Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft
File: zGryB1D43jn7dcCh0KRBmXytN7g.mft (raw, json)
Hash identifier: FjAhVttnjXrLktKpl/rvGToKNDutA9I31s8ybgI6fHo=
Subject key identifier: 75:E5:A3:35:7C:01:99:92:9B:53:C5:D3:36:8C:5A:88:08:49:F9:8B
Authority key identifier: CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8
Certificate issuer: /CN=A915A9FD/serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8
Certificate serial: 076D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft
Manifest number: 0767
Signing time: Wed 16 Apr 2025 21:14:04 +0000
Manifest this update: Wed 16 Apr 2025 21:14:03 +0000
Manifest next update: Wed 23 Apr 2025 21:14:03 +0000
Files and hashes: 1: zGryB1D43jn7dcCh0KRBmXytN7g.crl (hash: rU0PDGUCAIsX1FIk/t6AKgJzLpvyT+Dfj/tKe7kbbRc=)
2: FEA470A4137911EBA3A5F233C4F9AE02.roa (hash: QjiKcxVrNmXXSljrmXhzSyRwgcgVY4JB5CT1DEPPeEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl
rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Apr 2025 21:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1901 (0x76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A9FD, serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8
Validity
Not Before: Apr 16 21:14:03 2025 GMT
Not After : Apr 23 21:14:03 2025 GMT
Subject: CN=68001d9b-8daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:37:88:67:cf:c2:cd:f0:a9:d9:b7:c8:9f:
cc:c4:6b:b7:25:63:7a:ab:01:17:9b:10:47:fc:f8:
ea:93:b3:1d:f0:b0:25:99:2e:e5:6d:c7:c4:7f:46:
fb:d5:25:57:50:fb:9a:8b:07:3c:9d:c6:93:98:9e:
65:a7:99:54:d8:98:60:30:f2:a5:9c:b9:06:17:dd:
d8:2d:0a:83:2d:97:dd:dc:0c:a4:24:a4:2e:61:e6:
92:41:f9:ce:92:f4:ff:0c:1f:be:86:90:5d:fd:14:
43:7d:d6:d2:25:fa:8e:8f:5c:d0:95:0e:45:ab:5c:
4b:39:a6:53:fb:e4:1f:8a:fc:ec:fb:b3:c4:04:88:
a3:70:60:cb:ac:11:ce:eb:45:d9:0c:72:b5:f5:2f:
ef:f4:23:34:4d:46:ff:3d:65:de:ac:c5:03:62:54:
d5:6c:79:4e:e1:e2:2f:fe:22:cf:09:c9:f3:de:ef:
df:26:20:04:49:db:45:f5:dc:d8:19:16:9c:f2:df:
9e:14:83:bf:ee:f2:5b:06:a1:dc:07:8b:4c:2f:a4:
44:3a:a4:8a:88:c7:a3:3a:50:d9:d6:78:90:e4:f7:
54:92:55:2f:30:5d:48:cf:30:ec:70:27:da:44:78:
b1:c7:22:bd:e2:1f:76:33:3d:fe:a8:de:d9:68:27:
c0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E5:A3:35:7C:01:99:92:9B:53:C5:D3:36:8C:5A:88:08:49:F9:8B
X509v3 Authority Key Identifier:
keyid:CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:16:db:70:55:21:b0:80:cc:0d:44:ab:55:60:58:0b:01:a3:
57:00:4b:93:e4:3d:d3:be:1b:48:09:55:8c:3f:da:55:63:dc:
ce:95:68:17:7a:92:aa:df:51:12:60:af:3d:7a:0c:81:67:27:
34:e3:3d:00:bb:ee:a9:8a:88:c9:80:ec:1c:66:37:2c:f8:5b:
53:d1:a5:3c:e8:ba:ee:8b:dc:72:77:9a:bf:c1:f7:4b:06:87:
32:19:5d:15:23:43:f0:f4:bb:79:bb:83:a8:98:86:c4:64:8c:
80:5f:67:13:dd:43:90:f6:59:6d:e5:43:84:35:45:14:a2:ef:
8a:5b:6c:b3:60:fb:90:0b:61:ef:ab:18:bf:d2:bc:8d:4a:57:
b5:f6:b5:1b:72:cf:fe:77:9a:03:ef:c7:da:f7:6f:dc:22:d4:
5d:9f:2c:d8:fd:5a:b9:59:81:1a:71:c2:58:89:7c:f1:dd:c1:
e5:e2:80:cb:e7:74:8e:10:26:b2:3d:dd:b9:44:3a:ac:cf:66:
e2:2c:7c:aa:14:f1:5d:35:2d:43:84:f1:64:56:a5:a8:cf:a6:
ce:6b:9a:50:75:30:a7:5f:82:2a:e2:1d:b2:63:ef:ac:0c:15:
61:70:ce:35:a1:ad:14:f6:d6:c9:7c:9e:2d:1a:0b:2c:1a:06:
d1:d3:7b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:10:35 2025 by rpki-client