Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json)
Hash identifier: ZbcOc3FYMwvdFFf0OJ+DTwrMBnoj3KGYcLL1GfXiMBI=
Subject key identifier: 2F:63:AF:DD:54:13:0A:7C:F1:45:C9:69:DD:AE:BB:20:56:D6:D9:F4
Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Certificate serial: 047F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
Manifest number: 0464
Signing time: Sat 12 Apr 2025 23:54:01 +0000
Manifest this update: Sat 12 Apr 2025 23:54:00 +0000
Manifest next update: Sat 19 Apr 2025 23:54:00 +0000
Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: 5h7gUut9ODIWCY7slbR9IBIYW4ubRlUgxidvrMDyzng=)
2: 26341238FB5011EF989C8143C4F9AE02.roa (hash: 6Gx+BiutQSrEbY8mFBzgAsNKgb1qIvA80j3THb6HaOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 23:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1151 (0x47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E45, serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Validity
Not Before: Apr 12 23:54:00 2025 GMT
Not After : Apr 19 23:54:00 2025 GMT
Subject: CN=67fafd19-48b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:01:4b:99:91:78:62:75:ef:d7:17:7e:ee:
47:30:ad:c8:d4:69:67:9b:03:ea:44:5c:3a:1e:43:
dd:1d:1b:26:3a:2f:9a:65:4a:4a:f3:5c:97:6e:c0:
81:cd:2b:c0:66:5e:4c:42:52:df:af:a5:e1:b0:e2:
dc:2b:63:44:47:c1:d7:e0:9f:fb:73:16:13:04:83:
4d:42:c6:e2:3b:9d:8e:f6:24:c1:6e:a1:7c:72:2c:
93:0b:e2:a7:4f:07:42:d4:8e:85:eb:70:07:55:0d:
fc:74:09:d5:49:fe:2a:f6:1d:b3:bf:6d:5d:1f:77:
0c:f8:3f:98:d4:51:be:f0:5b:54:99:05:a3:16:b8:
8b:d2:d2:34:c7:d2:18:d8:23:00:af:39:c1:73:5e:
a4:66:78:47:61:11:71:1e:63:d0:b7:dc:57:a5:e3:
85:4b:eb:64:08:b6:10:0e:f5:ef:83:3a:ff:7e:d9:
b2:62:2e:e5:a9:89:b7:22:82:67:f4:5b:b4:03:5a:
ee:4d:8d:04:ef:17:85:1e:a9:11:d6:2f:9b:ca:93:
eb:0c:e0:b4:5e:92:5f:7c:89:3c:4f:d4:be:5b:bb:
ef:a1:ca:96:46:e8:4b:42:90:75:ab:64:6c:d5:bc:
de:a7:8f:59:a3:94:77:b5:c9:6c:6a:8e:56:9b:ed:
51:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:63:AF:DD:54:13:0A:7C:F1:45:C9:69:DD:AE:BB:20:56:D6:D9:F4
X509v3 Authority Key Identifier:
keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:76:43:ac:03:4f:61:3f:e6:3e:c5:53:8d:04:2a:c0:97:14:
78:08:e1:02:24:c4:43:5a:76:8a:a1:ff:fe:44:87:df:c2:8a:
3b:3c:0b:e0:d1:b3:78:2e:e2:85:be:98:bd:0b:67:19:53:63:
e4:b8:3c:a8:b0:1f:b0:57:68:9f:6a:70:87:f6:e4:d4:60:10:
79:62:f5:5c:9f:ff:71:92:00:95:d8:16:af:52:56:73:b8:63:
c3:7d:d2:84:ca:77:d8:3e:33:04:98:91:76:8a:9d:a3:f4:51:
92:d7:2d:28:d8:16:28:98:83:10:cb:95:64:ae:a7:c7:cf:1a:
87:64:83:7f:6e:1e:36:06:43:6f:c6:93:cf:cc:d9:41:9f:0a:
1d:06:54:e7:4f:6d:2c:08:e8:cc:62:57:f8:fd:be:3f:85:76:
8e:6b:1a:77:a7:07:22:2a:ea:db:4e:c9:45:d6:3e:76:db:5a:
02:13:b4:a1:43:6e:2b:61:f7:57:30:53:e1:18:d0:c2:ea:e0:
0f:72:63:c1:89:3a:55:a1:03:1b:ca:6f:1c:21:3e:5c:49:67:
51:e0:55:9b:67:6c:f8:81:c0:12:fd:81:cd:c3:64:90:d6:76:
d4:62:ad:73:0b:14:9a:3e:5c:cb:23:7a:1b:1e:16:36:70:ab:
9b:1f:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:17:57 2025 by rpki-client