:0d:87:9a:25:98:f8:3d:0b:70:ba:ff:59:
e6:a4:81:f0:a5:e9:bc:d8:73:1c:d4:bd:9f:ae:47:
6f:8c:77:7b:50:49:47:6d:6f:73:23:bb:cd:1a:00:
a4:20:e3:c4:9f:86:c5:92:e7:4f:de:cb:11:0d:96:
eb:81:30:c2:f6:4e:22:10:6d:40:bc:08:73:0e:d7:
64:15:5a:83:95:4d:54:1c:ad:00:72:c2:96:b3:fc:
37:27:0d:f7:f1:84:86:0d:60:e2:63:6f:0e:b1:6c:
49:b4:b5:0d:32:f3:b6:13:e1:df:9a:30:63:57:6d:
75:95:78:17:6f:b4:d6:4a:e7:79:6c:d6:3d:d1:23:
3d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7C:D9:DA:DE:4F:52:14:76:0D:21:BF:45:57:E4:ED:9E:19:C4:FA
X509v3 Authority Key Identifier:
keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:09:21:bb:82:5e:29:ea:2f:a9:c8:6f:da:9c:2b:8c:8d:61:
51:aa:97:b3:fb:f0:76:32:b1:27:0c:b3:b6:a6:ff:3f:f2:3a:
9c:a6:8c:f9:3e:06:0d:1d:09:cd:ab:b5:21:e4:6d:0d:5a:dd:
17:90:29:a7:93:47:18:89:bc:ce:11:6c:70:cd:1b:32:b7:46:
24:bd:08:af:56:a4:0d:44:eb:68:d3:f0:f9:b4:dd:43:1c:0a:
46:49:60:bd:4d:18:de:a1:94:e7:54:2e:05:70:64:f0:7a:78:
aa:41:ab:03:c9:3c:70:c4:30:b0:33:af:db:47:fa:c5:d0:e1:
91:ce:ed:a0:15:bf:4c:9d:19:58:6d:7a:21:7b:a9:b4:e1:b1:
55:bf:f3:04:25:b5:72:fd:25:f8:27:75:f1:ca:fb:29:35:d4:
2c:86:82:6f:21:a4:44:c5:fc:80:74:b8:a1:82:fd:7e:2d:71:
4a:de:fe:de:f7:6d:f5:fd:93:64:c4:bd:cd:b4:a0:17:0b:ef:
c9:61:64:17:4e:d4:4d:93:f6:d2:fb:bc:3c:ca:c0:72:a3:c0:
85:10:dc:c9:d7:c2:3e:8b:34:a6:b4:78:8a:2c:1e:50:2c:de:
80:89:7d:5b:2e:f6:fd:c5:9f:c2:ab:e3:a0:ce:76:01:1b:55:
23:ab:2f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:52:58 2025 by rpki-client