Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft
File: OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json)
Hash identifier: 7a/E0QsPwv5I2G00WIRwwSMVmVscW+RarP4MejC6bGE=
Subject key identifier: FC:31:1E:A6:00:30:FB:C4:48:F5:17:94:1E:42:2E:2A:32:3E:61:F5
Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28
Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028
Certificate serial: 2409
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft
Manifest number: 23F3
Signing time: Sat 12 Apr 2025 15:45:43 +0000
Manifest this update: Sat 12 Apr 2025 15:45:43 +0000
Manifest next update: Sat 19 Apr 2025 15:45:43 +0000
Files and hashes: 1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: bY6bBuCAuqrPmRQ16flUEuAYjXZnYemaN1kpNmbIxCY=)
2: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: DNBT8zhDN25f9UDGQ5nfWBA6s2lB80HUpbXVqjHmAQM=)
3: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: tOvAiPhxRE202cumPZpJeSLK5i3uUM9dNppjhBHTGzA=)
4: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: IA4iHCGoqRIo6kbssAA01N8/wPFo68lHVDwSEc9PASs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl
rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 15:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9225 (0x2409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028
Validity
Not Before: Apr 12 15:45:43 2025 GMT
Not After : Apr 19 15:45:43 2025 GMT
Subject: CN=67fa8aa7-9ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:a3:55:29:f7:f4:96:75:eb:20:b4:5d:f9:
01:df:c1:ce:9c:f7:3b:bc:bc:95:78:68:74:34:40:
3a:7b:19:33:a4:3c:e3:62:59:71:ff:9f:ff:00:9d:
71:ba:9a:50:ab:cd:e5:02:17:22:bc:03:aa:59:4d:
f6:7f:b3:96:0e:b6:b8:b6:3a:91:a4:17:b6:ab:1b:
25:7c:00:a9:9b:0c:3e:cf:36:22:db:8c:c6:dc:fa:
7c:34:42:01:ae:14:67:ae:29:b4:e2:41:da:03:47:
14:14:26:d6:d1:98:43:d7:17:68:58:b7:6f:11:d9:
7e:e1:60:14:50:91:46:16:74:07:bf:33:fd:bc:32:
8f:c0:73:92:17:f2:e6:be:2c:1c:79:54:66:e7:df:
21:6b:49:27:f9:f8:c4:1d:ba:49:17:94:0b:8c:08:
51:28:c4:ff:e4:76:0c:4f:5d:3e:ea:b6:71:d3:d6:
23:24:f5:fb:55:07:c5:f8:de:3b:0d:e7:a1:10:e9:
20:03:db:5c:43:0b:e3:2c:ae:44:e4:b7:51:d8:8d:
4e:33:78:2a:ef:7a:fa:f8:41:ba:07:b9:c0:b0:15:
93:74:12:85:0d:ba:19:e7:ef:10:f8:f9:a1:a4:9b:
94:58:32:a6:59:95:f9:28:53:61:03:f5:55:85:05:
9e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:31:1E:A6:00:30:FB:C4:48:F5:17:94:1E:42:2E:2A:32:3E:61:F5
X509v3 Authority Key Identifier:
keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:39:02:49:e5:08:90:60:16:0e:d3:7b:11:03:77:54:d3:36:
c5:a1:2d:9b:84:41:af:cb:59:46:5a:48:8c:45:6b:ad:6c:cf:
2c:a6:40:8f:7b:f7:97:d5:57:c2:77:27:e2:e1:4f:41:49:2a:
8f:86:0c:a0:b4:27:7f:f3:33:99:02:4f:26:73:09:b6:14:7c:
ab:38:0c:ef:10:2d:58:5f:90:4c:51:d9:47:6c:d8:26:11:3c:
dd:0a:b9:fa:3d:df:c9:19:d5:73:f8:7e:aa:77:b8:f5:d4:80:
fb:10:53:9a:4a:28:ba:2e:d1:f5:55:8a:a0:7d:0a:a3:a6:8c:
93:8c:81:83:9b:e6:68:63:58:4a:25:e0:73:2b:7d:a8:3f:2f:
d8:35:78:93:68:af:d7:c3:12:76:6c:d4:24:c0:d2:c6:b5:24:
2a:aa:86:6c:45:24:04:25:ff:e0:57:38:9b:40:d8:01:82:ee:
55:f1:ef:b1:af:f9:1c:d1:f3:f2:b4:e8:24:d3:29:31:c6:2d:
f1:98:8a:e4:02:7e:da:ef:07:67:b8:f2:26:dc:e6:0a:0d:2f:
3f:25:ae:81:ef:b1:70:1a:73:90:8e:9b:de:93:7f:41:9e:a1:
bf:b9:10:30:4c:9d:ac:06:22:e4:32:1e:c5:94:68:2c:4a:52:
14:e9:96:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:29:15 2025 by rpki-client