Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
File: j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft (raw, json)
Hash identifier: GZWwj/eGofB4cvj1lD9JV09FAX9d2yLLuYHyuRFnIhU=
Subject key identifier: 1B:3F:ED:82:EF:3C:48:7A:97:0A:72:57:05:82:C9:39:9E:D4:72:F3
Authority key identifier: 8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9
Certificate issuer: /CN=A91644A4/serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9
Certificate serial: 0288
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
Manifest number: 0281
Signing time: Wed 09 Apr 2025 01:18:27 +0000
Manifest this update: Wed 09 Apr 2025 01:18:27 +0000
Manifest next update: Wed 16 Apr 2025 01:18:27 +0000
Files and hashes: 1: j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl (hash: EdW68sLM5xOGZsx2HoNCYRxeJDbtA0nKKINVMZqycCM=)
2: 3B501252140811EDBF3D2F27C4F9AE02.roa (hash: UP0rzzGm1RNNAwSNVW6RQ9A/3hrn3jElJIPxPVvX0ks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl
rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 01:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 648 (0x288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91644A4
Validity
Not Before: Apr 9 01:18:27 2025 GMT
Not After : Apr 16 01:18:27 2025 GMT
Subject: CN=67f5cae3-939b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:26:c3:82:9f:9b:23:1a:12:31:8f:89:ba:
b1:35:df:ee:e4:82:f6:05:24:aa:43:43:74:ee:1b:
87:07:a3:91:a8:57:8e:6b:3d:94:63:d4:20:cc:6a:
9f:f6:fb:b7:5d:9e:b2:e3:9f:23:d5:90:11:46:75:
75:6e:34:ee:65:09:42:c9:34:2d:e3:09:1e:f3:ba:
c7:12:62:54:17:d7:00:7c:de:1c:7a:7a:27:78:60:
6b:91:b3:41:05:97:da:3c:a0:8a:a5:ea:71:96:e1:
4a:0b:87:cb:ce:95:6e:e1:ac:82:8a:ae:79:fa:7a:
e2:93:46:39:ee:a9:48:9b:c8:3b:25:86:68:58:27:
00:be:19:a2:d8:66:97:c5:aa:b9:33:be:21:0c:f5:
f4:de:4b:77:21:0a:19:09:9f:41:87:7e:79:07:a3:
89:de:2b:d1:59:c0:1d:22:78:92:c0:48:16:82:fc:
36:b6:a1:b3:e7:75:ba:12:7e:d8:56:06:b8:f4:82:
0a:20:02:e9:ef:87:db:69:77:ca:44:89:5d:43:d9:
7c:e9:31:52:66:81:42:93:f2:f8:35:8a:a5:ff:1f:
90:75:2c:8a:45:e0:16:ff:a0:8d:72:1e:b9:fb:8c:
5c:9e:ec:f3:81:76:23:23:93:74:32:3d:ee:93:88:
49:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3F:ED:82:EF:3C:48:7A:97:0A:72:57:05:82:C9:39:9E:D4:72:F3
X509v3 Authority Key Identifier:
keyid:8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:99:7f:ef:06:1b:e4:8b:bf:df:25:e0:49:b6:b8:01:1c:ee:
94:46:bd:55:07:44:b3:b2:b0:af:64:82:32:34:f4:30:f4:31:
62:57:d4:fd:a2:54:dc:bc:5e:61:52:5c:b5:58:36:d6:5e:c6:
8b:f5:62:6f:53:8e:02:af:7c:18:61:c6:bd:4f:53:a7:db:ca:
57:56:e0:01:84:b4:42:c4:ec:dd:ea:ff:59:bb:da:c9:53:6e:
96:13:a5:fa:47:b6:4e:a0:eb:f1:31:5f:08:ca:b8:0b:4d:f8:
45:7f:49:1a:2b:20:6c:50:35:16:47:d0:a1:16:af:cd:d3:68:
e4:08:44:ee:ff:6d:85:8d:50:1b:ce:88:23:df:b9:a5:81:c1:
61:e8:77:1c:d4:71:c2:80:90:d3:08:3d:57:a2:b8:60:ae:a3:
1e:7c:28:e4:b1:30:33:25:eb:07:78:56:96:3e:ee:f3:ed:db:
bd:fb:80:f1:e4:9a:3b:b5:ec:84:fb:80:20:8c:d5:5a:d7:b7:
f3:93:81:f4:ac:14:59:3c:24:3e:a7:8b:34:ba:28:f0:63:60:
0a:7a:c7:12:c3:d8:30:e1:ff:54:81:d0:53:80:3d:2f:77:c6:
7f:03:6a:f4:fe:82:05:76:45:d8:a1:b5:0e:fa:4d:f9:51:34:
f8:10:14:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:52:57 2025 by rpki-client