Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json)
Hash identifier: LgKhsU1PkwNdYOT8Evh/nKDEFEY3nvg+w3eL466fwrk=
Subject key identifier: BA:7A:F3:CB:DA:64:D7:ED:B6:A4:F4:9C:4F:AC:F5:3E:1F:38:A3:AF
Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00
Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
Certificate serial: 019F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
Manifest number: 0197
Signing time: Sun 13 Apr 2025 02:22:43 +0000
Manifest this update: Sun 13 Apr 2025 02:22:43 +0000
Manifest next update: Sun 20 Apr 2025 02:22:43 +0000
Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: eXL+I2Z3PXrpbrZ3s2NATtRixYiBvZKub2UHzPykjEI=)
2: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: ojParvJ0FGJUPZ25zNdYUl2YaHcSyrc33U2l9MfbPKU=)
3: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: 67QdihmJWNEdpWctmJLskykPLPRUaTyZfL1MUDXMOe4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl
rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 02:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
Validity
Not Before: Apr 13 02:22:43 2025 GMT
Not After : Apr 20 02:22:43 2025 GMT
Subject: CN=67fb1ff3-3f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:64:0d:49:6b:6c:c3:11:c9:20:e9:93:3d:e0:
b0:48:b1:61:b9:2a:b7:e4:0e:c8:0d:65:2e:36:40:
23:01:ba:f9:0a:0a:14:63:44:88:36:13:b4:2f:d7:
db:e6:9a:5b:9d:8d:75:f2:a2:e4:30:82:2a:2b:2a:
a9:e4:2f:6f:ed:ad:2c:d8:48:ea:19:4c:aa:7c:b9:
6d:0b:ca:72:15:c5:26:65:00:4f:d0:e9:22:eb:a8:
f3:c2:02:c4:23:8f:4c:ab:a3:73:79:c1:6a:d6:fc:
3b:8d:cc:2e:39:ff:03:d4:09:3c:e4:b4:23:ec:7c:
8c:52:ae:c9:23:d9:22:3b:5e:68:fb:1d:44:d1:79:
30:c6:8f:2e:0d:65:09:7d:8e:eb:c8:56:e7:dc:bc:
38:40:af:75:82:2e:5c:60:c5:72:f5:69:7b:c6:d2:
44:57:4d:ba:9c:53:c7:b6:86:cf:51:bf:24:5c:4d:
c1:17:f0:f9:3d:5a:80:13:7b:ba:29:bc:57:67:85:
c4:ee:49:35:9a:15:36:d4:9f:8d:ee:1b:28:e2:e5:
7e:b8:a0:25:1c:2c:73:60:d0:fd:e1:24:5e:0d:75:
4a:f3:ed:e5:98:12:f1:c5:2f:99:05:4e:bc:89:2a:
7c:33:21:c8:af:34:59:83:30:f4:63:1d:7e:15:8a:
53:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7A:F3:CB:DA:64:D7:ED:B6:A4:F4:9C:4F:AC:F5:3E:1F:38:A3:AF
X509v3 Authority Key Identifier:
keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:bb:7d:93:39:16:8e:1c:fe:f2:72:ea:de:51:94:39:7b:fc:
68:52:ed:c9:10:12:fb:bc:5d:b6:75:dd:c1:88:c6:ff:69:6e:
02:74:86:93:52:36:72:33:d7:c4:5e:06:2c:1c:e5:7c:92:45:
62:8d:17:7e:e9:8d:e5:b2:c9:20:de:d7:d4:c2:b6:d0:28:6c:
7c:15:ad:8a:95:d6:c5:88:d1:6e:8a:b6:84:df:28:6e:73:2a:
c7:e7:42:68:35:64:6f:d1:74:5f:2e:0f:8d:e7:1b:c9:f4:dc:
a7:9d:30:f6:b7:91:d8:d6:64:70:c1:14:f0:68:98:eb:2c:60:
20:3f:62:5a:53:25:e1:e5:ab:2e:e0:7c:c8:dd:b1:8a:9d:94:
2b:c2:94:d3:18:f2:c1:3e:f0:be:4c:39:c9:e4:47:0a:11:37:
4f:a7:cc:29:44:b2:37:7e:6a:3b:25:2a:fe:57:14:2a:13:3f:
c3:fb:c1:88:14:1a:47:4d:7b:48:b4:8b:f3:41:7e:69:20:84:
8c:f1:16:35:68:98:22:3b:9a:e4:35:c3:f5:53:7f:95:9e:65:
3c:32:34:75:2d:fb:f6:0b:b6:9e:43:ca:02:86:d7:55:c4:67:
cb:c9:83:3d:b9:77:af:b1:ad:60:d1:53:ac:f4:87:e5:93:f8:
1c:b1:32:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:38:18 2025 by rpki-client