Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json)
Hash identifier: ZX1PiVF5ckco9UXF5zHIDAqSjw95g2S2YnjB1+6NzCE=
Subject key identifier: 98:4B:67:A1:59:53:FE:B6:01:6A:C5:0E:74:13:CC:CA:BD:2C:A8:17
Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E
Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
Certificate serial: 05FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
Manifest number: 05FA
Signing time: Sat 12 Apr 2025 22:33:53 +0000
Manifest this update: Sat 12 Apr 2025 22:33:52 +0000
Manifest next update: Sat 19 Apr 2025 22:33:52 +0000
Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: jYzzBUMGTWty17cv5b74beUOVtYLJCNRF11ITT+/BXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl
rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 22:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1530 (0x5fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
Validity
Not Before: Apr 12 22:33:52 2025 GMT
Not After : Apr 19 22:33:52 2025 GMT
Subject: CN=67faea50-a744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d2:b7:a6:6f:1a:22:0e:30:4d:c2:d1:19:d9:
c7:41:89:d4:ca:2d:73:d2:77:06:6c:69:9a:1d:ac:
0f:ed:40:41:b8:ec:d3:a1:30:ed:54:aa:fc:a7:2d:
35:7d:53:23:8f:cd:22:e5:28:a1:9a:ac:1e:1e:cc:
fa:df:53:79:5f:e4:72:21:30:dd:4b:52:77:ab:21:
69:55:6f:02:9d:a2:d7:43:36:df:aa:5a:9f:45:7c:
6c:de:4e:02:5c:14:a4:77:87:6f:b4:42:49:b6:c4:
42:db:74:4d:88:78:09:a1:a5:a4:11:3e:96:9a:af:
75:56:d6:5a:07:f5:b6:bf:c0:90:e8:bf:8f:24:c8:
e1:7f:df:8b:fc:00:59:06:12:9d:1d:b7:07:be:68:
0a:a7:77:0a:b2:9f:cd:a6:3a:41:f1:26:26:e2:24:
66:ef:16:07:dc:9d:6f:39:99:3a:0d:76:ef:6c:c0:
c7:46:d6:f7:e7:26:e5:ea:3b:35:71:eb:ac:c2:a9:
0c:71:28:b6:d1:ca:6b:a1:6c:a5:2f:9d:8d:5e:a1:
09:20:d7:1b:fa:55:1a:89:c0:67:ad:41:96:22:93:
7b:14:c2:3d:c3:60:96:4a:ae:7f:de:82:3d:51:3f:
70:29:91:0c:c1:26:f9:5f:62:b8:cd:14:7a:96:16:
1b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4B:67:A1:59:53:FE:B6:01:6A:C5:0E:74:13:CC:CA:BD:2C:A8:17
X509v3 Authority Key Identifier:
keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ee:ee:8d:5e:5a:6c:35:08:c5:72:95:5e:76:30:a6:f3:bf:
40:71:18:0c:fa:8a:f1:19:c8:ad:ba:03:3d:51:ec:53:96:90:
44:58:f4:0e:48:bc:b2:56:87:f2:2b:e8:91:e0:09:4f:31:2a:
a2:7b:bc:64:29:3e:a5:a4:6f:33:4f:2c:57:4a:5b:39:02:3c:
6e:75:5a:d3:e7:f1:1d:8d:f4:b3:61:4e:4f:59:4d:8f:30:85:
89:d9:01:07:41:d0:fd:c0:c6:50:89:d6:8b:84:de:91:44:75:
bc:3c:de:9b:4e:3e:73:d6:2d:b8:25:21:85:9b:cd:4d:1b:a9:
d5:17:c9:fa:f6:59:ac:66:ff:9b:ae:ce:39:d9:34:29:22:37:
34:0a:e5:15:22:ae:98:ba:30:ba:d5:33:79:d1:72:c5:12:2c:
c0:ab:c6:69:11:b6:8e:72:16:75:44:f2:64:3c:c3:66:1a:2b:
90:f3:7f:b4:33:ac:f9:91:0f:3b:c3:a1:ae:b3:87:35:31:39:
02:5f:a4:d5:3b:2e:4a:cd:6f:81:3c:18:b8:af:72:5a:5c:b5:
93:37:68:73:42:16:23:26:ec:81:f6:0f:28:1e:d6:31:ad:5f:
b2:0f:aa:3a:8e:6c:a9:7f:88:af:e9:81:11:aa:ac:85:9a:c6:
6a:01:18:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:57:07 2025 by rpki-client