Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
File: EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft (raw, json)
Hash identifier: U93MBPntlJnPDzHXEngqQlKCE/eMH0tM+Z7aps7oYQ4=
Subject key identifier: CE:66:08:AA:26:C8:0A:38:64:9F:D9:69:49:ED:DC:0E:AE:C7:54:FF
Authority key identifier: 11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6
Certificate issuer: /CN=A919D6D8/serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6
Certificate serial: 0850
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
Manifest number: 12EA
Signing time: Sat 12 Apr 2025 19:19:48 +0000
Manifest this update: Sat 12 Apr 2025 19:19:47 +0000
Manifest next update: Sat 19 Apr 2025 19:19:47 +0000
Files and hashes: 1: EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl (hash: MTEWjAGhXUARUmvmu4wGyFu/0lmTGzZYzNIi4jg3AbY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl
rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 19:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2128 (0x850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D6D8, serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6
Validity
Not Before: Apr 12 19:19:47 2025 GMT
Not After : Apr 19 19:19:47 2025 GMT
Subject: CN=67fabcd4-94d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c5:bf:9a:bc:c6:05:b2:6e:c0:d3:d9:90:25:
7f:8c:c7:61:aa:eb:f4:f1:77:a7:c1:59:9b:9c:c3:
11:19:56:09:7f:9e:53:37:33:58:41:6c:5c:8a:22:
29:08:c7:39:4f:1d:6a:85:9a:4c:90:f3:80:e8:e5:
74:72:3b:50:d1:8d:7a:07:33:87:8c:1b:20:72:46:
cb:10:14:f7:9a:bf:f7:f8:53:fd:5d:9d:f0:37:3b:
c3:02:e4:60:4b:9f:44:de:09:07:b8:ff:8b:86:ba:
6a:95:7a:3d:20:b8:67:f0:95:6e:30:9f:33:3f:c5:
12:72:2e:51:8e:d9:fe:a7:3a:98:cd:ce:43:da:c0:
7c:21:b1:41:19:e9:6f:a3:ee:b6:04:d4:a0:37:85:
66:1b:bf:86:c7:bb:9a:12:c1:ab:b9:19:1f:63:d5:
6d:8b:d3:ff:db:87:75:a1:03:76:19:6b:40:52:57:
13:49:33:a6:6b:1d:2a:eb:01:ad:a6:02:92:2e:df:
e2:64:7f:b1:23:8e:df:10:71:80:3f:6b:e3:40:ec:
91:82:2a:db:0c:f9:1e:2d:c3:e9:1c:d7:45:43:03:
fe:00:eb:fd:e5:43:ec:81:ad:1e:d3:44:25:10:69:
e4:ae:94:13:b9:5b:61:46:5d:bf:b6:67:ed:84:cb:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:66:08:AA:26:C8:0A:38:64:9F:D9:69:49:ED:DC:0E:AE:C7:54:FF
X509v3 Authority Key Identifier:
keyid:11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:af:0f:24:30:fb:46:fb:31:e1:6c:78:11:77:c3:51:fc:1f:
97:3e:7e:1a:2a:05:89:5f:a7:a1:d6:bc:87:06:9b:49:67:0d:
9c:6b:b4:64:ec:b3:89:f6:ae:37:3d:c7:43:a9:5c:08:66:71:
1a:ab:ad:b0:c5:8f:fc:2a:bb:2b:79:cc:da:12:d3:e3:3f:fe:
09:bb:e0:e0:f7:a9:e3:4a:fa:4f:dd:f7:77:6b:3c:e0:31:bd:
9e:95:c7:1d:6e:fc:a6:f3:74:28:54:22:c4:ee:46:9c:76:a7:
8b:51:82:4b:fb:66:b8:9d:5a:6a:fa:1d:d6:d5:78:32:9a:ba:
b9:f6:4f:f1:9e:6f:4a:36:a7:55:8f:8f:45:4e:d7:3a:85:b4:
b8:a6:23:1e:28:4c:9b:4f:3e:79:82:d2:c4:e0:1a:94:a1:68:
82:a7:78:cc:de:4e:b5:6b:cb:9b:a3:07:96:03:a1:2e:76:7f:
e4:98:93:80:7f:15:57:96:39:fd:40:cc:20:98:a0:8e:93:34:
d1:20:10:6c:cd:7f:52:6d:51:4b:af:57:bc:16:d6:51:ca:0f:
f4:fc:00:89:de:ab:0a:08:05:5f:f8:36:04:47:e6:af:0d:e2:
69:50:8b:66:51:bf:49:cf:a8:21:fe:5f:ed:ec:2e:b1:0b:c2:
44:9f:08:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:38:25 2025 by rpki-client