Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
File: t88LJwp_2x1xeui5edHuD_iL1E8.mft (raw, json)
Hash identifier: wB6uyd+eo9sTWY6tFJ20QmkYRL6tz2YaoJKxJm/hmc4=
Subject key identifier: 29:A0:A7:92:C6:85:54:30:D9:5A:BF:59:8A:1F:54:B4:5C:1A:DC:61
Authority key identifier: B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F
Certificate issuer: /CN=A915B50D/serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
Manifest number: 6D
Signing time: Sun 13 Apr 2025 05:40:47 +0000
Manifest this update: Sun 13 Apr 2025 05:40:46 +0000
Manifest next update: Sun 20 Apr 2025 05:40:46 +0000
Files and hashes: 1: t88LJwp_2x1xeui5edHuD_iL1E8.crl (hash: jkywQmMa+15FGm7UgfD/p4s8zGBg+Y/pyKBsrbnuzmU=)
2: 85CDB6087C1211EF8E490677C4F9AE02.roa (hash: KFCUhuojUE9z3vG4Nxdn/HgqQMitwPXfCwdmjU8xUaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl
rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 05:40:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B50D, serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F
Validity
Not Before: Apr 13 05:40:46 2025 GMT
Not After : Apr 20 05:40:46 2025 GMT
Subject: CN=67fb4e5f-a682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:7f:27:1b:54:0c:d6:a7:07:5d:92:8f:ef:
41:a0:0d:be:8f:bb:cd:53:a8:84:81:52:38:9c:a8:
67:c1:30:b5:b7:c0:fe:03:6c:4f:e7:29:62:93:79:
0f:59:86:af:54:63:91:ad:d3:d9:19:2f:a9:dc:08:
94:a4:57:02:72:8b:ab:58:7f:d8:7c:9b:bb:8c:ec:
79:ee:02:ea:a6:a3:26:79:73:3f:fa:8c:55:73:1c:
da:4d:fe:3b:04:03:c4:5b:f6:44:d7:5a:e1:61:90:
5d:ea:80:79:6e:c7:be:3c:e7:07:4f:a8:f1:97:08:
43:dc:e6:cc:75:a3:04:5d:19:f5:de:28:23:45:91:
70:bf:06:2a:ca:df:d6:8b:95:67:d1:66:17:e6:ed:
6d:c9:65:ae:30:dc:81:e1:db:cd:cf:0d:b0:f0:80:
8b:12:04:e9:eb:d3:65:fc:01:02:a7:8b:5c:ce:53:
02:cf:54:c7:a6:61:8e:78:9b:62:23:d0:50:4e:bf:
f4:3f:49:2e:3b:aa:c6:4d:82:6a:e4:a1:ae:3a:84:
e2:15:01:eb:44:7e:82:12:a0:5d:c4:bc:00:3c:58:
25:e9:6c:31:85:67:dc:44:6f:c8:16:33:c1:a1:4b:
bb:3d:ec:97:92:d2:3e:16:ff:5e:06:d6:e6:0d:da:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A0:A7:92:C6:85:54:30:D9:5A:BF:59:8A:1F:54:B4:5C:1A:DC:61
X509v3 Authority Key Identifier:
keyid:B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:47:f3:f0:17:a0:7b:80:48:d9:54:a0:40:9c:94:08:36:d0:
fd:88:26:d9:d8:91:1e:da:ff:c9:e5:84:1f:8d:ea:31:21:d6:
