Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
File: ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft (raw, json)
Hash identifier: N+It0kHWP6dGA2qq30YooAHFI70Zyj69s3Q5mFG9J1Y=
Subject key identifier: D6:5E:BE:24:01:AF:17:94:C1:D6:E4:3B:1F:C3:5C:D7:0C:AA:E7:4C
Authority key identifier: CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF
Certificate issuer: /CN=A9189132/serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF
Certificate serial: 0AEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
Manifest number: 0AE4
Signing time: Sat 12 Apr 2025 19:12:11 +0000
Manifest this update: Sat 12 Apr 2025 19:12:11 +0000
Manifest next update: Sat 19 Apr 2025 19:12:10 +0000
Files and hashes: 1: ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl (hash: 7FVk6aIgkMpU7v0sz4l9TUOc7alWMb4A0+TEzxMX6nY=)
2: 4E6B4E24458E11EA84E01A0FC4F9AE02.roa (hash: QbUyZORfUsAuIPfZUHLWRtdmTwbA8QqQPT+t+aGRe2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl
rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 19:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2796 (0xaec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189132, serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF
Validity
Not Before: Apr 12 19:12:11 2025 GMT
Not After : Apr 19 19:12:10 2025 GMT
Subject: CN=67fabb0b-e852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:53:86:e4:53:ab:58:50:11:3d:3d:00:66:
68:78:17:ba:61:83:e6:1a:56:9d:6c:4e:0f:d3:e4:
62:7c:7c:e7:ca:4d:f0:1c:8e:82:0d:93:85:0f:5e:
c7:92:53:8a:5e:64:87:40:2b:e2:1c:83:ba:d1:fa:
b7:09:1f:8d:9e:96:54:79:cc:7b:1a:0f:55:92:72:
68:e3:4d:01:c0:e5:06:67:95:23:81:a3:f1:ff:31:
82:35:6e:f1:eb:9e:55:36:74:65:da:1b:14:27:3f:
89:a8:f5:ab:6b:7d:ef:a6:54:9c:1e:da:02:1a:51:
59:d7:ec:5c:51:3a:f0:93:64:8e:d3:aa:07:c5:a7:
41:df:07:c6:03:88:3d:cc:a3:1c:a1:8b:c7:8c:64:
a7:03:9a:f4:de:0c:e4:e0:4c:ea:f4:35:4d:6b:69:
bd:d7:86:98:3b:f4:3c:b9:6d:68:6f:b2:84:36:04:
95:fb:86:2c:39:1c:c0:91:5b:fc:a3:42:40:f9:f0:
a5:ff:0d:73:75:3a:b9:b3:a8:f8:21:45:ce:ef:f9:
85:6a:b3:c8:b3:2e:7f:99:08:f4:a4:35:10:67:92:
3f:df:79:e4:95:46:95:00:bf:71:78:69:ea:e8:88:
9d:10:93:56:f5:45:76:1f:1c:a6:0a:6c:49:54:ec:
a2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5E:BE:24:01:AF:17:94:C1:D6:E4:3B:1F:C3:5C:D7:0C:AA:E7:4C
X509v3 Authority Key Identifier:
keyid:CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cf:d1:d8:3b:a9:d6:46:92:ad:b3:d0:bc:87:85:c4:04:7c:
b6:8c:98:74:2d:1a:19:2f:68:1c:74:a4:b3:29:91:40:05:c9:
f5:91:75:17:ff:1c:0c:d8:32:d9:9f:8f:df:fe:10:99:6a:02:
fd:64:02:7c:73:cc:22:49:f4:62:39:a6:e3:27:7b:c3:89:d3:
50:fc:d3:08:9c:d1:59:25:b6:af:c2:d2:74:0f:d7:b9:16:b7:
e2:8c:fc:41:18:68:78:b8:fb:55:19:84:9f:00:f3:4a:fe:2c:
f8:9c:79:73:7d:c5:a3:3c:e9:33:9f:76:47:48:b1:06:41:10:
4a:cf:b3:06:48:40:56:13:ad:0a:ed:61:22:0a:93:c6:a5:28:
7e:17:5a:95:81:06:b6:2a:62:39:f2:82:0d:81:99:49:eb:8f:
87:52:e6:79:1c:84:14:61:f3:38:79:81:17:69:c1:eb:30:97:
6c:78:d6:b1:22:64:3c:b9:ce:a3:d9:a0:c7:9c:0a:a7:e0:94:
0c:0d:a7:b0:cd:cf:26:2b:33:80:58:8c:33:c1:01:8a:76:4b:
56:c9:52:80:b1:8d:81:da:03:db:0f:34:1c:f4:f6:b3:dd:a8:
01:ff:22:57:3e:72:3b:d6:3b:77:19:fb:ff:90:c8:ac:78:35:
85:55:26:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:58:58 2025 by rpki-client