Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
File: Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft (raw, json)
Hash identifier: edAUqtsgzSg/ZYX2pxz2InuKdmzSnXPmMYs6DmT7giA=
Subject key identifier: 0F:B8:C6:55:33:D7:C0:3C:D3:21:12:D9:6F:0F:AC:E8:4A:97:A3:12
Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
Certificate issuer: /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Certificate serial: 04BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
Manifest number: 04A2
Signing time: Tue 08 Apr 2025 23:47:02 +0000
Manifest this update: Tue 08 Apr 2025 23:47:01 +0000
Manifest next update: Tue 15 Apr 2025 23:47:01 +0000
Files and hashes: 1: Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl (hash: 8J40EsBVf6Zh/Dyz+X+VDpfOiWcD2tggJijc4F2J3Wg=)
2: 2C1F43848B5C11EFBFDAC30DC4F9AE02.roa (hash: 56lDQTojCNW8t5p2f63q5FwFibB38CMURQ2CquumMII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 23:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215 (0x4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A7F
Validity
Not Before: Apr 8 23:47:01 2025 GMT
Not After : Apr 15 23:47:01 2025 GMT
Subject: CN=67f5b575-b2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:fe:42:7d:da:8f:25:96:4f:43:a9:c9:dc:
c4:57:b5:07:84:58:31:01:10:10:8e:57:4f:68:98:
01:3b:ca:f4:f8:d5:8f:14:dc:e6:6f:39:95:07:74:
1c:f9:eb:41:2e:d7:4c:dc:76:b8:42:e3:d3:db:cb:
f0:b6:e2:fd:0f:70:a3:00:d0:49:fa:df:86:62:ee:
c6:b7:91:f3:ba:99:53:be:6f:f8:b0:64:f1:4b:2a:
80:58:8b:e2:30:c0:a7:22:6f:48:e5:90:9c:d0:9c:
d1:ab:6d:53:02:19:47:3c:39:fe:53:46:29:07:ca:
a5:40:9e:eb:e0:9c:13:8e:10:cd:d0:43:0f:c6:d3:
c4:3d:8e:e1:fc:11:47:de:3c:5b:f7:a1:7c:84:81:
3a:65:60:a9:84:4c:c6:1d:a0:6b:bf:f4:bb:2d:87:
d4:af:f4:ba:8b:7f:54:d7:1c:7b:62:78:29:e4:b1:
62:0b:7f:c1:4e:2b:7a:ce:88:55:ae:e6:ed:a4:e0:
72:48:7a:c9:2c:cd:f5:b9:2c:32:2c:cd:8a:11:16:
a2:20:ac:ae:97:26:e3:9f:8e:dc:13:ad:7b:f9:92:
2d:08:6e:a3:45:b9:df:0f:2c:00:9a:76:91:a8:40:
82:59:89:9d:70:86:23:4c:93:ba:2a:d2:67:dc:e3:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B8:C6:55:33:D7:C0:3C:D3:21:12:D9:6F:0F:AC:E8:4A:97:A3:12
X509v3 Authority Key Identifier:
keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:db:f2:eb:87:d3:e8:ab:d1:3e:c7:be:72:5d:56:59:d5:f4:
61:1e:5c:5e:5c:a9:56:34:fb:3e:00:10:57:4e:d4:22:59:55:
dd:33:36:ea:03:45:78:9f:b5:a8:7e:cd:03:59:c5:80:db:44:
3d:8e:80:1e:4a:2d:86:db:14:9c:81:98:e1:d6:94:7e:3f:fa:
45:a6:8b:17:5d:74:ce:68:2b:53:8e:73:52:a1:6f:93:02:ca:
2a:f5:4e:5a:85:00:1c:1c:a1:c6:bb:51:b9:d6:43:d4:ea:a1:
46:06:80:99:d6:7d:b7:18:48:21:f0:eb:25:c7:12:2a:8e:0f:
70:71:7b:23:50:d2:85:40:c5:e3:95:31:10:32:05:82:51:a6:
45:d3:fd:f0:17:7e:98:b8:01:d6:2a:46:0b:01:c3:a2:af:64:
f4:e6:0b:62:48:c1:ea:e4:16:fa:35:86:d5:36:be:d4:9e:94:
3c:69:fa:5c:2f:4f:b9:10:28:04:70:96:18:37:4a:67:7b:ce:
21:8d:38:db:a2:3a:b6:6a:8e:1f:21:6b:c8:2c:dc:a4:13:33:
05:fc:e2:b1:ee:32:f2:74:dd:62:40:f5:5f:0b:62:6a:c3:72:
be:e2:a6:e7:2a:f9:49:2c:9d:67:a9:a7:59:4a:73:c2:e8:cb:
4c:05:d9:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJBN0YxMTAvBgNVBAUTKDY3RjM3QzUwQ0EzM0NGNEY1MDg1NzhEM0FDQ0M2REFB
NEM1MThDQjQwHhcNMjUwNDA4MjM0NzAxWhcNMjUwNDE1MjM0NzAxWjAYMRYwFAYD
VQQDEw02N2Y1YjU3NS1iMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx7L+Qn3ajyWWT0OpydzEV7UHhFgxARAQjldPaJgBO8r0+NWPFNzmbzmVB3Qc
+etBLtdM3Ha4QuPT28vwtuL9D3CjANBJ+t+GYu7Gt5HzuplTvm/4sGTxSyqAWIvi
MMCnIm9I5ZCc0JzRq21TAhlHPDn+U0YpB8qlQJ7r4JwTjhDN0EMPxtPEPY7h/BFH
3jxb96F8hIE6ZWCphEzGHaBrv/S7LYfUr/S6i39U1xx7Yngp5LFiC3/BTit6zohV
rubtpOBySHrJLM31uSwyLM2KERaiIKyulybjn47cE617+ZItCG6jRbnfDywAmnaR
qECCWYmdcIYjTJO6KtJn3OMQxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+4xlUz
18A80yES2W8PrOhKl6MSMB8GA1UdIwQYMBaAFGfzfFDKM89PUIV406zMbapMUYy0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE3Ri83NjBFMjI4RTM3
REMxMUVDQjU3MjBBMjhDNEY5QUUwMi9aX044VU1venowOVFoWGpUck14dHFreFJq
TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pfTjhVTW96ejA5UWhYalRyTXh0cWt4UmpMUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MkE3Ri83NjBFMjI4RTM3REMxMUVDQjU3MjBBMjhDNEY5QUUwMi9aX044VU1venow
OVFoWGpUck14dHFreFJqTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAp2/Lrh9Poq9E+x75yXVZZ1fRhHlxeXKlWNPs+ABBXTtQiWVXdMzbq
A0V4n7Wofs0DWcWA20Q9joAeSi2G2xScgZjh1pR+P/pFposXXXTOaCtTjnNSoW+T
Asoq9U5ahQAcHKHGu1G51kPU6qFGBoCZ1n23GEgh8OslxxIqjg9wcXsjUNKFQMXj
lTEQMgWCUaZF0/3wF36YuAHWKkYLAcOir2T05gtiSMHq5Bb6NYbVNr7UnpQ8afpc
L0+5ECgEcJYYN0pne84hjTjbojq2ao4fIWvILNykEzMF/OKx7jLydN1iQPVfC2Jq
w3K+4qbnKvlJLJ1nqadZSnPC6MtMBdmH
-----END CERTIFICATE-----
Generated at Fri Apr 11 17:35:57 2025 by rpki-client