Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
File: 1jZSRQ6nVZE88xr8-popIaSK4aQ.mft (raw, json)
Hash identifier: QLro87isZotY71BD91CH2PgM9BVS+7kd5vvuipHEpj0=
Subject key identifier: 1F:49:3C:4F:F4:41:D3:C1:53:E9:8B:49:96:E2:6A:33:CE:CE:12:D1
Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
Certificate issuer: /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
Certificate serial: 03D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
Manifest number: 03CE
Signing time: Wed 09 Apr 2025 00:19:15 +0000
Manifest this update: Wed 09 Apr 2025 00:19:14 +0000
Manifest next update: Wed 16 Apr 2025 00:19:14 +0000
Files and hashes: 1: 1jZSRQ6nVZE88xr8-popIaSK4aQ.crl (hash: zo29/ckzhezh/z0D9rAg3Zd0iOAl3KFPCIllJpG7l7o=)
2: E69DB7E67F7911EC86DE4B56C4F9AE02.roa (hash: SCsr6a/OxC+h0TbqqqQWA1WP6sx9Kte4TE8O/kgTqE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl
rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 00:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981 (0x3d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB1B
Validity
Not Before: Apr 9 00:19:14 2025 GMT
Not After : Apr 16 00:19:14 2025 GMT
Subject: CN=67f5bd03-e8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:13:0d:7c:57:5d:15:34:fe:b2:3a:20:b1:
51:54:46:38:e5:de:86:f7:38:bb:67:06:fc:4f:40:
54:31:ba:b5:08:6f:46:5f:07:84:93:e6:b3:fb:d6:
5d:c3:55:b0:e4:27:ac:7e:0c:0b:66:98:0a:d4:18:
71:ff:c1:61:56:e3:02:a1:4a:1d:53:cd:b7:e2:c4:
f3:c9:40:9a:d2:8e:11:d2:93:16:43:4f:41:96:cb:
fe:4a:1c:b9:c6:40:4c:d5:e2:35:d2:7f:11:26:a7:
c5:29:30:f1:d2:78:b9:06:ee:3c:47:83:4b:96:6f:
0a:52:02:dc:14:2d:97:fb:01:e8:6a:8d:cd:52:32:
54:be:71:4b:9b:1a:5f:89:c0:f5:57:1e:50:5a:da:
ce:0f:47:bc:bd:4e:b9:05:92:38:6e:36:ac:6c:66:
39:7f:25:42:e3:4f:6f:63:41:78:64:ec:fb:d6:09:
84:9b:60:72:ea:7a:87:51:77:b5:40:34:ee:e8:44:
c3:2c:62:dd:0e:c1:82:18:9e:23:e2:70:c0:fb:d4:
d5:65:e1:a9:3c:09:20:28:6d:cd:41:da:42:0d:13:
ad:5b:1e:6e:bf:1e:f8:9b:6c:07:5f:7a:80:d3:56:
1e:58:3d:e0:34:dd:fc:e7:4c:b4:53:59:7d:2d:55:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:49:3C:4F:F4:41:D3:C1:53:E9:8B:49:96:E2:6A:33:CE:CE:12:D1
X509v3 Authority Key Identifier:
keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f8:d9:f7:f2:a3:d3:98:57:cd:74:48:cb:49:b4:0e:3d:f8:
b2:80:a2:a8:a3:13:f6:4c:b6:3d:3a:7b:e5:99:dc:f9:23:90:
e2:7c:8f:4a:44:32:71:a9:1c:ad:d0:10:b0:28:ed:ef:4e:fb:
df:56:18:af:e8:0e:44:aa:78:b2:18:fa:14:4c:9f:19:72:9b:
35:47:7b:d5:eb:73:a2:7e:2b:bc:79:e2:b4:eb:88:05:96:2b:
12:e5:cf:8c:15:50:8d:69:bb:7b:24:df:10:4a:3b:7c:86:17:
4e:78:9c:d0:19:9d:60:57:39:ac:09:19:9f:ee:b2:c3:04:ba:
bd:35:da:02:47:6d:ad:76:c5:6b:35:64:13:3c:9a:d2:f4:03:
a7:a2:10:4b:40:13:4b:b6:8d:af:38:9c:48:56:ad:15:11:1a:
15:0b:ce:81:03:aa:d2:d3:6a:74:97:5e:a2:a0:09:9d:30:5c:
30:00:f1:10:5b:4f:c7:61:b7:ed:40:48:66:1a:7d:37:a7:b6:
0d:38:f2:52:1c:6d:6b:92:1a:29:53:32:66:40:2e:8d:f6:58:
47:93:1a:50:8b:68:be:cd:ce:05:7d:c4:35:a6:48:44:cc:f7:
fd:28:f2:6f:2b:e4:aa:72:61:38:a7:27:20:59:43:8f:80:c9:
36:92:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:27:18 2025 by rpki-client