Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
File: 9ncWp9N92wPcVtA6uQKnIDfqGdk.mft (raw, json)
Hash identifier: ul4O9SNu8BUPnwkUr0lDAdD/K68/q+kexsIb3lFzEGM=
Subject key identifier: 38:72:10:A0:A0:5D:2B:22:E3:48:9E:23:37:D1:45:58:B0:88:AC:F7
Authority key identifier: F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9
Certificate issuer: /CN=A918F1EE/serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
Manifest number: 24
Signing time: Thu 17 Apr 2025 06:36:26 +0000
Manifest this update: Thu 17 Apr 2025 06:36:25 +0000
Manifest next update: Thu 24 Apr 2025 06:36:25 +0000
Files and hashes: 1: 9ncWp9N92wPcVtA6uQKnIDfqGdk.crl (hash: 2PH140xahi7n+aUY/b8H0ozpmYFQwqBU3rbGuEbyu5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl
rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Apr 2025 06:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1EE, serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
Validity
Not Before: Apr 17 06:36:25 2025 GMT
Not After : Apr 24 06:36:25 2025 GMT
Subject: CN=6800a16a-55f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:1b:64:cb:78:1b:27:c4:a4:48:b8:cd:fa:
c2:a7:c2:61:a2:eb:e1:62:29:76:0b:d3:f8:ff:aa:
25:39:59:5e:c2:af:fb:f8:ab:cb:03:3b:70:95:d5:
68:ed:ee:74:c2:f9:0d:4b:6c:b6:80:09:6a:8c:2e:
ea:8c:a3:a0:86:b3:82:89:bc:15:ef:2e:0a:d5:eb:
4b:74:3d:7a:5b:06:a4:4e:d1:ae:7c:1e:7c:82:d9:
fa:95:b1:a8:ea:8e:78:f6:18:d4:eb:a5:62:da:94:
19:bc:78:44:a1:a6:91:e2:b8:19:ae:de:5f:be:44:
8d:a3:ce:26:78:d8:b8:12:80:a4:af:90:32:55:f9:
6c:77:92:25:fd:97:5a:80:78:13:62:00:06:51:ba:
d1:5d:c7:24:3a:7c:4a:43:f6:88:a1:06:cd:03:c6:
31:86:c2:54:44:da:da:e5:fb:c7:b8:6b:9b:ab:d7:
0e:9d:5c:34:d5:39:60:c0:87:06:6f:9a:70:84:c5:
96:2c:0d:ae:82:be:42:e6:1f:e2:c9:ec:95:39:eb:
d6:87:33:d4:5f:d6:d8:a8:48:41:95:71:82:22:05:
24:0c:74:d3:ed:aa:4f:59:7e:75:ab:a8:cb:4e:94:
8f:28:4b:c8:3f:ce:06:ee:73:29:51:c4:af:8d:3e:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:72:10:A0:A0:5D:2B:22:E3:48:9E:23:37:D1:45:58:B0:88:AC:F7
X509v3 Authority Key Identifier:
keyid:F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:90:78:c6:43:c6:6a:a0:9c:92:43:8a:b9:47:e0:da:63:12:
26:99:89:3b:fc:cd:78:d5:9e:2a:ee:95:34:69:03:e8:d5:b6:
35:9b:90:08:ab:ed:e5:11:17:63:8e:0b:9b:84:4a:c9:89:a3:
76:f6:7d:bb:db:f6:22:40:f9:72:a8:5d:11:83:c4:48:f8:00:
fe:cd:96:57:7d:88:55:1a:3a:4d:c2:f8:95:a0:c3:82:f3:1b:
02:73:6e:bd:d5:e8:73:92:3c:f6:95:55:f1:d9:7d:d2:25:81:
72:85:ad:1a:c0:5a:75:a7:98:33:08:4b:bc:31:dc:6c:ea:1c:
9b:02:70:4c:5e:b5:bd:f3:be:c7:f7:30:9a:75:72:5f:53:07:
bf:1d:ac:50:ad:55:be:1f:4b:85:55:c7:ec:ee:55:fa:5a:7d:
90:98:d3:2f:53:c5:ff:b7:f7:6f:88:8c:69:fb:91:0a:41:6f:
51:37:32:0d:c4:1b:ce:30:3d:6a:d6:f7:cf:37:58:d7:39:a9:
36:00:98:eb:25:e1:f5:8a:38:5b:53:e9:0b:0a:c2:38:f6:85:
b3:94:c3:38:55:16:4d:14:f4:25:b6:23:5b:62:13:15:11:da:
89:e4:83:69:fb:fd:b5:7e:ad:ae:48:6a:21:e7:00:82:73:87:
3e:0b:a0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:46:17 2025 by rpki-client