Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
File: L927RfNPJhkzrCt9Z6xz05Op0WQ.mft (raw, json)
Hash identifier: yw4e0TFl3hPt1TVSBTC923mbCjhq1pTzGFta3nXFnMQ=
Subject key identifier: CF:7E:86:BF:D6:D4:99:EC:19:FF:92:42:AB:5B:8A:77:60:21:73:A9
Authority key identifier: 2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64
Certificate issuer: /CN=A917ECB0/serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164
Certificate serial: 033B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
Manifest number: 0337
Signing time: Sun 13 Apr 2025 00:41:49 +0000
Manifest this update: Sun 13 Apr 2025 00:41:48 +0000
Manifest next update: Sun 20 Apr 2025 00:41:48 +0000
Files and hashes: 1: L927RfNPJhkzrCt9Z6xz05Op0WQ.crl (hash: A7vLL7FXikSQLJQBPNd2QGiMmdL6ZHgtGbRYSIMshRs=)
2: 2C7BB8BAB92411EC8E787A55C4F9AE02.roa (hash: +dFNC6bX5H+V6njzLbV2Ca6KkTrT3TtAm0EkKfPs5f0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl
rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 00:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 827 (0x33b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ECB0, serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164
Validity
Not Before: Apr 13 00:41:48 2025 GMT
Not After : Apr 20 00:41:48 2025 GMT
Subject: CN=67fb084d-a372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:ad:d2:da:0e:d6:df:ca:c3:3d:8a:4c:27:
3b:c5:79:84:17:44:45:82:e4:04:63:ff:41:14:db:
17:6a:b2:c5:a6:81:68:5d:da:33:76:cf:2b:74:57:
58:1f:21:6c:7a:13:a8:78:97:08:96:da:32:9f:9c:
9d:ca:38:55:fe:4b:b9:dd:e9:ed:d4:ee:00:57:82:
64:e9:53:eb:65:70:be:fe:5b:76:0d:78:71:7a:fd:
2f:5f:82:fb:c6:be:7a:f7:5c:14:2c:d9:33:dd:86:
e9:ca:c7:72:55:6f:92:2a:d0:eb:06:1b:17:6f:b2:
73:a5:f8:44:45:37:5e:1b:2d:46:c3:61:78:e2:5d:
c4:57:8c:77:1e:75:29:ab:45:dc:dc:95:bb:c6:25:
9d:9b:3b:e9:9f:c7:d1:5c:a7:1c:78:45:10:fe:50:
12:ee:d7:47:73:27:4c:7e:da:5a:ed:f9:aa:a2:ea:
4e:c2:0a:15:81:76:23:6c:72:57:51:42:70:04:04:
93:05:94:59:df:67:f2:f4:f1:7d:9a:4a:37:92:72:
ab:b6:aa:66:d8:9f:c5:7d:e9:e5:a6:ad:1e:80:17:
53:10:dd:70:0d:f8:2f:3b:cf:c5:5b:5d:b0:a9:e3:
97:b3:ab:a1:b9:83:4b:7b:eb:36:01:4e:aa:22:6c:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7E:86:BF:D6:D4:99:EC:19:FF:92:42:AB:5B:8A:77:60:21:73:A9
X509v3 Authority Key Identifier:
keyid:2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:96:9a:77:4e:ff:d4:37:4f:e5:30:c2:b8:72:4d:8e:8c:95:
c5:25:20:6e:e7:6e:af:47:d4:6b:57:cf:ee:cd:84:69:7c:ef:
db:76:2b:25:37:80:94:57:a9:d0:55:65:46:24:c4:7d:f0:b9:
55:41:69:b7:c2:6f:c5:9e:8a:4b:d4:8f:5e:16:5b:02:28:ba:
9b:0e:b3:86:72:e5:e4:94:9a:b9:46:ef:3b:80:d9:bd:71:d1:
e0:c0:3d:b5:6e:cc:cc:10:87:95:82:7f:f9:cb:bc:78:16:48:
36:32:96:ff:36:36:1c:af:c2:7d:4f:cc:fc:38:c2:a7:47:8e:
a4:a9:86:47:34:9b:81:be:47:e1:d9:cb:1b:b4:13:be:4f:ea:
a6:8e:7c:5e:0d:df:9d:fc:be:71:10:28:f0:70:6f:6d:3e:e2:
e2:9a:f2:5f:b2:de:c4:68:8f:62:49:69:88:01:d3:e1:53:d8:
86:3b:76:91:1d:74:e8:77:78:7c:7d:a9:9e:fe:5d:59:33:92:
08:db:62:b4:b8:ba:3a:7b:dd:c0:15:2b:4f:77:01:8e:78:c8:
a3:b6:47:ba:87:80:6e:15:98:15:1d:0a:e4:75:00:38:d9:08:
92:54:c6:25:91:93:22:18:7c:45:88:e3:18:e3:56:42:3e:52:
20:a9:a2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:29:15 2025 by rpki-client