Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
File: qz22NdhTYB5LpVUAZxIB2Jb-za0.mft (raw, json)
Hash identifier: wv0/knLDbjI0aMLEIQvAwOIL1jl+y5QoT8gU0WJx7BA=
Subject key identifier: C5:90:46:1D:59:5D:3E:04:02:EB:5A:42:83:FC:04:68:A5:02:03:BE
Authority key identifier: AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD
Certificate issuer: /CN=A917FDF3/serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD
Certificate serial: 08A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
Manifest number: 089F
Signing time: Tue 08 Apr 2025 20:24:32 +0000
Manifest this update: Tue 08 Apr 2025 20:24:31 +0000
Manifest next update: Tue 15 Apr 2025 20:24:31 +0000
Files and hashes: 1: qz22NdhTYB5LpVUAZxIB2Jb-za0.crl (hash: A7hy7O5NT0kPdatjuc8aMiDqENGG5MZUQkOvR7PtnIQ=)
2: 0FE0AF42B5DB11EA9DA12556C4F9AE02.roa (hash: Fs5lIXhoeLDLVgaGXIOh275fjXBBfxZsCamTtOxAxUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl
rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 20:24:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2215 (0x8a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FDF3
Validity
Not Before: Apr 8 20:24:31 2025 GMT
Not After : Apr 15 20:24:31 2025 GMT
Subject: CN=67f585ff-7199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:72:78:5e:94:8a:db:0f:4e:31:38:53:df:
c3:25:1b:34:2b:f0:82:53:65:50:33:c8:87:44:32:
d3:b0:d7:22:a6:3e:20:db:0f:dc:3f:bc:88:1c:90:
a2:c6:8d:77:b5:31:e6:f4:2f:14:c6:14:72:a3:bc:
46:0c:07:51:16:a7:6a:89:89:6e:d0:72:e2:95:cc:
c6:bb:a7:8c:4e:c2:ec:f4:dd:69:1d:28:86:07:b2:
cf:23:3c:c6:69:25:21:fa:7c:c3:db:26:31:98:99:
06:5e:f4:69:98:4a:7b:c8:65:08:e5:a9:c6:98:3f:
fb:a9:0b:6d:46:42:bc:c8:6e:59:1e:b9:ab:58:68:
da:3c:d9:d0:bc:90:d1:21:f3:9a:8e:32:0d:28:97:
c7:1e:e4:9d:03:75:03:29:57:5a:66:9a:b4:9d:b5:
78:02:1f:a3:96:70:89:ee:a8:8f:aa:31:25:a6:51:
af:6e:5b:4d:25:15:63:76:9c:43:71:b5:a6:47:4e:
35:56:f5:e0:e9:10:56:47:ea:47:3c:7c:51:f2:cf:
50:ad:a5:06:ed:1c:4b:48:c5:99:8b:c5:3c:79:c7:
03:0c:e6:4d:53:50:d3:bd:8c:76:a7:b3:b8:94:dd:
16:f2:d3:1e:11:e4:00:2f:7d:ef:9f:4e:b6:a3:10:
2f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:90:46:1D:59:5D:3E:04:02:EB:5A:42:83:FC:04:68:A5:02:03:BE
X509v3 Authority Key Identifier:
keyid:AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:06:be:05:c8:bd:d7:c2:08:96:ca:36:1b:5c:f7:9e:b4:af:
2a:7d:6d:af:53:9f:1d:4c:82:ae:6e:54:7e:0f:54:60:dd:11:
05:bb:65:c1:d5:41:2c:43:2a:bc:af:d7:d5:fa:7f:5a:ec:47:
55:f8:38:f1:07:3f:af:67:e9:4c:e9:71:79:a5:d4:48:93:39:
d8:bd:76:fd:8b:e6:ac:8c:0d:f0:88:66:ee:23:5f:47:53:8a:
61:6b:3c:79:81:42:61:2c:5e:2b:ce:51:56:58:7b:87:70:71:
c2:95:21:89:12:c9:dc:cc:c7:ee:64:1e:90:40:ea:8f:45:73:
02:59:91:f1:d3:0d:f4:f0:e3:62:c6:34:91:94:56:99:59:3f:
a2:a6:8b:a9:06:1b:d7:cc:30:5b:28:04:ce:54:b3:6d:09:0f:
f5:2c:62:d6:64:0f:27:b0:fb:07:e6:51:4b:e7:6e:89:de:a7:
00:f1:ac:2e:d1:87:10:c1:ac:f5:e5:f9:f0:c3:df:43:96:34:
98:d6:da:98:f1:99:50:e8:4b:92:89:7f:41:47:5b:91:b5:bd:
b2:c6:ab:fa:9e:de:6e:7b:6e:9c:33:b7:d3:cd:89:55:1d:51:
44:7d:ba:c3:61:03:cd:fc:a2:75:ba:25:0b:cf:16:2a:63:38:
2f:d4:33:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:13:49 2025 by rpki-client