Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
File: aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json)
Hash identifier: YXaejGVFv5oCdq5rCZYAflYLJqfcl2tVZ765NITKVJY=
Subject key identifier: 5D:1F:49:CF:A1:EF:45:E8:AE:01:0A:6D:6E:FC:92:3A:72:67:F5:48
Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
Certificate issuer: /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Certificate serial: 0789
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
Manifest number: 0783
Signing time: Wed 16 Apr 2025 21:06:11 +0000
Manifest this update: Wed 16 Apr 2025 21:06:10 +0000
Manifest next update: Wed 23 Apr 2025 21:06:10 +0000
Files and hashes: 1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: /ZJzWWEiGqG8HBAjmZzH4x2Vpo4WMuV1QddUWAck3LI=)
2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: MoYCzKz4ghJi1D1zSWKy/H/ig794mxo8w546loZw0HA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl
rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Apr 2025 20:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1929 (0x789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D931, serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Validity
Not Before: Apr 16 21:06:10 2025 GMT
Not After : Apr 23 21:06:10 2025 GMT
Subject: CN=68001bc3-7f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:53:e3:65:ef:54:a4:37:e0:37:09:42:ec:
f2:d8:a7:70:17:92:b2:b4:e1:74:f5:de:d5:e2:6a:
dc:37:aa:54:89:09:66:fe:6b:74:58:4c:6d:97:f4:
44:9a:33:3a:d9:db:8b:01:58:73:ab:59:b8:f3:49:
af:b3:52:30:9a:b9:5f:de:78:14:a8:c0:33:9c:83:
d2:3f:d6:d5:14:ae:b5:4d:37:8a:ad:f9:45:de:c0:
5f:13:94:24:ff:cc:f0:c8:c8:43:f7:67:a9:51:6d:
46:7d:66:ba:70:a8:c5:de:0d:86:69:ae:76:8f:88:
a9:c2:1b:78:33:df:60:22:96:b4:34:fa:62:24:b2:
a5:1d:08:f6:99:d8:f5:85:50:df:63:7c:36:87:e2:
25:d1:b8:66:41:8e:64:e9:0d:72:dd:dc:37:8c:a4:
a4:9c:4b:0f:fc:19:da:e5:5e:65:88:c6:3c:2a:33:
2a:cb:fc:22:ae:22:4d:08:cf:69:f8:2d:07:9f:a5:
45:ea:b4:f4:69:27:63:89:c8:82:4a:46:a7:32:84:
cb:91:41:f9:ff:a3:a5:4f:1c:19:44:7e:3f:84:37:
cb:ae:e4:3e:bf:f8:76:eb:b0:0a:f6:3e:fd:e4:0e:
2d:43:32:5a:44:8a:81:63:2a:c7:ee:be:c4:49:1b:
fa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1F:49:CF:A1:EF:45:E8:AE:01:0A:6D:6E:FC:92:3A:72:67:F5:48
X509v3 Authority Key Identifier:
keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:07:93:9c:2c:f4:5c:f3:4b:67:e0:49:14:46:5e:b2:0e:27:
a4:1a:c7:56:de:94:e6:19:ea:66:42:6a:41:f1:fe:39:7b:f7:
32:7a:b8:52:f9:88:48:9a:b8:83:5b:d2:23:50:eb:65:26:a5:
07:9d:57:96:eb:a0:8f:c9:81:57:af:e4:3f:9c:92:a5:ef:46:
fc:b3:49:7c:69:a4:60:69:7a:30:58:3c:4e:44:4f:62:45:41:
78:a7:78:6c:af:cf:ff:67:12:9e:55:d6:fb:80:1c:f3:4b:3e:
3a:20:c0:26:c0:8e:43:e3:a7:df:ba:b2:aa:52:cc:c5:47:3a:
b5:32:33:b1:38:75:08:ee:72:b2:8c:c7:d0:7d:a0:fb:62:69:
09:f9:4d:6b:1b:51:40:2b:03:47:6e:b3:68:c5:e4:36:96:02:
dc:2b:f5:00:f2:ac:fd:4f:f0:7d:c5:eb:5a:fe:24:8d:40:07:
60:60:42:76:fb:16:21:80:a9:b3:7f:60:ec:63:13:16:7e:d5:
55:91:f2:28:82:da:86:38:c4:67:1c:85:74:79:23:54:b3:e4:
08:5e:7d:7c:ec:c0:31:8a:8d:ab:46:d8:3a:b2:74:08:4e:d8:
bb:c4:92:7a:e6:0d:61:98:c0:d3:a5:d3:52:c8:8f:b6:6f:cd:
8d:a0:e2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:27:39 2025 by rpki-client