Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json)
Hash identifier: 5ejj/gOIzkhAF/oMTJDfHoqodfZAz/oLsQVOhwwcu6s=
Subject key identifier: 9F:AB:61:0E:CD:BE:02:7E:64:1D:9B:A6:20:AC:4F:F1:BC:8B:32:CB
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial: 247B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
Manifest number: 2440
Signing time: Sat 12 Apr 2025 15:45:05 +0000
Manifest this update: Sat 12 Apr 2025 15:45:04 +0000
Manifest next update: Sat 19 Apr 2025 15:45:04 +0000
Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: nQUAquVXdCOJ22FUuOqBuVA7pskI/CyIGGk+pK7To5Y=)
2: 83684F548DF411E7A230506DC4F9AE02.roa (hash: AclspnZ8iw2tHm0IKz4UG4ixLk56q+FHizPSEyIU7Yg=)
3: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: Xinmf1pF0nmD8G1dr/8oh0iZ6My9MutoBSmESSGjfhg=)
4: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: n5Den4WYpFKZqIXrlnguXiXrj/0j5bJGPd+BTJZJ0No=)
5: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: jSQyyyapjlhB60qfeUaNeUQVSh1wYlF7bLfS517NK9o=)
6: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: ay5i7tS86bmO9kaJDJPqeE4jRkBcKwVm9OWVagFYZoQ=)
7: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: qDvUpQ+pcBdp3oNoCaw3VUb20gdJh67KqNBk3Z1ztMU=)
8: 027532E6385F11EAA879692AC4F9AE02.roa (hash: wjHexyPvkPualq2gUM9+dQ9qJ+4Kj5YvVI5QrOdw33k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 15:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9339 (0x247b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Validity
Not Before: Apr 12 15:45:04 2025 GMT
Not After : Apr 19 15:45:04 2025 GMT
Subject: CN=67fa8a81-0295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:30:5d:7e:48:86:1b:2f:e9:96:5b:21:34:
a9:92:2d:53:75:bb:dc:41:7c:2e:6a:e9:4a:c2:74:
12:49:be:3d:2c:d5:a6:ff:5f:34:95:a1:2b:35:de:
85:61:23:d0:f8:1a:8c:70:fb:aa:ea:9d:03:ab:e6:
13:22:45:a3:21:c8:bb:b8:17:7c:98:41:09:19:24:
ec:17:d7:e2:05:a8:29:20:56:a4:0e:91:98:49:5b:
da:a2:9a:85:70:62:54:4d:fa:20:68:cd:9c:2a:cb:
7a:86:0a:9d:eb:8f:4a:59:aa:4c:36:e8:d0:76:1d:
f5:66:4f:dd:8a:fa:2a:cf:2c:80:c3:1a:d4:a1:d2:
6e:4a:73:48:40:dc:f6:3b:71:16:d4:2b:df:a4:64:
bb:71:8c:bf:d7:15:60:10:34:47:2d:86:f4:0c:dd:
14:e2:89:dd:4d:c4:90:f8:b5:ac:9e:a7:a1:23:09:
d6:30:8e:60:6e:6f:6b:f1:8c:aa:e4:85:b6:3b:7d:
fb:b9:5d:d8:63:d7:c4:00:05:c9:81:10:0d:fe:d9:
06:09:4a:3d:1d:93:08:0c:e6:6f:c7:05:c2:e5:e3:
1d:a0:53:b1:74:f2:17:53:9c:06:40:e0:fd:28:87:
ab:4d:13:18:e2:c0:f0:28:da:4c:0b:c4:15:e9:dd:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AB:61:0E:CD:BE:02:7E:64:1D:9B:A6:20:AC:4F:F1:BC:8B:32:CB
X509v3 Authority Key Identifier:
keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:c6:12:e1:e0:91:2c:f3:14:1c:19:91:6e:2a:83:2f:2c:58:
ad:f0:0a:05:01:93:c3:0c:d7:ce:95:d8:c3:ef:4a:6d:db:58:
e7:31:16:39:fe:80:50:be:3e:aa:fa:83:f9:e0:e3:3c:9d:06:
a3:62:0f:fb:d6:36:de:1f:5b:a7:4b:f3:dc:86:1a:16:36:5d:
f7:48:1b:7a:de:0c:04:70:99:81:f1:c4:21:b1:70:05:bc:f5:
25:9d:77:6c:3a:78:53:a9:8e:da:2d:ff:84:e5:49:88:cc:32:
a3:78:d1:87:ac:17:ed:3e:4b:3d:c0:ed:1b:ad:c3:23:42:d4:
5d:ba:7b:b5:37:c5:ac:d9:f0:e3:8b:85:df:90:5c:86:8f:2f:
a9:e8:b7:3a:ec:cb:48:f2:74:a9:2a:7b:e2:60:c0:ac:e6:4a:
0a:72:af:d3:72:75:5b:9d:80:2b:88:89:5e:ee:94:d9:a9:d3:
be:3c:84:16:1c:de:2c:da:0d:a1:35:83:be:88:91:d6:00:e3:
74:87:87:a1:d5:69:05:e8:d1:e2:0c:6b:a0:aa:6f:6e:1b:bf:
d7:1d:42:c5:22:05:24:ef:ea:24:22:9e:29:f0:c4:ba:a9:e2:
f8:ba:4f:aa:2b:e6:2a:97:75:01:9b:9b:98:7b:91:87:49:04:
bb:ff:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 19:32:35 2025 by rpki-client