Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
File: xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json)
Hash identifier: 8UECveZwxpUN44InhrxVzS3pYNE3BDioSyAZVk/Q+A4=
Subject key identifier: 33:98:D5:10:2B:82:12:FE:7C:F1:DB:40:5F:19:F5:F9:D6:AD:6C:76
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
Manifest number: ED
Signing time: Tue 15 Apr 2025 04:20:13 +0000
Manifest this update: Tue 15 Apr 2025 04:20:12 +0000
Manifest next update: Tue 22 Apr 2025 04:20:12 +0000
Files and hashes: 1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: wBbv5dZfpEX88agkGvV7RkrAbe/BKMmcg33RUffyi1s=)
2: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: rFJbuDYL88Z9KeNowFp3y8pDODtibJ7P1KjjzQ7u73o=)
3: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: qHX8rwWLzYwQ68AYEwJa6sYGgUw03regWlERxMTMTs4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Apr 2025 04:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Validity
Not Before: Apr 15 04:20:12 2025 GMT
Not After : Apr 22 04:20:12 2025 GMT
Subject: CN=67fdde7c-470b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:28:d8:86:2c:46:09:fb:30:ee:35:0e:12:
69:b8:4e:0a:b0:5c:00:a0:54:7e:02:bc:5f:28:f6:
0d:9c:dd:76:ad:65:39:c2:0a:2f:b7:f9:54:c1:94:
b4:9b:d4:f9:74:b7:49:31:bc:a1:da:fc:bb:4d:3e:
60:df:52:3c:7e:0e:2f:b1:48:30:bb:ac:ec:1d:9d:
f5:29:9f:f4:e4:cf:df:70:1c:65:be:e1:5c:60:47:
09:f4:04:f0:f9:17:f9:96:87:d0:eb:e0:be:50:ad:
26:f4:f2:43:58:38:a5:07:6d:2c:d8:28:36:24:75:
4d:8d:ac:8a:21:df:32:be:4e:f6:38:d4:6f:f0:39:
bd:f7:91:15:c8:8d:c4:9c:2b:34:e2:8f:a2:39:60:
bc:56:42:89:3e:2e:1d:b2:05:c3:aa:c7:9d:c7:0d:
30:5b:1f:02:90:82:62:08:c8:28:c8:f7:f0:b7:78:
12:2f:13:55:93:2a:29:6e:54:53:e8:a7:9d:1b:5d:
59:2d:8f:a1:9f:52:e9:7f:22:8f:85:7f:b0:7a:56:
de:26:60:9a:ff:75:0b:99:a9:81:47:ee:c5:29:9f:
96:ab:81:f0:3c:74:5f:35:cd:6c:45:6b:54:44:ab:
f3:5a:2e:be:cb:e8:22:a0:b8:b7:e4:a3:f8:96:93:
20:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:98:D5:10:2B:82:12:FE:7C:F1:DB:40:5F:19:F5:F9:D6:AD:6C:76
X509v3 Authority Key Identifier:
keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:1b:98:f2:f7:79:98:7e:d0:21:2d:8f:34:48:58:fe:8a:96:
7b:82:7d:35:63:e1:db:81:ed:4d:24:97:54:89:d8:70:c4:e6:
3f:9e:ff:d6:11:07:3c:6b:3a:49:32:7a:42:76:de:ae:4d:fd:
8d:88:e3:e5:02:df:54:63:b0:eb:08:c3:c1:4b:97:e9:59:62:
3b:2c:7c:60:c4:b2:33:37:c5:65:9f:66:f8:2c:a2:e5:2d:28:
05:b4:36:0a:de:cc:30:29:ae:f0:0e:f6:d1:8c:47:0a:98:ca:
45:dd:bc:59:dd:f7:9d:3d:86:74:83:64:10:2b:5d:1c:b1:6d:
b9:85:b2:32:22:29:70:de:8f:70:dc:0f:16:30:6f:ba:e6:48:
d8:53:4b:58:d4:4f:74:31:95:24:67:d6:b6:5c:88:35:b4:f2:
42:75:e0:ee:7a:f1:fa:f1:b2:ff:68:f6:00:96:f9:98:6a:21:
a4:3f:d5:9a:48:fd:63:ad:6e:97:86:8e:73:d8:60:7a:1a:59:
2f:53:be:95:15:94:23:c0:54:1c:5b:b9:85:e2:60:71:56:2a:
e4:f4:b5:fa:aa:f3:06:23:32:e1:c3:9f:f0:13:a0:fb:74:d1:
f4:3d:e1:60:ee:54:47:7c:2f:ef:b6:62:7b:fe:94:7d:3f:c9:
05:c1:67:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:23:12 2025 by rpki-client