Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json)
Hash identifier: i5ZXfWMHjC/etZ0tK4peTDJ3sXNivy0s6H2rwLo1ebM=
Subject key identifier: 45:4F:92:1F:93:10:B1:9B:17:AD:D4:A8:E5:B9:E2:CC:BF:65:4F:80
Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
Manifest number: 4C
Signing time: Thu 17 Apr 2025 06:09:01 +0000
Manifest this update: Thu 17 Apr 2025 06:09:01 +0000
Manifest next update: Thu 24 Apr 2025 06:09:01 +0000
Files and hashes: 1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: gBFzI4Ye3iaSPvYIn0WTTQ00lBNVuwv6cxMcVq2DTpA=)
2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: ykJZ1vokWQVQModznO57DFIfns9B6rl6axv/cLKTInk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl
rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Apr 2025 04:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC
Validity
Not Before: Apr 17 06:09:01 2025 GMT
Not After : Apr 24 06:09:01 2025 GMT
Subject: CN=68009afd-90b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:59:10:c3:a3:d0:9a:20:57:ff:d9:07:72:
34:a2:61:2d:0f:25:b7:28:4b:ef:c4:00:e7:2a:98:
d0:79:11:82:ef:e4:05:c9:3d:4a:55:01:0b:12:e8:
e8:d5:d0:33:69:69:ea:6b:b1:18:f3:f1:4a:a5:38:
5c:ac:ea:22:48:98:23:c1:0b:34:1a:54:c8:3f:37:
66:01:c1:16:23:c2:b0:81:6c:71:28:14:b9:c4:ea:
cf:71:3a:57:56:90:94:ed:0f:17:83:44:75:9e:2d:
db:d0:70:a1:19:da:f0:c0:8a:96:c4:d6:0f:0b:81:
0a:a1:2a:56:14:0c:40:04:e2:ef:f7:c1:06:eb:35:
06:a1:54:fb:57:a8:58:dc:c9:38:71:85:aa:f5:dd:
6f:47:11:d2:93:78:d7:6a:27:57:cc:6a:fb:ab:e3:
6d:ae:1e:08:d1:0a:cf:eb:b2:a3:b2:94:be:0e:f8:
8c:14:6a:32:da:97:05:4e:be:fe:82:99:89:aa:6a:
cd:f0:0e:bf:a9:dc:c3:27:b0:35:e7:f7:f1:45:9a:
f8:ea:d1:75:b6:a9:2c:3e:75:d2:f3:ea:26:dc:76:
f2:83:b4:67:e0:aa:98:47:1a:c3:9f:12:a8:17:07:
5a:99:9c:be:03:75:e0:bb:35:b1:d6:ab:31:37:d2:
ff:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4F:92:1F:93:10:B1:9B:17:AD:D4:A8:E5:B9:E2:CC:BF:65:4F:80
X509v3 Authority Key Identifier:
keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8c:76:7d:ce:16:6a:2f:55:47:43:39:fc:60:a7:b7:0f:57:
84:94:d4:d2:ea:13:b7:88:df:d7:84:e9:1a:f0:54:1b:49:4c:
6d:65:f5:89:54:0e:f1:ac:a5:3f:e3:e4:30:9b:e4:e1:95:67:
be:b0:59:7f:78:ea:52:01:62:23:6c:50:dd:37:ae:c2:2f:2e:
ec:86:7f:4a:2c:fc:9f:8e:5b:79:d7:ad:1f:67:ed:01:8d:7c:
6a:cb:0a:4f:c8:fc:e2:08:04:5e:a5:9f:55:eb:3f:a6:35:55:
2c:6b:2a:d7:42:02:0b:64:f6:c5:95:93:25:22:da:b6:95:37:
92:0d:fd:55:b4:cd:7f:cb:b1:62:cd:5d:3c:a9:99:59:35:62:
e4:9c:ad:47:c1:66:74:63:c3:08:12:2f:75:83:cb:50:06:5b:
52:61:fd:7f:f0:a1:e7:f8:6e:6b:56:8a:f8:dd:bc:05:5e:b8:
40:94:cb:58:a6:be:c9:12:c2:67:a4:01:31:76:c6:e3:6e:80:
24:53:c1:e5:c0:d9:52:30:0b:16:c7:a3:95:62:c1:6d:88:69:
c1:04:7a:44:b8:8a:c2:83:ee:b7:d0:46:f3:0e:ca:79:15:a0:
39:a8:fe:c9:0b:be:af:58:7f:5c:e4:a5:70:15:ce:38:84:b5:
f8:8b:60:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:02:02 2025 by rpki-client