Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
File: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft (raw, json)
Hash identifier: nu/yzInj7bPxeqfPFY2bZGRQ+88EMyPRdcaf9KrfVig=
Subject key identifier: 6E:07:5B:12:AC:E8:68:30:6C:C7:18:54:70:DD:ED:ED:19:B3:61:CF
Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D
Certificate issuer: /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D
Certificate serial: 1CFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
Manifest number: 1CF2
Signing time: Sat 12 Apr 2025 16:06:27 +0000
Manifest this update: Sat 12 Apr 2025 16:06:27 +0000
Manifest next update: Sat 19 Apr 2025 16:06:27 +0000
Files and hashes: 1: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl (hash: ogmmEXjFRrYu/uYRU/nPm8hvwz+g7gdnBCVNpoinasc=)
2: 14FFD39467BE11E8910CB13EC4F9AE02.roa (hash: QR4V+G44HNdHIrjfSi80Dwbdarxdiad903tEFHxOmOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl
rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 16:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7423 (0x1cff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D
Validity
Not Before: Apr 12 16:06:27 2025 GMT
Not After : Apr 19 16:06:27 2025 GMT
Subject: CN=67fa8f83-1b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f8:5a:bc:1c:3b:b9:ec:8b:67:49:48:86:f3:
91:f7:93:e4:a5:9a:f0:1f:c3:94:25:52:2e:f0:50:
b6:a1:22:e6:fc:bc:d9:53:3b:77:69:6a:f7:cd:f2:
ac:c8:61:20:83:8b:9d:b6:56:c3:d6:34:95:b9:c5:
10:a7:a9:18:10:7a:5f:40:7c:76:d4:4b:e8:00:4a:
68:ad:38:11:32:65:f0:81:62:a9:60:90:66:29:a9:
ca:d2:8a:ea:55:fa:f0:77:8f:53:16:34:e7:b2:f9:
9f:27:95:93:a5:37:77:68:8b:76:bf:bf:66:f4:cb:
32:0f:87:ce:50:d5:e3:11:98:d3:bf:d4:81:8e:20:
a9:bb:92:3d:8f:95:84:49:86:16:c4:42:f1:3a:e3:
ad:53:43:56:b9:a2:3c:57:19:92:10:66:c8:92:df:
6f:fb:db:86:2e:11:36:02:4f:e6:d3:1b:2b:05:d8:
bd:eb:2c:ec:69:2a:3e:2f:97:71:6a:19:03:8f:ce:
57:a7:5f:df:94:61:09:a6:8c:ca:5c:c7:12:22:fd:
49:48:34:a8:bc:5c:e4:e0:e0:21:27:79:10:29:fe:
7f:15:a6:99:16:93:d3:e8:d5:24:fa:5c:ea:fa:3d:
13:7e:2e:a4:53:d2:0f:86:26:6a:d9:b2:93:6f:7f:
1d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:07:5B:12:AC:E8:68:30:6C:C7:18:54:70:DD:ED:ED:19:B3:61:CF
X509v3 Authority Key Identifier:
keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:79:bd:82:83:33:af:29:8e:4a:4a:f3:40:63:be:d8:86:a6:
74:1c:5f:42:b3:67:fd:b1:7a:b6:40:7a:9a:03:9b:13:11:72:
36:bc:a7:10:f0:f8:9d:68:e8:0a:8e:10:8e:fd:5d:f1:be:25:
48:f4:3e:e6:8b:6b:51:9c:56:e4:03:5e:26:58:09:db:31:c9:
da:58:52:1d:a6:80:94:e0:d5:b6:a1:21:dd:93:76:49:d4:5b:
5c:3e:96:40:10:f2:27:d4:d8:69:0b:04:0a:21:6a:6f:7f:19:
11:92:0d:3b:90:7f:83:ae:13:68:67:2c:5e:e2:8e:20:52:2e:
bc:e9:78:91:69:a4:16:ee:07:fa:36:a1:90:fc:0c:09:58:9c:
16:19:94:19:34:1f:49:21:29:e6:b1:86:92:2c:7b:89:3b:6a:
8a:f2:d9:d2:51:01:43:7c:87:d4:bb:29:a3:a4:d2:8f:88:cb:
64:88:cb:b9:26:45:60:d4:d2:83:90:0b:f2:a7:35:cf:65:0d:
a4:d5:f0:cd:66:5c:c2:d3:2b:1d:f2:a6:2c:83:2d:7a:b5:11:
35:70:38:96:11:e4:ea:6f:b4:58:90:0c:58:e4:a9:ec:e0:55:
30:e9:95:3d:35:b7:4d:58:24:a8:32:5c:6a:22:37:20:5f:30:
a4:6e:7b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:38:42 2025 by rpki-client