Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft
File: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft (raw, json)
Hash identifier: SqggkGb09mPYudgiMlnkVVHSDDqWPWlcz4aWbZ7j4Pw=
Subject key identifier: E2:71:4B:98:DA:76:DB:C6:20:73:9D:BF:B7:F2:8C:2C:A5:6F:2D:59
Authority key identifier: E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1
Certificate issuer: /CN=A918D96C/serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1
Certificate serial: 346F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft
Manifest number: 346F
Signing time: Wed 16 Apr 2025 14:50:59 +0000
Manifest this update: Wed 16 Apr 2025 14:50:59 +0000
Manifest next update: Wed 23 Apr 2025 14:50:59 +0000
Files and hashes: 1: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl (hash: dkFGpEvBfY3cwLnTM+Zx34nPEIXTUf0mgV5o0hfeUiA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl
rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Apr 2025 14:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13423 (0x346f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D96C, serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1
Validity
Not Before: Apr 16 14:50:59 2025 GMT
Not After : Apr 23 14:50:59 2025 GMT
Subject: CN=67ffc3d3-7666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:70:64:f0:ae:19:bf:28:75:2a:d1:3e:37:
94:12:c8:aa:b2:32:6d:9a:88:85:8c:09:6a:6f:3f:
6a:ab:3a:68:46:a1:ac:bb:f8:ac:6d:63:b4:6a:db:
ca:65:5a:bc:ef:2f:4f:ed:2c:48:13:cf:07:34:ec:
f2:59:ac:6f:de:8d:81:ef:3f:2e:2b:20:f8:32:41:
cd:b7:11:fb:04:60:1b:b0:a8:f4:22:39:1e:8e:9a:
76:15:7c:e9:17:5d:03:59:72:01:42:08:e4:82:b1:
af:c5:b6:d5:f4:08:54:08:d8:82:2c:db:60:cf:52:
b7:bd:de:9f:45:fc:9e:bc:1b:06:93:58:4b:96:52:
a2:e7:62:c2:1a:87:51:9f:2c:52:08:a6:e1:b1:53:
09:44:71:b1:15:89:8e:e5:1f:c7:8e:47:ad:45:e4:
ff:15:5b:65:2f:d2:db:4b:b1:54:c5:14:bc:80:93:
02:85:e5:75:53:3f:8b:af:26:77:ea:85:69:ff:d7:
0f:af:bd:39:eb:71:f2:15:89:1e:df:bd:c7:ef:5e:
1e:6c:b2:90:84:12:0a:a1:0f:cf:05:ee:6f:c3:3a:
63:4d:81:ae:30:d0:09:5e:9d:3d:16:bc:e8:ac:46:
5c:0a:89:fb:a0:7e:49:0d:ba:0a:c4:f2:83:57:9f:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:71:4B:98:DA:76:DB:C6:20:73:9D:BF:B7:F2:8C:2C:A5:6F:2D:59
X509v3 Authority Key Identifier:
keyid:E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8e:2f:02:03:e0:d1:9d:64:69:90:2b:eb:77:5b:fe:50:29:
e8:a6:4b:5c:d8:2f:80:64:91:35:e5:8d:75:25:fa:e3:06:48:
8f:87:e9:01:25:2e:cf:e3:30:cd:69:93:9a:75:52:99:9c:44:
2d:6d:e0:93:09:22:6a:4e:d0:1a:8a:9e:7d:92:a8:4e:3f:12:
1d:85:96:a8:58:c7:2e:61:43:82:22:2b:8b:24:bb:51:db:c0:
42:19:3d:52:1c:94:7d:52:01:15:23:6a:6e:84:c4:08:f2:02:
f8:90:28:a5:ab:38:5d:04:0c:e4:6a:ec:b2:69:45:da:cd:1a:
cd:ee:82:af:29:0d:2e:9a:22:79:e7:9c:a8:78:66:28:68:c2:
36:1e:0d:c9:3a:b4:81:cc:be:03:7d:af:5a:9b:df:0e:21:d7:
91:0d:c9:b6:ed:80:dc:a4:54:ce:ee:97:3c:eb:31:fb:7b:d8:
39:39:65:b2:c7:88:bd:7e:df:52:8c:ca:a6:9a:66:5d:80:60:
6e:cd:8d:1b:36:91:0c:b2:fa:f8:26:47:14:d7:14:02:19:54:
0c:92:15:aa:aa:6d:b8:8f:35:e8:0e:a9:54:40:c7:18:1e:37:
f1:0b:6f:cd:11:47:2e:ed:23:d5:b8:72:36:7e:f6:d6:8c:fa:
17:7e:a4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:35:52 2025 by rpki-client