Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
File: yCt7N51v7So8MMRTfg-HzLYIIus.mft (raw, json)
Hash identifier: TvffxNkDcSGchjLaBeTGdU2DiG7FwE8tmLSQWNLwNwU=
Subject key identifier: 29:2D:59:45:1A:D7:8D:18:87:40:A1:09:EE:4B:30:61:92:CB:CF:86
Authority key identifier: C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB
Certificate issuer: /CN=A917EB96/serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
Manifest number: 014A
Signing time: Wed 09 Apr 2025 03:11:28 +0000
Manifest this update: Wed 09 Apr 2025 03:11:28 +0000
Manifest next update: Wed 16 Apr 2025 03:11:28 +0000
Files and hashes: 1: yCt7N51v7So8MMRTfg-HzLYIIus.crl (hash: JAh+JOdYmG8aY0+NOsf/ihADcFfhU+leGHrpqNsx6bU=)
2: B50ECD32A57E11EEB4533738C4F9AE02.roa (hash: BkdlPGBhBetu9r/R8RI86aafR+sAmMSSEW9hm5cCW00=)
3: 348BAEE41C2D11EEB362491FC4F9AE02.roa (hash: ABPxiDdG7YwQPZkFSTV8BYz3BNZi1RIYblf+R4M0eLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl
rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 03:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EB96
Validity
Not Before: Apr 9 03:11:28 2025 GMT
Not After : Apr 16 03:11:28 2025 GMT
Subject: CN=67f5e560-9f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:96:d5:d8:42:45:50:aa:ec:f1:6c:29:fd:
09:4c:49:67:7f:07:fc:f3:da:ae:4e:6a:b2:d7:6a:
8e:15:bd:52:5b:25:a5:9c:a1:b9:a6:aa:9d:37:43:
ec:99:92:61:bf:95:8c:5b:69:ac:ab:e5:30:81:8f:
ea:8c:0e:82:0c:e8:d0:01:2b:6d:49:20:6e:f8:54:
31:b1:b2:ab:be:71:32:59:89:2e:b4:0c:41:d4:c8:
69:e2:3f:09:c4:a0:6c:99:5e:8b:c7:b8:7e:3f:52:
50:e4:ff:50:1f:26:b9:af:f3:5c:72:43:16:86:6f:
8c:58:fe:61:06:f4:d5:6a:cd:95:98:b7:14:23:32:
17:c9:1c:16:ab:ef:9d:de:99:f2:be:40:48:79:84:
a7:4b:06:18:f5:5d:26:4f:cf:76:92:5e:67:82:2c:
1d:76:72:36:16:af:f4:3f:a5:48:33:03:2b:5f:ba:
b5:9c:1e:2c:10:59:8c:9a:41:aa:f9:a5:d4:0b:44:
a6:33:e0:59:83:6b:36:2c:7f:81:b3:28:81:cc:09:
a6:eb:91:f6:3b:b4:a8:2e:45:df:ef:21:cc:c5:83:
30:38:e5:04:4e:b7:05:03:a3:43:19:49:98:bc:a0:
f0:19:96:92:cf:c8:6f:2d:fd:75:85:b3:ae:e0:f8:
fa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2D:59:45:1A:D7:8D:18:87:40:A1:09:EE:4B:30:61:92:CB:CF:86
X509v3 Authority Key Identifier:
keyid:C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:88:95:13:79:90:4e:52:9b:36:50:db:16:3e:81:5a:3a:d3:
6e:e9:5d:0c:44:fb:8c:0a:b8:df:ea:66:03:2d:50:a2:9b:fc:
bb:c9:96:28:6d:d5:c5:a9:75:c7:40:32:34:49:32:47:e6:8d:
4c:83:7c:9f:9a:c2:b3:ad:81:57:98:c2:e7:8d:70:cd:7b:91:
dd:c0:10:05:dd:c9:bf:73:63:d8:8e:e2:9c:e0:cd:dc:25:ed:
e0:15:5f:7b:e7:72:be:2a:14:72:6e:3d:ac:93:bf:15:22:3b:
d9:fb:7c:85:76:d8:ea:ff:2b:73:00:7c:31:19:2a:c2:6b:c7:
d1:ce:ee:20:48:45:04:45:4a:84:03:bb:12:14:b1:40:0c:51:
d5:27:ff:2b:83:59:46:fe:11:6c:76:10:fc:b2:78:d3:75:5e:
1f:7c:0a:39:34:59:7d:0a:d2:4d:4d:4c:24:cf:a4:47:47:78:
8f:fd:bc:de:62:c6:fb:e5:5c:46:29:a9:f0:39:8a:80:e7:2f:
d1:62:e6:31:af:b8:f3:f6:d6:51:14:0d:53:5b:76:c9:3a:6c:
76:b8:c2:43:64:45:80:82:1a:e4:07:03:9d:08:fd:1b:76:18:
6b:8f:6b:69:26:f5:74:b5:77:d0:c6:b4:2c:61:97:17:02:fb:
11:63:8f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:29:56 2025 by rpki-client