Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft
File: bUron6l6cWotkmYf8s9b08zcKfw.mft (raw, json)
Hash identifier: ivFcH8cfek1idHKaXQq9mT4cAUm0gjU42e2Hd8O/mjw=
Subject key identifier: 70:F6:54:14:37:0B:0C:47:DD:61:FD:3E:E9:AD:48:9E:CB:FC:E1:FF
Authority key identifier: 6D:4A:E8:9F:A9:7A:71:6A:2D:92:66:1F:F2:CF:5B:D3:CC:DC:29:FC
Certificate issuer: /CN=A91778C2/serialNumber=6D4AE89FA97A716A2D92661FF2CF5BD3CCDC29FC
Certificate serial: 172E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft
Manifest number: 16F1
Signing time: Sat 12 Apr 2025 16:36:57 +0000
Manifest this update: Sat 12 Apr 2025 16:36:57 +0000
Manifest next update: Sat 19 Apr 2025 16:36:57 +0000
Files and hashes: 1: bUron6l6cWotkmYf8s9b08zcKfw.crl (hash: /He/rDDXI1HXXfaN34FAH95W3NVBCWXkft5zBePB+9Y=)
2: 0EF775B2EFCD11EF92BCB66CC4F9AE02.roa (hash: N7nsErlzveEnISxiIX6awL6ZI+EjGdyZ1xE6eFlduvE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.crl
rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 16:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5934 (0x172e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91778C2, serialNumber=6D4AE89FA97A716A2D92661FF2CF5BD3CCDC29FC
Validity
Not Before: Apr 12 16:36:57 2025 GMT
Not After : Apr 19 16:36:57 2025 GMT
Subject: CN=67fa96a9-2034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:d2:56:ee:2e:4c:f0:0a:6f:e4:bd:0d:8c:
33:be:5d:2f:ec:92:14:47:85:86:e7:c1:51:a7:be:
de:b0:3d:be:be:11:d0:bd:df:0f:7a:6e:b8:a1:72:
a3:76:b0:37:7d:68:88:ca:8f:fc:a1:c3:ea:1a:16:
d6:00:67:ce:21:aa:fc:0d:fb:d1:e8:b7:1c:7f:73:
34:1d:dd:fc:5d:5e:7c:d4:ae:08:ac:45:cc:ef:0c:
11:5d:de:1d:69:96:42:85:b2:b3:ba:96:8c:fa:e5:
fc:7c:d1:d8:c2:b1:6d:68:23:e6:60:8c:03:37:7d:
ec:e1:97:fa:15:8f:15:4a:a6:57:db:1b:72:61:ba:
a0:31:5b:32:2f:44:0a:71:99:2b:8c:bc:24:d1:41:
c5:6a:64:c7:61:e0:6a:12:73:a7:3f:46:0a:f5:d8:
c3:26:d6:53:c1:f4:d3:72:5d:6a:00:54:f4:a5:c5:
72:6b:ac:de:df:4d:d5:0c:15:9e:2e:83:aa:96:a4:
02:d8:f7:b2:81:f9:ec:91:0b:02:11:d8:68:67:f8:
8e:19:1c:95:02:5a:3e:2f:96:c8:9e:ad:e5:9d:81:
be:c9:79:fe:fb:c0:87:e5:3c:df:c2:e6:c6:ed:52:
f4:1c:7e:34:c8:4b:65:08:5e:0d:2b:9d:a5:d9:bc:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F6:54:14:37:0B:0C:47:DD:61:FD:3E:E9:AD:48:9E:CB:FC:E1:FF
X509v3 Authority Key Identifier:
keyid:6D:4A:E8:9F:A9:7A:71:6A:2D:92:66:1F:F2:CF:5B:D3:CC:DC:29:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ae:5b:e0:a2:93:eb:23:35:68:d5:83:a8:bf:0b:27:30:45:
74:18:12:f4:16:b6:02:de:37:ec:f0:9b:30:5e:c9:39:14:3e:
33:59:46:bd:56:06:8b:04:4e:fc:ab:e0:fd:6b:7a:cb:0f:0d:
bd:86:36:cb:fa:9c:ae:50:cb:e1:b7:6c:49:8b:5b:f2:1c:ae:
a4:77:6c:5f:fd:93:82:41:ec:61:5b:c8:eb:10:75:70:10:38:
4a:30:91:67:c9:fc:12:13:14:0b:b8:79:12:78:3b:64:5a:b1:
95:db:30:7b:fe:48:bc:c0:37:ae:9d:c3:b7:d0:43:b3:2f:63:
47:93:ee:3d:20:bd:28:ba:ad:12:58:c8:66:4e:b1:79:13:8b:
db:9c:0c:df:c3:67:20:ca:6e:1c:a1:d6:0f:49:e8:81:58:f3:
a2:ec:03:87:6b:7a:05:b0:5e:92:b0:fb:e7:b2:f2:16:31:21:
33:79:6f:3e:ca:9e:f9:4c:1c:fe:df:56:61:5c:c9:df:ca:0f:
9c:c6:3a:d9:f5:22:9f:0f:07:17:a7:0d:db:01:7b:d8:7f:71:
fa:a9:80:ea:f5:77:c5:fd:6c:15:01:f0:04:60:36:70:cc:56:
62:b6:e4:fa:7f:55:03:e1:fb:be:4d:ae:50:7c:15:da:27:7c:
1f:75:40:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:46:16 2025 by rpki-client