Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
File: h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json)
Hash identifier: TmkHJ6QMeXUna3FbakcaAhSpj2y0EiQitre6ZHDJsaU=
Subject key identifier: C4:56:07:8E:38:39:11:F9:06:79:AA:86:84:A4:35:6C:4A:E3:2C:E2
Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
Certificate issuer: /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
Certificate serial: 1206
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
Manifest number: 11F7
Signing time: Tue 08 Apr 2025 17:12:30 +0000
Manifest this update: Tue 08 Apr 2025 17:12:30 +0000
Manifest next update: Tue 15 Apr 2025 17:12:30 +0000
Files and hashes: 1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: /1D6d2vQ0PkTh2JysHQZu1uQF19Ml1L+t0cDpqYMLbc=)
2: 698B3FA6986011EE969A225FC4F9AE02.roa (hash: IPMaIsA9uRnd6F5Aml0jreWHK2WPPMV0a6PLoDBBAuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 17:12:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4614 (0x1206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF
Validity
Not Before: Apr 8 17:12:30 2025 GMT
Not After : Apr 15 17:12:30 2025 GMT
Subject: CN=67f558fe-7774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:64:6a:b4:6f:a6:ab:2c:0c:19:d2:38:16:be:
c9:6d:45:f6:97:27:51:ef:5b:39:54:87:13:a1:b7:
4e:74:80:34:62:5b:ad:f6:ad:54:60:23:bc:c5:c2:
2a:ce:96:5f:7c:dd:63:7b:5d:f3:8f:30:80:85:f8:
7a:14:45:0a:d6:6d:d0:ca:a0:6c:a8:6c:f9:3b:48:
af:7d:de:6c:a3:25:67:ce:32:47:f1:6b:58:58:db:
b6:b5:cd:04:9f:9d:9f:c4:50:73:ee:f0:28:23:5e:
92:7b:22:a4:a3:05:1c:fb:11:60:07:3e:6d:4e:c0:
5f:de:a4:bd:b6:3b:4a:72:8d:55:d6:73:8c:98:1b:
19:dc:2f:d0:bb:c9:65:98:a2:4e:d4:a6:f4:33:93:
1b:29:3b:58:90:75:cb:a3:24:da:f0:78:ba:c0:40:
1a:1f:87:ab:40:af:7b:5a:c2:d9:65:23:e1:3d:aa:
15:e2:c1:41:24:b4:6d:ca:ac:1b:ff:11:bb:ae:25:
5a:42:d7:3e:89:fd:c5:fa:5c:53:58:3d:3a:c4:1a:
c3:a7:6e:0d:bd:21:ef:14:91:81:d4:62:85:2f:b5:
f9:b4:eb:c5:03:2a:3a:2f:00:64:26:6d:d5:1d:97:
5b:60:45:b4:c4:08:48:8d:a8:6d:e0:e2:71:52:6f:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:56:07:8E:38:39:11:F9:06:79:AA:86:84:A4:35:6C:4A:E3:2C:E2
X509v3 Authority Key Identifier:
keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:fe:d3:34:40:61:98:cb:3c:41:52:5c:b7:09:92:c3:6d:eb:
df:79:ca:08:fe:bf:41:fe:a6:bd:26:fa:c5:b3:c9:f7:d1:c9:
e3:b7:c7:94:6c:0a:e8:2c:4d:db:55:9a:2f:5f:9a:97:e8:04:
75:7c:cf:a2:ef:51:d3:88:8b:ed:f0:87:0b:dc:19:b0:a3:76:
b2:03:6f:ec:50:d9:3e:e6:7f:5b:76:71:50:9d:53:4a:9e:69:
88:b1:0f:09:4e:f9:2e:7f:3b:70:f0:af:00:c7:24:4a:0b:93:
d1:ef:87:e6:50:31:75:31:b6:c0:65:8f:4a:d3:61:b5:6a:ba:
bb:a8:53:d1:30:3a:11:12:74:eb:f7:ea:09:c2:48:7f:eb:ee:
0a:cd:2a:3c:9b:6f:1e:1c:c6:7b:22:45:62:ea:53:ba:f2:90:
f6:57:68:81:6c:9e:ef:85:5f:1c:ad:e4:ac:a7:e1:58:21:90:
0a:e3:92:f1:f5:20:1d:14:5b:75:30:21:7b:44:57:f4:50:ff:
96:46:d4:a9:f0:32:10:6b:fb:31:89:d3:ff:d9:e4:09:dd:e7:
4f:61:91:ff:b1:5e:13:d0:f2:0a:15:e7:83:21:91:44:f0:2a:
91:92:b6:74:0c:f9:38:96:88:04:4a:53:5d:7d:fd:dc:31:e2:
3b:ee:d0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:56:34 2025 by rpki-client