Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
File: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft (raw, json)
Hash identifier: fq3NPCatygZE21UKzqQ8vsv878A6ggNWWID46I6P4D4=
Subject key identifier: 38:60:4D:FD:4B:D1:3D:7C:65:92:39:82:9B:65:56:36:94:73:F8:3B
Authority key identifier: F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E
Certificate issuer: /CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
Certificate serial: 0BF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
Manifest number: 0BEB
Signing time: Sat 12 Apr 2025 18:35:09 +0000
Manifest this update: Sat 12 Apr 2025 18:35:08 +0000
Manifest next update: Sat 19 Apr 2025 18:35:08 +0000
Files and hashes: 1: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl (hash: GR1c8Vd9AY5mhjjWavTxNJqiR7zPUgZUltnvB2zcitA=)
2: F7ABC66A114211EA8A4B0685C4F9AE02.roa (hash: OeGbR9lPmFx9F+KOx3DCweLM+ujmkz1n3pufF3R5HIU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl
rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 18:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3059 (0xbf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EBBB, serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
Validity
Not Before: Apr 12 18:35:08 2025 GMT
Not After : Apr 19 18:35:08 2025 GMT
Subject: CN=67fab25d-3249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:d8:ec:59:8c:ec:76:ba:fc:4a:73:36:17:
51:bb:6e:27:29:7d:f8:19:1d:74:03:ab:3e:16:f1:
f1:8b:a3:3a:31:6a:e4:e2:3c:71:cd:fd:cd:e6:7f:
0b:c7:f8:a9:ee:fe:02:8d:92:00:2b:94:d0:54:57:
a9:3c:d8:4a:e7:96:ef:3b:a3:74:ed:80:31:d7:30:
03:5b:a9:82:bf:b5:3b:45:7b:84:95:57:63:62:f8:
f0:e1:8f:b4:3e:12:75:b4:7c:b5:24:87:d5:bd:c6:
48:32:8e:5f:c8:ff:06:1a:5e:70:ee:ab:e8:9c:3a:
54:71:97:04:32:ed:cf:b7:a9:34:b2:36:c6:9a:86:
65:05:4e:25:4c:dd:39:39:02:a2:43:f6:ef:82:16:
4b:45:12:f3:08:94:d5:4c:ad:cf:6d:55:f7:93:94:
8f:e0:2f:fc:43:28:a0:3b:90:55:a9:dc:3a:ce:b2:
2f:b4:cc:67:5c:a0:81:ae:4f:25:9d:46:5e:19:8e:
15:30:32:20:f2:94:66:94:73:d1:09:aa:3a:6f:f9:
a5:25:75:e3:36:e0:8d:12:50:bd:4f:90:34:06:0c:
1d:bb:f3:6f:6a:bf:57:47:fc:3a:46:df:6e:0e:b9:
52:63:94:22:ef:d6:48:0b:88:45:59:3c:af:3c:d2:
07:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:60:4D:FD:4B:D1:3D:7C:65:92:39:82:9B:65:56:36:94:73:F8:3B
X509v3 Authority Key Identifier:
keyid:F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8a:6b:42:ba:91:6a:62:4f:0b:75:0f:b5:86:0f:ed:27:be:
1d:eb:8c:f3:4b:9f:5a:f6:ba:95:27:da:49:90:23:3f:dc:3a:
41:72:96:26:ef:76:28:2a:e5:97:9a:d8:f3:63:82:e1:91:dc:
b9:ad:87:c6:f6:32:e3:23:b9:a4:dd:c9:2a:bf:11:d7:50:6e:
71:d9:93:0f:36:25:92:71:ed:d9:16:df:07:47:d8:94:ce:4e:
c3:d1:63:9b:16:cd:c3:83:a0:98:98:61:02:9c:85:b6:f3:b8:
62:70:67:14:dc:f2:e1:78:ca:26:cb:7c:3a:be:2a:48:db:0d:
d9:4b:7b:46:85:00:6c:f5:c6:d8:4c:b7:02:e8:a9:0c:d9:d4:
4f:3e:11:df:1c:60:70:ec:1d:f0:1e:71:ae:eb:2a:2a:90:c8:
71:fc:de:c5:0e:11:a9:7f:3f:b6:c5:07:05:21:0c:d2:fa:a4:
32:f8:38:91:e1:4c:5f:25:14:05:dd:32:81:b1:e3:a1:53:9f:
46:60:ae:40:40:d5:4d:cb:9a:72:bf:43:62:7c:bf:5a:7f:6c:
76:f7:c3:11:21:87:36:62:f2:ce:d8:49:b9:10:3d:e3:cc:e5:
61:70:7d:fe:cf:0b:57:93:31:4d:ea:c6:c3:f1:58:93:4c:a0:
1c:1e:4f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:39:13 2025 by rpki-client