Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft
File: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft (raw, json)
Hash identifier: fSD/d+avsCa+KW2su/h4WGAIdFO3VKNFucES0dJk74A=
Subject key identifier: 9F:A0:F8:B4:AA:9A:FB:5B:2F:1D:9A:F0:A4:3B:8A:71:89:4F:9D:B1
Authority key identifier: 62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04
Certificate issuer: /CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104
Certificate serial: 0C2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft
Manifest number: 0C1B
Signing time: Sat 12 Apr 2025 18:29:24 +0000
Manifest this update: Sat 12 Apr 2025 18:29:24 +0000
Manifest next update: Sat 19 Apr 2025 18:29:24 +0000
Files and hashes: 1: Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl (hash: nnI/UQMi4kGjZpiW6nqIjNVhs7tsljr96O4Uw9tUK1g=)
2: EC7403A0B20711EFAADEFA2CC4F9AE02.roa (hash: PFGhRofo52LewJl9DkjKFyd2YYaLnTVGj6ykzk5WTrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl
rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 18:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3115 (0xc2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190FEA, serialNumber=627FA9960EA283AA239213CACD37504D2460A104
Validity
Not Before: Apr 12 18:29:24 2025 GMT
Not After : Apr 19 18:29:24 2025 GMT
Subject: CN=67fab104-2bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:24:56:3b:14:8a:e0:60:df:40:f7:ea:d9:1b:
f8:ad:ef:3c:9a:b4:26:51:16:f3:ff:50:b0:a0:ea:
24:6a:f2:e3:05:8d:ba:ce:96:ec:5b:a0:eb:64:c4:
5c:18:99:98:7e:4b:76:22:ab:0e:23:2d:48:5c:4e:
08:aa:ee:97:33:97:5c:27:b1:ec:75:27:bb:b2:93:
65:b9:7d:62:fc:96:66:79:ee:c5:56:ea:f5:33:2f:
e9:39:bc:b9:fa:3e:49:c1:41:0d:6e:35:99:69:af:
49:52:49:0d:a6:c0:6d:17:55:96:9e:4a:88:03:cf:
71:b3:ef:f5:50:2b:82:d2:67:a5:38:07:7a:49:61:
c1:da:41:b7:4c:1c:c2:2e:46:af:d2:fc:10:4e:fa:
9d:eb:8a:98:0e:8a:d1:c8:45:f9:6e:84:44:76:3a:
92:f4:e9:5d:b6:09:3b:d1:fb:8b:60:fc:5e:6b:a8:
73:fb:48:74:89:fe:e2:70:38:f0:73:ad:74:b8:fa:
07:9a:78:13:f4:83:0a:54:8e:5b:84:88:1c:a9:18:
d6:cc:75:23:5a:b0:be:db:fd:36:45:b9:c5:66:37:
59:42:da:b2:ee:4f:a0:ae:5b:be:e8:8f:e9:85:60:
97:2c:04:6a:74:61:89:cb:90:67:29:1e:23:04:ff:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A0:F8:B4:AA:9A:FB:5B:2F:1D:9A:F0:A4:3B:8A:71:89:4F:9D:B1
X509v3 Authority Key Identifier:
keyid:62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2c:27:40:3a:7a:76:70:81:9f:ac:c7:7f:cd:51:18:d6:d3:
30:3e:c9:ee:b2:16:5b:f1:ec:6c:fd:b8:f7:84:b6:43:e7:c8:
ed:eb:15:1c:42:75:be:3e:c4:bd:01:79:c4:86:f4:ff:81:b1:
7f:94:39:1b:49:37:d3:0a:d8:08:bb:c0:b8:4b:8b:09:47:70:
87:2f:00:4d:4c:59:8f:7f:3e:45:dc:29:8e:2d:b1:8a:95:dc:
ec:4c:bf:93:c0:25:43:ca:bd:32:73:84:63:e3:7d:6b:3d:0e:
40:f9:a3:69:3a:f7:d4:bd:58:34:6c:62:d9:09:49:1e:93:87:
53:1c:8a:8c:55:00:7b:98:86:5f:9c:19:97:63:46:36:04:b7:
4f:9c:41:75:30:7b:4c:55:79:9e:98:4f:80:45:ec:b2:63:96:
8f:ee:0e:ba:41:49:09:85:57:fd:dc:2b:41:eb:ba:89:5c:4e:
f3:0f:c7:17:35:cc:83:09:62:39:b6:d1:20:c6:5e:54:58:34:
c9:ca:ed:ae:21:95:e6:c2:e6:4b:08:48:68:80:92:d1:6f:8f:
ec:56:a4:a9:d4:5d:39:1f:04:cb:ca:7e:9d:93:12:e5:50:07:
92:47:c5:8f:cd:18:2c:7b:01:6e:43:f2:a7:22:3d:70:18:f9:
19:1b:d0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:33:56 2025 by rpki-client