cb:ea:83:f3:49:23:66:ec:88:14:6e:e6:97:d9:53:b0:d6:d2:
d2:52:da:e0:56:01:86:13:3c:85:ce:44:ee:2c:fc:2c:7e:15:
85:85:79:2b:58:8f:c7:ff:a9:1a:56:fe:1f:f5:4d:72:e9:ac:
fc:77:3e:10:a6:20:69:de:21:6b:72:2e:72:ec:4b:d9:9a:28:
9c:78:46:da:44:3a:61:52:16:0e:d2:90:e4:dd:61:f0:70:c9:
f0:f4:78:ef:a7:b5:d9:ec:b4:51:ad:71:ed:fa:43:52:00:f3:
2f:50:df:63:c9:94:d9:ca:d6:5b:ea:7e:1a:b0:4f:1c:9c:6f:
a2:f8:47:7f:cd:86:3c:70:11:e6:8c:fa:03:ea:06:80:e9:b9:
36:ef:19:d3:70:f5:e0:87:a2:65:bb:d9:3c:d9:41:1f:dc:42:
3f:59:c3:34:32:e8:17:86:5d:3e:fd:f7:a6:09:d3:1f:dd:d2:
12:b6:d1:7e:c0:36:b8:7b:45:d2:bd:b3:06:6e:85:9d:17:96:
49:b1:54:a9:9f:4f:85:7a:ba:82:1d:d2:05:43:f0:46:43:4b:
fb:a8:eb:59
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QjUwRDExMC8GA1UEBRMoQjdDRjBCMjcwQTdGREIxRDcxN0FFOEI5NzlEMUVFMEZG
ODhCRDQ0RjAeFw0yNTA0MTMwNTQwNDZaFw0yNTA0MjAwNTQwNDZaMBgxFjAUBgNV
BAMTDTY3ZmI0ZTVmLWE2ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCz538nG1QM1qcHXZKP70GgDb6Pu81TqISBUjicqGfBMLW3wP4DbE/nKWKTeQ9Z
hq9UY5Gt09kZL6ncCJSkVwJyi6tYf9h8m7uM7HnuAuqmoyZ5cz/6jFVzHNpN/jsE
A8Rb9kTXWuFhkF3qgHlux7485wdPqPGXCEPc5sx1owRdGfXeKCNFkXC/BirK39aL
lWfRZhfm7W3JZa4w3IHh283PDbDwgIsSBOnr02X8AQKni1zOUwLPVMemYY54m2Ij
0FBOv/Q/SS47qsZNgmrkoa46hOIVAetEfoISoF3EvAA8WCXpbDGFZ9xEb8gWM8Gh
S7s97JeS0j4W/14G1uYN2tcjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKaCnksaF
VDDZWr9Zih9UtFwa3GEwHwYDVR0jBBgwFoAUt88LJwp/2x1xeui5edHuD/iL1E8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCNTBEL0U2ODI2ODNDN0JC
QzExRUY5MkVFMUE2NkM0RjlBRTAyL3Q4OExKd3BfMngxeGV1aTVlZEh1RF9pTDFF
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvdDg4TEp3cF8yeDF4ZXVpNWVkSHVEX2lMMUU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC
NTBEL0U2ODI2ODNDN0JCQzExRUY5MkVFMUE2NkM0RjlBRTAyL3Q4OExKd3BfMngx
eGV1aTVlZEh1RF9pTDFFOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADRH8/AXoHuASNlUoECclAg20P2IJtnYkR7a/8nlhB+N6jEh1svqg/NJ
I2bsiBRu5pfZU7DW0tJS2uBWAYYTPIXORO4s/Cx+FYWFeStYj8f/qRpW/h/1TXLp
rPx3PhCmIGneIWtyLnLsS9maKJx4RtpEOmFSFg7SkOTdYfBwyfD0eO+ntdnstFGt
ce36Q1IA8y9Q32PJlNnK1lvqfhqwTxycb6L4R3/NhjxwEeaM+gPqBoDpuTbvGdNw
9eCHomW72TzZQR/cQj9ZwzQy6BeGXT7996YJ0x/d0hK20X7ANrh7RdK9swZuhZ0X
lkmxVKmfT4V6uoId0gVD8EZDS/uo61k=
-----END CERTIFICATE-----
Generated at Tue Apr 15 06:42:59 2025 by rpki-client