Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
File: W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json)
Hash identifier: db0EeeoGvBKOLuH/QQNuJoixU7qiIJGH3fYaOqpCmUk=
Subject key identifier: C0:64:87:7A:2F:89:05:A8:88:28:AE:DC:72:8D:37:29:34:19:55:25
Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
Certificate issuer: /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Certificate serial: 030F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
Manifest number: 0307
Signing time: Sun 13 Apr 2025 00:50:27 +0000
Manifest this update: Sun 13 Apr 2025 00:50:27 +0000
Manifest next update: Sun 20 Apr 2025 00:50:27 +0000
Files and hashes: 1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: pfDAMEj7TgVlFRbfeiJ+D3H1O370KEUhKJ30d/ZsnrM=)
2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: funaLOdihXHnoiN/MAj0kYq33Ii2xz4Wv3dJLCj94AQ=)
3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: aQPXBLkKXQRYudRraxZx4K6XPZ1KAKtrkSRU5qsrVkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 00:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 783 (0x30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Validity
Not Before: Apr 13 00:50:27 2025 GMT
Not After : Apr 20 00:50:27 2025 GMT
Subject: CN=67fb0a53-c4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:f8:29:6c:99:4e:6b:5b:bd:ae:f3:dd:c4:
92:d5:b1:32:89:90:f4:1a:32:9d:a4:e2:2c:c9:0f:
11:30:e7:12:da:1f:38:4c:28:50:9b:01:c4:9f:18:
38:da:8d:a2:f0:26:80:cf:d6:f7:66:3a:63:1c:51:
6f:22:8b:fc:c7:ce:31:c7:72:84:3b:7c:82:78:ed:
9f:16:8d:56:d6:1c:ee:89:63:83:3f:2f:5a:21:c9:
f5:07:15:71:fb:62:e2:9b:20:8e:d2:05:5b:4a:7e:
40:4f:85:38:8e:c5:b4:3c:16:23:a4:dc:53:87:07:
e3:74:bb:2e:d0:a1:8a:00:8d:4c:cd:fd:8d:96:6d:
b4:f5:13:f2:c0:46:c4:41:91:33:35:59:f7:bc:08:
1b:cf:5a:99:c3:6e:00:d8:d3:a6:60:b1:60:f1:6d:
be:50:83:0a:91:32:cf:14:1f:c7:6c:c5:b6:65:3b:
38:64:a2:64:2b:58:4c:fe:7d:d5:e5:c5:eb:93:d9:
a3:24:7b:e2:06:99:e3:4b:80:d9:2c:52:d5:31:aa:
4e:18:b6:25:4f:9b:47:7e:cb:f5:6f:07:91:9e:36:
7b:8d:7c:e7:a5:8a:cf:04:5f:2f:5c:dd:59:fb:85:
8d:cc:a1:b0:45:60:68:c2:9a:99:00:11:77:62:aa:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:87:7A:2F:89:05:A8:88:28:AE:DC:72:8D:37:29:34:19:55:25
X509v3 Authority Key Identifier:
keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:cb:57:53:a4:fa:f9:82:f2:f1:b3:27:a9:72:de:6d:20:b2:
16:72:f9:7e:e8:25:8c:ea:d4:02:ae:40:39:3e:5c:a6:c9:a8:
8a:2b:4d:7f:c1:0f:12:67:64:2c:bb:28:39:32:c0:0d:48:a3:
b3:25:f5:70:af:9e:d8:d3:7d:90:5c:ec:0e:09:a5:69:00:fb:
eb:d9:3c:0c:21:e3:62:8f:22:62:f3:56:3b:c5:06:28:ed:38:
31:f2:a3:57:e4:31:2e:63:86:02:ef:1e:60:3f:1c:fb:cf:90:
69:c6:d7:73:af:22:af:a1:e3:bc:40:3b:92:01:e3:9d:5c:36:
e6:12:59:8e:e7:99:1f:ce:dc:2e:34:4e:f9:b3:b9:af:a4:7b:
8a:dc:71:01:ac:a4:81:a6:48:cb:da:26:6d:a0:fe:66:e6:40:
b4:48:98:56:be:f6:ed:ef:d6:4d:fa:df:2c:2d:02:ee:ca:3b:
64:ad:85:39:46:93:11:75:51:dc:55:be:7e:02:c7:b0:18:25:
a4:82:e2:94:43:d9:dc:25:22:9e:22:6c:59:1b:d1:ad:4c:02:
0d:36:ea:f7:40:16:55:b0:c7:ea:a9:32:19:13:97:c9:48:41:
96:4d:05:6f:63:3f:bc:4e:12:0b:ca:42:40:6f:1e:3b:74:c0:
dc:23:27:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:58:57 2025 by rpki-client