Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
File: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft (raw, json)
Hash identifier: iqqEWDkN1T6w8qDmI1E1J1sqV2dX1w0miCDBIoyuP8s=
Subject key identifier: 74:C9:4B:C4:E0:0F:0F:7A:9B:4B:AD:81:7E:C5:A7:CB:C9:4C:37:92
Authority key identifier: AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08
Certificate issuer: /CN=A9172CE3/serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08
Certificate serial: 0476
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
Manifest number: 0470
Signing time: Tue 08 Apr 2025 23:50:08 +0000
Manifest this update: Tue 08 Apr 2025 23:50:07 +0000
Manifest next update: Tue 15 Apr 2025 23:50:07 +0000
Files and hashes: 1: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl (hash: 6YZs9bYK7qA9NaHwHsXdQ5/6B5MEVAVcl2htQMq+9/E=)
2: 887BE0D0405D11ECA642D813C4F9AE02.roa (hash: qxVcUGlCZn4SUG82SOAXq9RSMSYslC+bAGjT3ytadTQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl
rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 23:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172CE3
Validity
Not Before: Apr 8 23:50:07 2025 GMT
Not After : Apr 15 23:50:07 2025 GMT
Subject: CN=67f5b62f-6058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:d2:b4:46:4b:bf:e1:5c:90:b6:83:db:9f:
fe:43:b9:a8:8a:bd:a2:f9:6a:23:39:9b:b9:4c:df:
79:9d:0c:1e:44:10:1e:76:a8:25:64:bb:e4:8a:c4:
a5:12:80:0a:0b:39:05:94:41:5a:71:34:c7:b9:de:
59:34:ba:9a:0f:b5:d4:78:a9:66:14:02:c7:d0:7a:
f8:9f:7e:b6:de:73:e0:c8:27:1b:9c:2e:c0:2a:3b:
3f:9d:a4:ad:e8:96:63:56:b0:41:53:15:7e:d2:79:
18:78:08:61:63:d8:c1:e4:a1:e7:b8:f3:eb:fa:b2:
11:8b:cc:12:1c:b9:89:a8:9a:59:5b:0c:4b:db:d4:
6c:08:d0:63:a7:60:cd:2f:e8:24:12:79:5e:fe:6b:
23:dc:d1:06:f5:6d:f9:ed:80:25:ea:47:c0:90:2e:
bd:6e:13:62:4b:4a:7a:fe:7a:79:7e:5a:dd:97:e4:
5f:43:bb:ec:4c:b0:ea:de:e6:16:34:8e:de:30:cb:
67:44:a6:ff:fc:4e:e5:69:cc:22:9b:46:80:f2:a7:
b1:3c:cf:d2:ce:1b:72:eb:c5:30:27:37:88:18:00:
53:ff:e3:78:76:37:ba:42:ab:f7:44:ac:3f:42:7f:
03:e2:45:7d:ba:76:8c:a0:f2:34:13:9f:af:f6:b6:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C9:4B:C4:E0:0F:0F:7A:9B:4B:AD:81:7E:C5:A7:CB:C9:4C:37:92
X509v3 Authority Key Identifier:
keyid:AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:a7:23:a3:93:b8:f6:f3:b6:30:be:68:e2:9d:03:2c:ed:23:
08:1e:51:33:b3:f7:f7:a1:9d:90:71:6d:a4:ef:eb:8e:04:41:
87:fc:da:63:f6:8f:fb:45:89:47:4e:e1:0d:04:18:80:29:0c:
73:dc:2e:77:19:82:16:7f:b6:14:a4:db:be:ab:f6:26:32:32:
4c:7d:68:56:7e:af:79:eb:8e:75:84:fc:2a:6d:2d:1a:e5:ed:
e1:6a:7e:c0:e3:03:54:63:23:2d:66:bb:3d:55:7b:af:78:71:
57:e6:a7:e7:20:27:9a:6b:f5:13:bb:b5:e8:5d:ba:4c:bc:17:
f0:8e:47:95:3d:0c:ce:ac:6e:fe:23:8a:26:9c:42:40:cf:d1:
31:85:5b:85:27:93:a8:a9:9c:70:fc:d1:b5:1d:47:aa:8a:f3:
73:06:b7:c8:1c:6a:c8:5a:5b:3b:29:66:ae:75:17:97:28:02:
58:f8:dc:01:88:cc:da:92:3d:d9:d1:fc:37:45:70:fb:03:4f:
ec:d7:ff:f8:f8:9f:84:d9:f9:d1:47:71:2d:53:8f:0c:f4:c7:
d5:eb:d0:bf:32:eb:df:79:97:ac:c5:83:35:0c:22:97:c9:a7:
fe:49:56:36:69:d7:34:24:43:7e:06:8d:23:5b:3e:48:26:d3:
bf:f0:f0:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJDRTMxMTAvBgNVBAUTKEFCQzZGQkE0Qjc4NDI4Mzg3OTE5MERDNzE3RTM0QjRD
RDg4MkRBMDgwHhcNMjUwNDA4MjM1MDA3WhcNMjUwNDE1MjM1MDA3WjAYMRYwFAYD
VQQDEw02N2Y1YjYyZi02MDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmJ7StEZLv+FckLaD25/+Q7moir2i+WojOZu5TN95nQweRBAedqglZLvkisSl
EoAKCzkFlEFacTTHud5ZNLqaD7XUeKlmFALH0Hr4n3623nPgyCcbnC7AKjs/naSt
6JZjVrBBUxV+0nkYeAhhY9jB5KHnuPPr+rIRi8wSHLmJqJpZWwxL29RsCNBjp2DN
L+gkEnle/msj3NEG9W357YAl6kfAkC69bhNiS0p6/np5flrdl+RfQ7vsTLDq3uYW
NI7eMMtnRKb//E7lacwim0aA8qexPM/Szhty68UwJzeIGABT/+N4dje6Qqv3RKw/
Qn8D4kV9unaMoPI0E5+v9rZH5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTJS8Tg
Dw96m0utgX7Fp8vJTDeSMB8GA1UdIwQYMBaAFKvG+6S3hCg4eRkNxxfjS0zYgtoI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNFMy81RDc4OTlGNDQw
NTkxMUVDQTBBRkFBNERDNEY5QUUwMi9xOGI3cExlRUtEaDVHUTNIRi1OTFROaUMy
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy
RkQxRkYyL3E4YjdwTGVFS0RoNUdRM0hGLU5MVE5pQzJnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkNFMy81RDc4OTlGNDQwNTkxMUVDQTBBRkFBNERDNEY5QUUwMi9xOGI3cExlRUtE
aDVHUTNIRi1OTFROaUMyZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCpyOjk7j287YwvmjinQMs7SMIHlEzs/f3oZ2QcW2k7+uOBEGH/Npj
9o/7RYlHTuENBBiAKQxz3C53GYIWf7YUpNu+q/YmMjJMfWhWfq956451hPwqbS0a
5e3han7A4wNUYyMtZrs9VXuveHFX5qfnICeaa/UTu7XoXbpMvBfwjkeVPQzOrG7+
I4omnEJAz9ExhVuFJ5OoqZxw/NG1HUeqivNzBrfIHGrIWls7KWaudReXKAJY+NwB
iMzakj3Z0fw3RXD7A0/s1//4+J+E2fnRR3EtU48M9MfV69C/MuvfeZesxYM1DCKX
yaf+SVY2adc0JEN+Bo0jWz5IJtO/8PBH
-----END CERTIFICATE-----
Generated at Fri Apr 11 15:51:04 2025 by rpki-client