Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
File: GWgoqCH0FqupzswxqnGjA_QhR3g.mft (raw, json)
Hash identifier: o0qcD5HAERlY/fMwt26nLfIUkpTaqIxzZ0IsmedYoPE=
Subject key identifier: AA:01:88:7C:39:13:EB:6F:51:AB:B7:93:0F:CB:3E:A1:57:2F:8C:26
Authority key identifier: 19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78
Certificate issuer: /CN=A9197724/serialNumber=196828A821F416ABA9CECC31AA71A303F4214778
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
Manifest number: 5C
Signing time: Sun 13 Apr 2025 05:52:00 +0000
Manifest this update: Sun 13 Apr 2025 05:52:00 +0000
Manifest next update: Sun 20 Apr 2025 05:52:00 +0000
Files and hashes: 1: GWgoqCH0FqupzswxqnGjA_QhR3g.crl (hash: taRnNaJ5pjOZqFwyXxd/DF9z80t5n3MB4WPCJPTHM7k=)
2: B5907D4E904E11EFA704CB22C4F9AE02.roa (hash: 6wPxK2kdtgMpw3LNHlmnVo9Jz/VjEWx8dJSDP8encJs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl
rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 05:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197724, serialNumber=196828A821F416ABA9CECC31AA71A303F4214778
Validity
Not Before: Apr 13 05:52:00 2025 GMT
Not After : Apr 20 05:52:00 2025 GMT
Subject: CN=67fb5100-b225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:c0:08:7c:a6:65:d8:95:bf:73:51:88:58:
27:99:f6:d3:59:bc:0c:2f:f7:b1:aa:87:4a:18:34:
e2:37:11:ef:94:a5:73:76:ea:0e:af:14:e7:b2:25:
48:72:92:4a:44:7e:75:69:4a:c5:9c:b8:6d:c4:e2:
44:e3:ae:7b:d3:9d:f4:5f:23:87:93:6d:55:c4:4b:
c6:1b:0e:91:70:f5:80:37:b6:59:ca:bd:8b:91:34:
a2:79:13:44:66:c0:cb:28:49:1c:75:91:20:dc:bd:
2a:bc:49:d9:d2:31:1d:4b:93:91:6d:e3:96:d3:62:
3c:46:83:93:3a:80:bd:06:41:d3:43:88:ce:ea:4e:
bd:fd:aa:83:6c:42:d1:f8:af:bc:76:33:e7:82:5f:
50:a2:4c:64:27:8b:fb:f2:7e:fb:9a:28:37:b0:eb:
15:08:4c:20:72:2f:d5:19:f3:45:b9:4b:8b:a6:1d:
a0:11:db:0d:67:b6:5f:53:a0:13:0d:98:d9:47:02:
db:a5:42:93:11:98:38:96:a8:a2:4d:9f:46:8c:90:
38:a0:fa:1e:d0:2d:ee:44:e4:6d:e4:f4:5e:87:d1:
d6:a7:b2:a4:6b:0f:47:dd:48:ac:4e:15:8f:2a:6b:
90:0c:50:a8:39:d9:e8:b9:91:1c:10:78:60:cf:b6:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:01:88:7C:39:13:EB:6F:51:AB:B7:93:0F:CB:3E:A1:57:2F:8C:26
X509v3 Authority Key Identifier:
keyid:19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:4c:d0:9e:7d:e5:9a:c1:96:fc:0c:0b:60:59:fd:cd:bd:a2:
84:f5:dd:1b:7f:d5:db:27:9f:ad:38:25:26:04:b5:8b:93:e2:
6b:94:11:da:b8:25:28:06:9b:82:9c:e1:cf:df:a6:90:c4:b0:
20:cd:df:0a:8e:d8:5b:3c:78:a1:40:8b:6c:53:6c:ef:2f:91:
f2:e1:7d:24:7b:6b:83:ee:34:4c:43:be:36:32:92:b6:d8:fc:
f1:e0:d3:b3:2d:1e:8c:0f:b5:5f:2e:f1:79:11:60:0d:80:8c:
a6:ab:ea:7e:75:d0:b6:f7:53:84:f6:66:3d:4a:e4:22:61:b9:
e1:b2:b7:61:7f:e4:e2:4f:7b:aa:8a:81:3b:3b:ff:c7:08:a1:
5c:69:27:e4:99:d7:4b:99:c0:d3:c1:fe:d4:ed:f5:d0:74:a3:
a9:7d:db:9b:91:a6:1e:0c:0d:a4:94:69:92:49:c3:44:fd:2a:
8e:54:2e:e4:84:65:75:e1:d8:a8:16:dd:27:6e:32:df:b3:ed:
11:8a:62:a6:e5:c0:1f:8c:20:f9:c0:7a:85:08:bc:39:b0:31:
7a:7f:bb:68:eb:3f:23:d3:9c:ee:fe:f0:4a:14:89:97:e2:9d:
cc:05:db:96:b3:6d:0c:1e:4a:08:56:1c:91:b9:1b:4c:1e:ef:
fb:4d:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:30:10 2025 by rpki-client