Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
File: 2CWolzNYl8B-dpODimvyAnZYDwM.mft (raw, json)
Hash identifier: qNVpM6zqOY0N9ta1+bwQN2xm93xH9OLF0UZXczISTZw=
Subject key identifier: B8:A0:1F:BE:C8:CA:5F:AB:C3:20:8D:37:B0:34:A0:47:A5:7D:F0:DD
Authority key identifier: D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03
Certificate issuer: /CN=A9199DE2/serialNumber=D825A897335897C07E7693838A6BF20276580F03
Certificate serial: 05EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
Manifest number: 05E5
Signing time: Wed 16 Apr 2025 22:39:47 +0000
Manifest this update: Wed 16 Apr 2025 22:39:47 +0000
Manifest next update: Wed 23 Apr 2025 22:39:47 +0000
Files and hashes: 1: 2CWolzNYl8B-dpODimvyAnZYDwM.crl (hash: o+PCAaDIkrx4BX5iZtxcbZ2guP2ieD4m0O7EMtndpN8=)
2: E6ECE6E6104C11EC9074E586C4F9AE02.roa (hash: gAuID1Fe/PtlP9DGBoTnnUFK6n2WVQEEJLwbWlhbFaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl
rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Apr 2025 22:39:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1519 (0x5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199DE2, serialNumber=D825A897335897C07E7693838A6BF20276580F03
Validity
Not Before: Apr 16 22:39:47 2025 GMT
Not After : Apr 23 22:39:47 2025 GMT
Subject: CN=680031b3-e565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:12:fb:f0:30:1b:0e:99:9e:66:99:6f:be:
4c:b7:27:f6:10:ee:81:cb:78:1c:e9:99:4c:a1:89:
90:3c:1f:f5:ae:d8:97:6d:15:ab:23:1b:d4:a4:7d:
1d:f6:2a:ed:8f:59:0c:f8:25:02:da:fa:4d:21:24:
05:f8:47:2b:7f:d5:58:96:0f:ac:0c:ab:e3:ae:b6:
3e:12:46:00:33:9c:64:de:bc:9f:d5:c1:46:fb:8f:
a5:bb:d5:c4:d8:04:3f:74:47:47:b8:71:98:40:32:
61:fe:e8:1a:b9:ab:91:c2:86:90:e7:51:4d:04:bb:
6e:f7:62:2b:ce:3b:ca:ba:b1:e0:8d:48:19:f1:6e:
7f:5a:ac:ea:12:4a:31:f5:11:e9:c9:ec:17:e8:b1:
97:41:aa:85:e1:5c:33:cb:e7:31:83:01:08:f0:cc:
ce:86:0e:d5:70:46:9c:e1:f8:a1:87:7f:d0:1f:cf:
f4:55:71:c3:f0:ae:f7:05:a5:82:c5:a4:f1:f3:e9:
fa:d8:3e:40:ac:c1:75:4c:fa:2b:95:85:ef:e9:8c:
dc:f0:ed:bb:81:e1:7d:7c:34:df:47:ad:fd:b8:4b:
9b:68:8d:8a:20:2d:b1:6f:b5:30:dc:30:fa:48:1b:
1d:b0:2f:49:3d:af:9a:3d:e5:64:47:2f:b9:c3:af:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A0:1F:BE:C8:CA:5F:AB:C3:20:8D:37:B0:34:A0:47:A5:7D:F0:DD
X509v3 Authority Key Identifier:
keyid:D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:80:24:57:0d:fe:55:d0:04:f5:32:c9:5f:48:7d:4c:c7:c2:
