Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
File: ItPpdE2tSXUDbMQirBHEBHIOZuo.mft (raw, json)
Hash identifier: NYalxsxZVK3dGBwi33JuUXibNGNZlG2WTwdiDcxJ630=
Subject key identifier: 19:D9:3D:DB:BE:68:DA:DB:E5:A1:D8:43:9B:96:CD:85:93:3A:55:07
Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
Certificate issuer: /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
Manifest number: 0109
Signing time: Wed 09 Apr 2025 03:54:21 +0000
Manifest this update: Wed 09 Apr 2025 03:54:21 +0000
Manifest next update: Wed 16 Apr 2025 03:54:21 +0000
Files and hashes: 1: ItPpdE2tSXUDbMQirBHEBHIOZuo.crl (hash: q3R6wSpEkI5UL7ynkoNxpTE9iI1Q2P0FP3sx0sWX3q8=)
2: 9BE3C7087E8311EEBC7E6681C4F9AE02.roa (hash: dQp1RFXkmdHYdN2uYRrVX4OpwPj5pGn/GAC5Xyj0LE8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 03:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A4F7
Validity
Not Before: Apr 9 03:54:21 2025 GMT
Not After : Apr 16 03:54:21 2025 GMT
Subject: CN=67f5ef6d-e9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:93:9d:0c:48:11:3b:8b:57:9c:2d:51:fc:29:
61:44:8a:b1:c8:e8:a4:b2:d8:a4:76:41:99:ff:f1:
fd:43:f1:c5:75:a9:28:2e:31:20:62:3c:6f:09:40:
d1:f3:38:c7:a8:39:f1:c8:1c:82:fc:7d:24:27:e9:
3a:53:c4:6a:26:27:5c:49:0e:2e:97:2c:6d:1c:de:
70:79:bb:2b:7d:19:e6:f5:db:4b:de:08:41:3f:43:
9b:2f:7a:60:aa:f7:c6:69:e4:3d:ce:24:8a:e2:e7:
c9:19:d7:37:01:86:e0:5c:ba:b6:66:94:57:1c:58:
c1:77:55:e0:ae:cd:f4:a5:14:4a:95:4d:dd:6b:96:
cb:82:39:86:36:e7:4b:5a:c6:7a:92:01:a5:a3:01:
e0:a4:64:96:8a:9f:fc:41:5d:90:5a:30:ea:50:cd:
5c:b1:7d:7b:a9:a9:a0:ce:14:01:6a:c3:7c:bd:1f:
14:60:97:1a:1e:66:32:e6:16:ec:36:59:12:52:55:
a0:4d:ea:95:5a:9b:87:52:74:67:94:f9:a8:d1:78:
e3:49:f2:b6:62:25:8b:d2:ef:95:90:b0:a6:27:cb:
a4:ca:02:f6:6d:f4:23:2d:96:15:5e:a5:16:48:11:
3c:07:91:5a:a1:e6:10:9c:2e:79:4b:39:1f:44:34:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D9:3D:DB:BE:68:DA:DB:E5:A1:D8:43:9B:96:CD:85:93:3A:55:07
X509v3 Authority Key Identifier:
keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5b:c4:a2:f2:9e:53:16:55:52:c7:5c:b4:74:8c:77:ac:8a:
9a:96:4f:ea:e2:20:b0:ca:80:ee:6c:e3:46:88:06:b7:52:91:
b6:3c:95:7f:82:37:30:07:77:c6:c0:75:3f:bc:92:72:0e:82:
5d:81:cf:92:3a:af:56:00:59:e4:3a:c0:b7:ee:0a:24:78:2c:
76:ad:78:50:29:b0:ea:71:e0:ee:5b:4f:55:60:de:49:85:22:
3d:1a:84:35:c6:cc:1c:b6:b0:2b:ae:0c:c7:32:17:43:bb:b9:
fc:5e:b4:a2:46:89:b7:02:ed:82:cb:17:9d:2b:48:c6:5a:e0:
ed:20:1e:49:45:90:9a:f3:5e:49:0e:7d:72:18:65:7a:b6:d5:
95:31:61:fe:94:57:5b:fe:2c:18:62:33:d9:9a:7e:fd:2d:40:
45:ab:47:fc:6e:a7:25:0a:51:ce:c8:b5:5f:56:64:a0:ea:db:
c2:9f:ef:cb:e6:97:79:6a:1e:4e:c6:59:7f:f8:5c:3b:2b:cc:
ad:ce:78:5d:c7:10:8d:be:f3:3a:be:aa:c5:28:15:83:ae:ad:
75:67:63:f2:a4:43:9f:ce:cd:0a:1f:91:24:d8:9f:2f:c2:12:
cb:8e:7a:04:b7:43:85:b6:ef:98:f3:ce:d3:32:03:39:bd:21:
8c:47:d5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:14:37 2025 by rpki-client