Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft
File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json)
Hash identifier: Ufk4t5Ytg/GXBEluafHQ87e8hMM5+9wUyk9oraGDS8w=
Subject key identifier: CC:99:A0:64:A6:40:A9:FE:CD:BB:D4:1C:8D:54:3A:57:57:12:F0:02
Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
Certificate serial: 0820
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft
Manifest number: 07DF
Signing time: Sat 12 Apr 2025 20:47:01 +0000
Manifest this update: Sat 12 Apr 2025 20:47:00 +0000
Manifest next update: Sat 19 Apr 2025 20:47:00 +0000
Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: GP3f9xVAYGc6WkZ9xQ1GKm4OF63n4Af9WEDEjzHJXaU=)
2: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: AKMar7M+pQ4y6XoQFhZVW0JujFvWAFeIi5OqHavhpXY=)
3: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: q8NO+KLP5CuELgICWVCpo8gcxUyHjK7jNGZWSmFkgjE=)
4: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: blrAgl3fjG1pjrvf4Xs1bBFsczydDh5kF9/bkGOAsSQ=)
5: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: kCdoRWjX7vh3I5Nidiix3CmYE03MKnq+oXPvSl8Xnds=)
6: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: e0wK1EfjjzOwAebCT+bRt55wU2Y1pEBpk2uJbmvJGI8=)
7: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: QIJzT5GapeGSiWUEH6w75YrO1W7X/FkG1tF+eQj92Fk=)
8: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: Y77Vm4FDvzInxKFqdlF/vRWJ/K3yltYPE+Pe0UH2y2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl
rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 20:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2080 (0x820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
Validity
Not Before: Apr 12 20:47:00 2025 GMT
Not After : Apr 19 20:47:00 2025 GMT
Subject: CN=67fad144-314e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:ee:21:81:12:cb:94:d7:6a:87:6b:1e:1b:
0a:af:c1:f1:e8:c1:10:eb:56:33:d6:23:91:75:b6:
20:9d:e3:c6:f6:0f:0c:c8:be:e2:f9:fa:ef:20:95:
5f:6f:55:d0:b2:57:dd:41:1c:f8:9d:5b:0c:0c:06:
5b:c8:93:70:96:80:80:29:80:db:18:57:4b:d8:32:
7b:17:0d:7d:d0:68:78:34:55:27:ce:23:73:aa:22:
89:42:de:a6:aa:18:d3:f8:cb:11:b1:9b:d3:61:d4:
f1:01:86:55:a6:45:b9:f1:a6:b8:3c:3c:18:2a:35:
16:56:71:66:9a:85:36:c8:78:4e:c1:8d:f1:c2:3b:
fe:8f:94:00:16:5b:5f:a3:72:11:39:03:3c:0c:f0:
78:cf:ea:0f:c6:6b:be:eb:dd:22:5c:dc:d8:7a:ca:
b0:ea:a6:0c:2e:33:8b:6a:61:dd:58:56:48:0b:66:
b2:ca:ab:d2:0c:d0:a2:72:69:4f:fb:7d:89:ae:98:
02:a6:4e:18:ee:9c:bc:c3:2a:db:62:2d:75:81:5a:
ec:61:3d:93:af:4a:c5:23:1e:e1:81:8c:8d:8f:64:
28:b5:2c:2b:10:18:55:72:69:df:0c:83:ec:e4:de:
97:a7:ac:fa:ed:85:0d:a3:24:85:16:60:05:44:ee:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:99:A0:64:A6:40:A9:FE:CD:BB:D4:1C:8D:54:3A:57:57:12:F0:02
X509v3 Authority Key Identifier:
keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d2:fb:ff:02:2d:2f:32:c2:96:a0:a9:04:86:27:cc:52:4b:
77:d1:dd:9a:c4:10:25:a4:ec:e9:bf:6e:0b:48:46:0d:ed:62:
d6:1f:a7:5e:b6:27:f1:3a:17:f0:f3:1e:15:3c:d8:6c:77:cc:
75:d6:dd:c6:4e:1e:3c:b8:5a:1a:43:46:b9:fc:34:b7:ec:7e:
cf:15:1c:77:f6:fe:d4:e9:07:cc:0a:00:8b:6f:15:d6:9d:ae:
be:bb:b8:06:9a:07:aa:f0:50:fd:b7:d8:06:f5:0e:4b:cb:a8:
1c:14:45:25:fc:10:58:a0:80:67:ef:af:9f:cf:a6:ea:8c:36:
57:ef:c6:a9:38:9c:a4:8b:dd:62:34:9b:b8:04:a9:ef:77:a0:
98:28:99:49:22:b6:e1:84:80:7a:03:f7:13:f4:ff:ef:79:62:
5f:79:79:07:b5:ee:d1:67:fd:b0:1e:44:5d:a5:92:1e:85:7f:
26:e2:4a:f0:83:a3:db:76:dc:08:58:57:11:6d:13:53:55:4e:
d1:fd:2d:04:0c:df:c3:24:cc:f9:36:2e:5f:42:1c:00:85:65:
2b:ed:67:65:66:cc:32:bd:89:ef:5d:09:e9:68:ec:07:55:6c:
26:98:b6:4e:b0:50:cb:46:ad:b2:dd:8e:78:c6:59:be:38:8d:
a3:e2:45:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:29:08 2025 by rpki-client