Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
File: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft (raw, json)
Hash identifier: Luu/dPL+gU7DeSr3wLM65u+xWtTpVxtk0wuB6zGvF70=
Subject key identifier: B0:04:EE:DB:B0:AF:EB:82:A5:C9:1C:8D:E1:69:5B:EC:C9:B6:D9:3A
Authority key identifier: A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B
Certificate issuer: /CN=A9166292/serialNumber=A4FB20C72497262DC477F14943008F91077E659B
Certificate serial: 0465
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
Manifest number: 045D
Signing time: Tue 08 Apr 2025 23:53:29 +0000
Manifest this update: Tue 08 Apr 2025 23:53:28 +0000
Manifest next update: Tue 15 Apr 2025 23:53:28 +0000
Files and hashes: 1: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl (hash: 7HgYl4nMkBOdE47Mofd70P4r00gjpfJ5tk5IcAOMVOU=)
2: 78771A0C490D11EC8E4D1136C4F9AE02.roa (hash: SSW9TV8jZN6fvYq4gIStDsbEdDvovlOhUtObC7g07YA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl
rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 23:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125 (0x465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166292
Validity
Not Before: Apr 8 23:53:28 2025 GMT
Not After : Apr 15 23:53:28 2025 GMT
Subject: CN=67f5b6f9-b563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:c0:c5:64:3a:a7:b3:83:79:41:67:48:b5:
44:63:dd:ea:44:34:7e:aa:7d:f8:d1:44:e0:8b:6d:
72:4f:ff:44:eb:ff:f2:39:b4:e1:bf:c3:2c:6a:8e:
58:f9:bc:11:6a:4a:4d:22:78:0b:20:ee:71:f0:2c:
c0:75:9f:47:59:fc:f2:c7:ab:9a:f0:b7:99:16:3a:
42:32:58:ad:74:81:31:e7:5c:b6:74:92:e5:c5:b4:
58:1e:83:5a:ac:36:7f:49:21:77:b2:f3:89:6c:3c:
76:52:67:26:6d:cf:65:71:e6:10:b0:ce:04:ea:de:
9b:4d:5a:87:55:e7:f3:cb:39:3e:2d:93:e0:8b:50:
15:93:5e:6d:59:21:5c:42:f7:7b:43:81:76:f3:6f:
f5:d8:12:ab:40:12:85:73:a0:c5:42:59:ed:37:5a:
4f:3d:01:63:07:5d:9f:76:e9:d7:1e:40:0b:6f:f2:
4b:09:72:d7:d3:0e:d5:de:4b:6f:30:cf:07:96:34:
9d:01:ac:e6:d1:4a:0b:83:11:da:2d:68:fc:d4:0b:
9b:b0:82:33:d2:d6:95:5b:ff:a1:c1:e5:1c:b4:ed:
21:00:da:aa:eb:0e:48:7c:cb:40:27:67:43:38:10:
b9:a8:06:6a:2d:7f:b2:d2:83:6b:b5:90:ac:c4:cc:
66:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:04:EE:DB:B0:AF:EB:82:A5:C9:1C:8D:E1:69:5B:EC:C9:B6:D9:3A
X509v3 Authority Key Identifier:
keyid:A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:26:89:e9:6f:cd:d7:37:51:0d:ba:ad:7e:64:5e:04:ec:ad:
56:61:84:5e:7a:6d:44:7c:c7:c2:a7:15:0a:33:35:9c:d8:01:
42:6b:d6:64:21:bd:c7:17:04:5a:b9:98:0b:eb:9b:f3:1e:4b:
0b:cd:0c:d3:06:71:ed:d8:c7:87:7b:49:05:a5:86:47:a3:89:
3e:d1:66:3c:b3:2d:8b:02:88:ad:60:58:4d:17:c8:0d:76:35:
55:b0:99:ef:ae:b7:1a:66:50:f0:fe:72:4c:b7:3b:53:ae:af:
59:12:21:93:64:d6:b9:af:6b:33:fe:4d:67:30:39:6c:6a:1e:
f1:ba:30:eb:bf:8f:2b:82:d5:f1:a2:03:24:ea:ef:b3:0d:04:
70:e7:66:90:c2:60:9a:37:6f:25:0f:bc:d1:83:43:63:00:d3:
8a:74:5f:43:e2:78:52:0b:62:c1:09:55:c8:98:b9:1a:de:1f:
ec:6d:ea:4a:2f:f1:8e:22:00:16:80:15:59:50:c8:05:9d:c7:
c9:ec:f8:84:21:18:79:2a:91:68:16:fa:8f:44:5d:63:fa:ab:
f5:ed:ec:bc:d6:37:4a:60:88:4e:a5:7d:1f:52:4d:13:62:c9:
14:d3:c6:18:3b:4a:60:03:20:cb:68:12:f8:87:ea:aa:3e:db:
81:a0:70:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:05:14 2025 by rpki-client