Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft
File: rUk9yaPSQDSDYoWHBR93lRWJFnk.mft (raw, json)
Hash identifier: Xu9Dzf+fM2SJgmGZzVpMTjyuvdAoGiU5IpbHFziVHXs=
Subject key identifier: 58:2C:08:8B:99:E0:0F:EF:B1:D5:F6:5E:E4:1D:3C:EA:0F:41:55:E2
Authority key identifier: AD:49:3D:C9:A3:D2:40:34:83:62:85:87:05:1F:77:95:15:89:16:79
Certificate issuer: /CN=A918B418/serialNumber=AD493DC9A3D2403483628587051F779515891679
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft
Manifest number: 0237
Signing time: Wed 09 Apr 2025 01:34:20 +0000
Manifest this update: Wed 09 Apr 2025 01:34:20 +0000
Manifest next update: Wed 16 Apr 2025 01:34:20 +0000
Files and hashes: 1: rUk9yaPSQDSDYoWHBR93lRWJFnk.crl (hash: hWjp25cJWulZE+Sxymf20QqOFwfMWX41coNdNNNRem0=)
2: 8275E1721C5311EDA75CF137C4F9AE02.roa (hash: ylAjtSurS2AriNqYAWDXwI4mJ+u3ceX6ZX3mIJq8z+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.crl
rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 01:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B418
Validity
Not Before: Apr 9 01:34:20 2025 GMT
Not After : Apr 16 01:34:20 2025 GMT
Subject: CN=67f5ce9c-b737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:41:98:ed:f3:d3:bf:2d:b6:47:72:88:f2:
e9:d0:8c:1e:dd:ee:a3:c7:14:0a:25:37:c9:bd:b8:
6c:d9:8a:30:fb:f6:58:cc:85:23:da:e7:3b:8e:64:
80:47:57:7b:d5:48:75:58:92:56:5d:86:5c:fc:13:
1c:a5:a6:3e:38:97:1c:c0:df:78:eb:a1:a8:bf:dd:
9e:90:05:94:32:e6:97:fc:fe:93:53:6b:50:98:7f:
e0:dd:8f:de:2b:10:bb:ea:7c:da:cd:a6:61:89:c4:
42:22:65:46:4b:cf:0b:15:bc:c7:8a:49:86:26:0f:
18:2d:c5:bf:70:bb:80:ef:7d:97:2c:39:6f:3c:76:
5d:bc:ef:f9:8a:fd:d9:47:59:b5:64:f9:02:dd:4f:
70:7a:b0:ce:b5:57:a1:a4:11:c0:b2:15:1d:78:11:
85:12:af:9b:42:37:e1:d9:9e:ce:07:f4:42:0e:1c:
3c:33:85:78:22:da:0b:5e:ad:95:e3:0a:a0:31:b5:
22:82:3d:16:27:15:fc:c8:93:d0:44:84:38:2f:e0:
e3:ad:09:77:6d:a8:99:c3:e4:10:46:af:3a:88:9c:
24:a5:ca:2a:58:c4:3f:c0:64:2f:00:39:eb:af:97:
fd:e9:33:5e:97:ab:78:67:c6:f4:fc:bb:c6:2e:d3:
f8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2C:08:8B:99:E0:0F:EF:B1:D5:F6:5E:E4:1D:3C:EA:0F:41:55:E2
X509v3 Authority Key Identifier:
keyid:AD:49:3D:C9:A3:D2:40:34:83:62:85:87:05:1F:77:95:15:89:16:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUk9yaPSQDSDYoWHBR93lRWJFnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B418/AD0DC4801C4F11EDAAD31386C4F9AE02/rUk9yaPSQDSDYoWHBR93lRWJFnk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:f0:ff:a6:3b:06:90:5a:c6:b0:d7:bf:e6:79:f1:b9:04:6c:
40:8e:13:6f:53:b3:bb:00:5e:05:3a:7f:10:df:b2:0d:1c:97:
5e:c8:f0:64:e9:e2:30:b3:4e:35:25:4a:63:ad:86:c4:9a:c4:
02:1f:92:85:6f:2e:10:57:76:84:1c:aa:cb:ee:95:ac:45:95:
3e:53:74:3d:d2:7d:83:a8:19:9d:3b:53:61:c0:cd:5e:67:4b:
66:28:24:ba:9a:33:ca:b0:f6:aa:a6:76:d6:4f:a5:55:40:00:
4f:1c:f7:64:c0:a6:9a:84:a9:e9:43:69:27:8f:2f:c2:ac:11:
f3:d3:5b:d2:f8:9b:89:f7:d4:56:4d:94:21:72:1a:85:c3:ea:
ef:8c:96:b0:b6:92:f2:f2:a1:14:26:b4:37:8a:89:91:71:5f:
3d:f1:bc:7e:a9:4e:96:1c:f9:11:5b:ca:95:88:a3:e4:9c:46:
88:fb:63:4b:f0:7f:8a:82:eb:ca:1d:20:b3:a8:f8:3a:6a:98:
10:f7:ed:01:8e:27:e4:60:65:e7:97:31:c7:33:cb:1e:82:e7:
36:0a:e5:60:7d:75:2f:2a:6c:24:5a:75:4d:6d:69:ea:dd:25:
aa:6c:96:77:49:ce:ac:e5:d1:bb:76:29:62:b6:99:6f:72:fc:
61:fb:7c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:18:35 2025 by rpki-client