Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
File: fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft (raw, json)
Hash identifier: 4kquDPDBfH8HnCFGxc+6V6gozDrC66Ro9WYAOWltbCM=
Subject key identifier: E9:12:AE:E1:01:00:2D:65:BB:1A:95:F1:B9:71:00:69:49:04:1A:16
Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01
Certificate issuer: /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
Manifest number: 7D
Signing time: Sun 13 Apr 2025 05:26:29 +0000
Manifest this update: Sun 13 Apr 2025 05:26:29 +0000
Manifest next update: Sun 20 Apr 2025 05:26:29 +0000
Files and hashes: 1: fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl (hash: tCCZpr3jBmK5ccCxMoEoyse2iNjMHuUuzgxA8Pd+gLg=)
2: 53287AF45DDF11EF9B31E965C4F9AE02.roa (hash: l9NwgF2p4gRADdXEDeNTklsFvOfiw2xnBPOYK8nZgtQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl
rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 05:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801
Validity
Not Before: Apr 13 05:26:29 2025 GMT
Not After : Apr 20 05:26:29 2025 GMT
Subject: CN=67fb4b05-8757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:c6:43:c2:15:b4:4e:03:b1:04:e2:47:77:
3b:ba:74:7e:41:15:0e:23:f9:a5:70:9f:19:3d:f4:
dd:bf:fb:86:e9:bf:7e:ca:69:83:c9:40:36:0d:a8:
43:91:96:48:43:5b:37:8e:94:f9:69:9a:8c:c7:d8:
3b:be:db:27:cd:06:1c:eb:fd:2a:01:5f:78:d1:5b:
8e:90:dd:8a:0a:42:dd:7f:ee:df:b1:11:85:cb:6d:
5b:41:26:98:88:05:33:d9:09:20:8f:4a:be:7a:a3:
7f:ed:06:92:c0:54:e8:24:03:68:e1:1d:3d:38:e3:
15:ee:e3:31:65:76:bd:26:92:78:c6:d1:b1:42:a8:
fa:f4:8c:dc:ae:85:ed:cd:08:f1:9f:a2:7d:a6:17:
ee:17:77:8d:c5:d4:e6:5a:be:bc:28:e2:57:1b:7e:
a0:37:cf:6f:84:1a:28:80:f9:d8:50:98:3d:e6:1b:
ee:49:ac:15:cd:57:2e:55:d7:74:2a:f6:ed:d6:da:
0e:5e:ba:ee:49:7e:12:05:27:b8:fa:64:95:94:6c:
3c:e5:0a:45:f0:02:fe:1e:6b:de:26:e8:f8:3a:f4:
18:50:e0:2d:9e:db:d2:fe:4e:cd:44:27:48:ad:4b:
9d:85:5a:d6:fd:0e:55:a0:17:9d:09:f1:75:11:18:
ca:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:12:AE:E1:01:00:2D:65:BB:1A:95:F1:B9:71:00:69:49:04:1A:16
X509v3 Authority Key Identifier:
keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:90:5a:2e:53:19:31:17:56:ad:1b:4b:af:7c:3c:85:7a:a4:
dc:09:b8:cb:e4:10:25:7f:06:eb:93:e4:b2:96:25:0f:8f:26:
99:2c:e4:28:e8:e9:a8:09:e3:40:b1:2f:ac:ae:28:21:bd:b7:
b2:51:e9:0f:0c:fc:8a:df:4d:b4:a4:1f:81:d2:34:d7:06:ef:
f7:d1:a0:2b:da:94:39:f3:bb:13:41:cb:31:be:cd:09:45:e8:
16:4c:db:b4:99:1e:a2:88:3e:fb:04:3a:a5:68:ed:bd:b0:1e:
eb:33:8f:3f:e4:e5:f1:26:96:c5:89:b3:c8:9c:dc:10:f0:25:
ef:be:47:6b:67:5e:df:66:a0:9c:ed:43:da:ac:66:b0:9e:71:
95:74:09:32:eb:9d:05:86:e7:21:de:c3:73:98:46:81:63:98:
a8:8a:7d:c6:41:de:38:71:1d:5c:84:d0:ce:26:35:ce:68:d7:
13:0e:9f:94:8a:00:02:be:62:c8:5b:1f:fb:29:b7:95:f1:80:
41:06:df:e6:30:6e:ba:3c:02:a1:d7:0c:67:4a:e7:be:bb:b9:
3f:c0:80:ca:4b:3b:e0:59:e0:fc:1a:60:c6:e9:aa:ad:78:c3:
ba:d4:3a:b7:67:24:1a:d4:ce:56:e2:1b:34:61:f4:b9:dc:68:
91:19:ba:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:09:27 2025 by rpki-client