Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
File: qleQsPfXYr6TK53GEbfWm5BoWk4.mft (raw, json)
Hash identifier: n4EthTBKz1X8U4+bw9sgfK3IJNisH/d5LkGWIlan6vE=
Subject key identifier: 99:3A:0F:0D:4D:8F:AD:40:5B:E8:1C:F3:83:0D:BE:80:F6:0A:8A:D9
Authority key identifier: AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E
Certificate issuer: /CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
Certificate serial: 0223
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
Manifest number: 021F
Signing time: Tue 15 Apr 2025 01:38:33 +0000
Manifest this update: Tue 15 Apr 2025 01:38:33 +0000
Manifest next update: Tue 22 Apr 2025 01:38:33 +0000
Files and hashes: 1: qleQsPfXYr6TK53GEbfWm5BoWk4.crl (hash: rsBVq2PKCZScqwN+QVofrgAKdz8JuUprxNpfrQl+Jy8=)
2: 728286AE27BF11EDA6A02960C4F9AE02.roa (hash: DvV5HozP+sR1ACB5NUpTfiC/G52OiXFRlLclsmTMjHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl
rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Apr 2025 01:38:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91977F9, serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
Validity
Not Before: Apr 15 01:38:33 2025 GMT
Not After : Apr 22 01:38:33 2025 GMT
Subject: CN=67fdb899-f8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:74:a6:8a:84:df:05:fd:c3:6c:71:ad:88:
48:56:4f:a0:8e:ed:51:2c:d7:d6:a0:bc:e1:8a:fa:
a3:5e:b4:e2:2e:49:64:26:4f:5d:b1:cc:3b:dd:79:
cc:f6:3f:6f:36:24:d1:87:d1:a3:99:9d:45:88:06:
72:a2:fa:96:16:84:47:2d:85:fa:b5:3e:53:1d:be:
95:f8:24:f9:20:80:b5:45:a1:e7:2e:35:01:30:b8:
b7:80:10:64:23:f9:de:c2:12:e3:9d:3d:bd:54:07:
e5:df:a8:73:d3:5d:c2:c7:e3:63:8d:d3:d9:57:8a:
8c:b7:ad:42:33:92:71:7b:1c:ca:87:1e:05:14:ce:
28:e5:7c:18:ce:f6:4e:bf:90:90:c8:76:21:62:ec:
0f:ec:a3:e2:3c:55:c8:06:97:31:03:21:3c:16:ba:
f3:47:c1:b1:ba:34:5f:11:05:e8:54:0f:dc:6d:7a:
87:27:7a:c0:1e:10:b3:89:66:1f:47:59:ea:73:15:
ff:6f:b9:a5:ce:0e:e7:a8:be:17:db:be:ce:9e:58:
8b:9d:e0:8e:a7:74:6f:c6:56:f6:ba:6c:f3:f9:ac:
1f:b5:0d:37:d5:78:83:36:3a:cd:b5:03:23:50:e3:
5c:04:41:bc:5a:cf:5c:69:1b:60:33:0c:f8:6d:2a:
c6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3A:0F:0D:4D:8F:AD:40:5B:E8:1C:F3:83:0D:BE:80:F6:0A:8A:D9
X509v3 Authority Key Identifier:
keyid:AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:41:70:dd:24:0e:4c:7a:0f:40:5d:83:97:d9:c1:76:c9:30:
10:9a:bf:2b:0e:96:33:d4:44:e1:1d:af:5c:20:21:d1:a5:7e:
ce:b7:c4:e7:1f:36:36:a2:0f:d7:bc:ce:a4:0a:ea:51:b4:5c:
4e:cb:f2:d2:de:bf:4e:e2:6b:10:37:f8:87:bd:c0:f3:3f:72:
c2:b0:72:11:05:c2:f5:e8:6d:17:f4:3b:9a:82:54:74:9c:35:
2e:7a:f0:89:c5:a9:bf:02:01:3c:35:25:b0:5b:60:f7:bf:40:
dd:81:5a:58:79:6d:67:e4:c0:f1:46:7a:8a:96:5d:46:4c:74:
7f:28:2e:60:f4:54:7e:7c:cd:3d:5f:0e:cd:7c:de:fc:71:bd:
9a:df:cc:e3:19:a8:01:e3:bb:c8:de:c6:a7:80:ea:12:2c:0b:
04:10:e2:98:a2:df:e1:de:9e:35:78:58:d1:13:c4:ea:f7:7a:
06:69:e4:08:17:31:41:22:0c:bf:99:85:ff:92:cd:e4:b6:eb:
b0:91:ee:58:2f:b6:1b:4d:2d:fa:14:f3:28:62:58:e9:a4:4d:
bb:5a:f9:a7:75:0f:b6:34:c5:26:ff:15:fe:de:5b:f4:c6:12:
77:ae:b6:cc:66:e4:5c:3f:69:52:56:63:8b:09:fc:b3:8c:13:
27:96:a0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:46:16 2025 by rpki-client