4b:bf:7f:32:ef:46:11:e0:a7:76:6c:c9:dd:32:49:c8:2e:f5:
ea:d3:44:04:2b:c9:67:33:ec:7d:1f:4f:a3:57:42:20:ea:c7:
24:af:cf:9c:27:c2:a4:8b:1c:a7:da:bc:67:67:70:e3:f7:f6:
1d:0f:02:51:6a:cd:8a:62:2d:78:35:bf:c9:f7:07:3e:d0:45:
7a:35:49:9c:dc:ec:02:07:a1:0b:02:60:cb:03:e2:e6:ed:81:
36:86:bf:b9:ce:8b:71:80:c7:75:0b:da:14:12:de:79:c5:f2:
bc:2e:92:6f:b3:8a:5b:a3:aa:a4:ad:b1:ae:a0:8c:de:b9:35:
77:72:3b:0e:26:a8:89:4b:53:72:85:10:d9:2d:3a:e9:59:cb:
96:b6:ba:40:a5:7b:2a:91:c0:02:a3:5c:a1:cc:f9:d5:59:d7:
8d:b7:f9:8b:7c:9a:02:c9:94:05:ab:c4:5c:c6:3b:fe:38:e1:
54:66:47:de:72:0c:01:41:7a:9a:6a:62:b1:ad:80:15:50:55:
89:34:fc:ae:ca:03:d8:08:75:6b:d5:5b:8c:55:07:3d:ab:79:
79:0a:0d:35:8d:d9:c5:de:f5:74:73:df:93:ad:2b:2d:2b:2a:
b4:be:9b:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlERTIxMTAvBgNVBAUTKEQ4MjVBODk3MzM1ODk3QzA3RTc2OTM4MzhBNkJGMjAy
NzY1ODBGMDMwHhcNMjUwNDE2MjIzOTQ3WhcNMjUwNDIzMjIzOTQ3WjAYMRYwFAYD
VQQDEw02ODAwMzFiMy1lNTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvagS+/AwGw6ZnmaZb75Mtyf2EO6By3gc6ZlMoYmQPB/1rtiXbRWrIxvUpH0d
9irtj1kM+CUC2vpNISQF+Ecrf9VYlg+sDKvjrrY+EkYAM5xk3ryf1cFG+4+lu9XE
2AQ/dEdHuHGYQDJh/ugauauRwoaQ51FNBLtu92IrzjvKurHgjUgZ8W5/WqzqEkox
9RHpyewX6LGXQaqF4Vwzy+cxgwEI8MzOhg7VcEac4fihh3/QH8/0VXHD8K73BaWC
xaTx8+n62D5ArMF1TPorlYXv6Yzc8O27geF9fDTfR639uEubaI2KIC2xb7Uw3DD6
SBsdsC9JPa+aPeVkRy+5w69BtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLigH77I
yl+rwyCNN7A0oEelffDdMB8GA1UdIwQYMBaAFNglqJczWJfAfnaTg4pr8gJ2WA8D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OURFMi9BM0E1MjEwNkFF
RDAxMUVCQkYzRkQ3NjNDNEY5QUUwMi8yQ1dvbHpOWWw4Qi1kcE9EaW12eUFuWllE
d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJDV29sek5ZbDhCLWRwT0RpbXZ5QW5aWUR3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OURFMi9BM0E1MjEwNkFFRDAxMUVCQkYzRkQ3NjNDNEY5QUUwMi8yQ1dvbHpOWWw4
Qi1kcE9EaW12eUFuWllEd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCVgCRXDf5V0AT1MslfSH1Mx8JLv38y70YR4Kd2bMndMknILvXq00QE
K8lnM+x9H0+jV0Ig6sckr8+cJ8Kkixyn2rxnZ3Dj9/YdDwJRas2KYi14Nb/J9wc+
0EV6NUmc3OwCB6ELAmDLA+Lm7YE2hr+5zotxgMd1C9oUEt55xfK8LpJvs4pbo6qk
rbGuoIzeuTV3cjsOJqiJS1NyhRDZLTrpWcuWtrpApXsqkcACo1yhzPnVWdeNt/mL
fJoCyZQFq8Rcxjv+OOFUZkfecgwBQXqaamKxrYAVUFWJNPyuygPYCHVr1VuMVQc9
q3l5Cg01jdnF3vV0c9+TrSstKyq0vpuP
-----END CERTIFICATE-----
Generated at Thu Apr 17 11:25:15 2025 by rpki-client