
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
File: 28ptKqUoxLJFVtsH_LVpw2rC_rE.mft (raw, json)
Hash identifier: CcrmugiRSTaOyuQdeUwM5JQ45mY9bt/TYuPOwajlaEc=
Subject key identifier: 3A:82:3E:AB:4A:9A:8E:88:FC:6F:B3:B0:C8:9A:EF:99:21:E5:85:1A
Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1
Certificate issuer: /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
Certificate serial: 0265
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
Manifest number: 0262
Signing time: Sun 13 Apr 2025 01:21:50 +0000
Manifest this update: Sun 13 Apr 2025 01:21:49 +0000
Manifest next update: Sun 20 Apr 2025 01:21:49 +0000
Files and hashes: 1: 28ptKqUoxLJFVtsH_LVpw2rC_rE.crl (hash: cT6WN8sQJCHf/sC4QOuCb5yk+egExot01NUEyEskBJA=)
2: FB2262620C3111EDBD0F7137C4F9AE02.roa (hash: p+7htth4BYnY9ZHE2+xDn3g7oJbyqr4j+0PWu6MDReI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl
rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 01:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 613 (0x265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C477, serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
Validity
Not Before: Apr 13 01:21:49 2025 GMT
Not After : Apr 20 01:21:49 2025 GMT
Subject: CN=67fb11ae-6a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:d5:aa:6e:32:f5:65:f1:98:57:ee:1d:ef:
fa:cc:a1:29:bf:fb:76:46:4c:a8:45:4c:8b:cc:ee:
44:ed:7d:8b:78:56:e7:fa:82:e4:ef:34:2b:c1:d3:
bd:da:07:6d:0e:76:6b:45:93:1b:ea:0c:84:de:58:
05:6a:ab:c4:30:ba:95:a9:af:ec:bb:78:38:c5:3a:
41:dc:1a:78:d9:da:93:06:58:6b:46:35:a9:86:eb:
91:a0:90:3f:b3:e9:dd:5f:b0:0d:38:d9:9b:34:cd:
65:40:5d:68:74:48:21:7b:e3:af:cd:d9:e5:3b:9f:
eb:5d:f3:00:f1:4e:71:b3:c9:24:d8:6c:87:42:a3:
b0:1f:e4:19:f4:70:76:18:da:dc:cb:45:2c:42:ae:
fc:1f:60:2e:d5:13:5c:f8:3c:94:48:0b:92:6d:84:
b0:10:2b:d4:8d:b6:d3:1b:ac:d9:87:66:41:49:be:
40:de:25:58:ef:8e:d1:76:9a:be:4b:13:f9:8b:3e:
70:bf:2e:ba:ef:97:76:66:29:85:27:cb:5d:ab:9c:
d0:01:af:43:14:14:27:ed:da:c4:a4:d7:5d:73:41:
eb:22:57:a5:1b:fa:db:c2:89:f9:bb:14:25:c4:51:
fa:d1:96:ec:b9:27:a4:52:63:ea:87:6b:ab:9c:ed:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:82:3E:AB:4A:9A:8E:88:FC:6F:B3:B0:C8:9A:EF:99:21:E5:85:1A
X509v3 Authority Key Identifier:
keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:5b:a6:be:76:79:6b:b4:47:88:c3:c8:65:0b:23:ae:d2:0f:
a9:82:fc:03:70:fe:dd:73:cd:d5:cc:07:c1:d9:58:b0:88:d9:
c5:b1:92:7f:61:0e:dc:2d:5a:c7:ec:60:59:9b:71:c1:7a:f7:
f1:4c:e5:d6:11:b9:67:62:ac:cf:6d:45:d6:c1:db:eb:e3:47:
b0:4a:b7:08:57:41:c5:ef:f0:8f:9e:ce:58:d9:7c:5c:93:c2:
66:ba:ca:78:c2:d3:0e:73:33:aa:24:3d:c4:82:ce:b2:35:03:
a3:04:3c:9f:bb:13:f5:67:f8:6c:1f:60:1d:f2:8b:66:7f:ef:
6d:f5:99:8d:81:e8:94:08:53:fd:04:d7:d7:d5:b5:31:c2:35:
26:41:7d:4d:fe:fb:62:d2:3f:c5:96:0d:4c:44:81:e5:c9:de:
da:f1:ab:e7:62:84:bd:82:d1:4b:0f:3c:af:6c:75:c2:94:0c:
de:37:85:af:30:5f:44:8a:87:dc:13:c4:21:81:20:c3:30:5e:
99:76:bf:b5:6a:c3:8c:3c:56:72:65:06:00:bf:d5:95:4c:3b:
31:8d:36:b8:d9:5c:ba:00:a4:63:e3:33:38:1b:a5:3e:27:62:
36:64:e1:26:0c:fc:16:c9:4a:10:9e:2f:b3:a7:f0:b7:db:6d:
a4:e5:80:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:49:30 2025 by rpki-client