
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
File: fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json)
Hash identifier: 4odaJN6XkxJ8uOKXH4NY5Z1KkcUqdzfOkndNug6VyW4=
Subject key identifier: B4:6E:97:C2:79:6F:FF:2D:E5:54:CA:E7:3E:5E:48:DC:15:27:A5:02
Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85
Certificate issuer: /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85
Certificate serial: 2356
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
Manifest number: 2335
Signing time: Sat 12 Apr 2025 15:47:32 +0000
Manifest this update: Sat 12 Apr 2025 15:47:32 +0000
Manifest next update: Sat 19 Apr 2025 15:47:32 +0000
Files and hashes: 1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: FsMu0o/QfMIuwOFTblB5ZE82/fXJR0RG4+lwdZMZW3k=)
2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: hlAH68hEjJH34E2Ep5RK/KWypzVM/kESjdq2XtDtpa0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl
rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 15:47:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9046 (0x2356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85
Validity
Not Before: Apr 12 15:47:32 2025 GMT
Not After : Apr 19 15:47:32 2025 GMT
Subject: CN=67fa8b14-4d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:8c:73:88:d7:a2:4f:a4:12:4a:ab:1b:a7:
a4:02:dc:0a:06:8e:f9:4a:90:01:71:29:0f:fa:a5:
66:84:b5:0d:5a:74:76:1e:04:cf:20:dd:58:d9:77:
54:9f:3e:9e:93:5b:3f:06:3e:43:8e:4c:46:97:99:
45:88:10:27:7f:65:92:3b:b6:e1:c8:d1:e4:19:05:
45:4e:de:ce:9f:0b:5a:b1:01:f7:ab:28:c0:30:18:
81:1a:4f:f4:f8:69:da:7a:36:09:94:b5:f1:0b:f6:
be:bd:a6:1c:f9:14:fd:68:55:ff:02:62:7b:17:d1:
5c:73:5a:86:65:67:68:6d:0a:e7:85:20:af:6b:85:
b4:2c:e3:bb:63:0e:c7:66:da:79:28:d8:38:c5:6c:
91:dc:b2:de:01:39:e9:9d:b6:77:2a:20:a2:93:2e:
25:08:5a:36:07:f9:d0:85:b6:2a:f6:f3:a3:67:48:
00:fe:5f:58:bb:82:72:4f:1d:d3:d3:c4:3e:37:ef:
4e:ec:0a:f6:c2:96:cd:31:bb:62:12:55:14:67:6d:
1b:5f:52:56:29:5a:00:01:8e:2d:3b:43:30:46:c0:
dd:bf:98:8f:3b:4f:db:26:dc:ed:6b:7a:3e:42:14:
66:f0:62:2a:84:53:1d:df:3d:8d:86:0c:89:86:41:
9b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6E:97:C2:79:6F:FF:2D:E5:54:CA:E7:3E:5E:48:DC:15:27:A5:02
X509v3 Authority Key Identifier:
keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f3:9b:37:c7:39:25:89:4f:d9:d9:c7:c0:12:4c:ff:bc:dd:
56:6d:ae:65:b2:6b:a4:01:51:58:e5:4d:35:57:73:7e:1f:51:
39:c1:86:63:91:da:81:b5:da:27:87:9e:db:8c:97:30:01:69:
03:89:50:89:10:a1:ae:70:f5:dd:86:c4:7e:46:4a:30:74:96:
a0:50:70:7d:98:2b:6b:20:92:92:01:a6:63:1c:67:cb:81:ea:
2e:5d:c4:65:3a:55:63:9e:1a:22:d5:be:93:93:dc:8c:8e:3a:
b3:bd:1c:d6:55:65:ab:76:ab:c5:75:0f:e2:ee:89:8e:0f:66:
5a:0f:a6:d7:2e:fd:c4:2b:6e:b7:08:a0:ad:6c:ae:70:a7:54:
31:dd:1b:8b:42:34:16:39:06:a4:5b:0c:58:fc:57:08:0b:d6:
96:bf:43:c4:7c:14:d9:75:99:c0:7b:cc:8b:3b:86:bd:71:73:
a2:f4:04:f1:da:1a:f8:a4:64:32:d9:02:d9:01:70:16:a0:64:
56:54:18:cf:f0:c8:38:70:0f:31:3e:00:a5:64:68:76:9a:7d:
a6:2b:8e:3e:7f:05:c9:8b:51:32:41:a5:2a:a6:a2:61:be:18:
ef:70:32:40:b0:ad:2b:d5:e7:2f:93:69:72:45:39:e9:5c:4f:
ff:3f:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:27:21 2025 by rpki-client