Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
File: ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft (raw, json)
Hash identifier: 4c8pi0szkBFR/jw17D6w1JZ74FeP3ddKpmSYwadfSoQ=
Subject key identifier: BE:99:AD:50:91:33:99:C8:21:0E:3E:49:FA:00:01:00:69:2E:01:09
Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
Certificate issuer: /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Certificate serial: 3474
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
Manifest number: 3474
Signing time: Tue 08 Apr 2025 14:46:03 +0000
Manifest this update: Tue 08 Apr 2025 14:46:02 +0000
Manifest next update: Tue 15 Apr 2025 14:46:02 +0000
Files and hashes: 1: ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl (hash: B2DGv5tw3KXrGQ5aaM52F6GhMDiTZs3dGTiq2Lpn7Hs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 14:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13428 (0x3474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597E8
Validity
Not Before: Apr 8 14:46:02 2025 GMT
Not After : Apr 15 14:46:02 2025 GMT
Subject: CN=67f536ab-8f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:32:5e:21:73:04:96:95:e5:7b:75:9d:64:
1b:b3:c3:dd:3f:1d:f0:ab:ee:e9:51:4e:15:1a:c1:
69:83:6e:5f:e5:2d:fa:43:43:e3:65:3b:65:4a:8d:
b4:29:14:d8:c2:ac:88:a4:a1:0b:e1:bb:79:ef:af:
53:14:e3:fd:fc:cc:d2:16:e0:44:e5:d3:66:8f:c9:
64:99:3c:81:e1:01:9c:2c:c9:67:70:59:2f:0c:91:
83:0b:e7:d1:75:71:6f:d3:55:b1:4a:eb:c5:de:5f:
b9:a8:1e:b7:28:26:57:6e:e2:f8:35:71:59:5e:c8:
5d:34:f9:99:b4:b5:a2:96:32:7c:10:87:91:ce:a2:
0a:29:46:59:0b:99:a0:17:cd:38:d3:d8:e7:36:ba:
c3:e8:49:e7:ff:fa:11:ec:e8:5d:bf:95:58:88:19:
d8:bb:8a:d9:0f:0c:88:00:ba:ef:d0:2b:47:6d:d9:
45:a6:2a:bd:f6:54:32:35:87:0f:6e:9d:4f:d1:b4:
d0:7d:97:9e:ad:bd:2a:60:c8:d0:46:76:43:39:f9:
a8:c5:70:67:3b:1c:05:de:dc:52:23:fb:e9:3f:25:
dc:d2:d1:10:43:07:8a:a2:8e:6a:1d:cb:48:7f:f3:
f3:5b:46:45:84:89:7d:3c:60:c4:f9:8c:8b:1b:3e:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:99:AD:50:91:33:99:C8:21:0E:3E:49:FA:00:01:00:69:2E:01:09
X509v3 Authority Key Identifier:
keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:59:5c:e3:b4:ea:c5:10:40:df:77:50:2c:35:ce:00:c8:87:
16:ec:9c:9d:d5:9c:df:69:72:9e:ea:46:91:a8:01:3e:e4:fd:
10:86:f3:1e:fb:bc:07:8c:85:87:16:19:b2:26:33:1b:ed:ef:
e0:61:bf:49:89:29:98:f4:db:42:be:84:dc:32:7d:ca:04:2c:
30:83:7c:ae:26:41:62:8e:82:6b:1d:dc:fc:08:0f:a3:2d:f2:
a3:41:b7:41:a8:84:52:2a:79:be:c9:72:0b:28:27:74:9d:6f:
f9:8a:ba:98:0d:5f:6d:f7:49:f1:72:1a:0c:ac:9d:c8:8c:de:
45:09:6a:37:4f:a5:ef:9b:7b:f1:6a:f2:01:fa:f1:62:be:22:
da:b2:bb:57:62:dc:83:2a:d2:80:26:f2:a0:32:2d:6f:08:91:
84:0f:cc:ca:64:dd:48:08:39:4f:0c:4c:8d:d7:e8:1c:b2:a5:
ab:cf:f8:4f:44:d7:18:c0:f5:59:53:68:ef:ee:c0:53:8e:9e:
53:f6:4c:a6:46:dd:37:8c:ab:5e:1b:38:a9:1b:a7:db:1d:18:
f1:45:d3:77:54:9d:02:4e:a0:93:95:f1:51:65:d8:20:de:61:
e1:1e:6e:11:aa:08:8a:4c:34:19:6c:bd:9b:5b:1a:bd:72:2f:
e5:7e:19:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:33:05 2025 by rpki-client