Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
File: 2j9P_11GRonTiYj1-yL2VVCz7_g.mft (raw, json)
Hash identifier: Wy+YtiZVXUzKPpMMresGnAo9CyYs42PlN6D9tMDsT1w=
Subject key identifier: E0:04:D2:A4:79:76:AF:88:60:AC:F4:40:23:EF:16:61:CB:23:A9:5C
Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8
Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
Certificate serial: 045B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
Manifest number: 044F
Signing time: Mon 14 Apr 2025 23:55:05 +0000
Manifest this update: Mon 14 Apr 2025 23:55:05 +0000
Manifest next update: Mon 21 Apr 2025 23:55:05 +0000
Files and hashes: 1: 2j9P_11GRonTiYj1-yL2VVCz7_g.crl (hash: mPRI6SFSq0q5QgK0x5c/1mzMF+aF/7EbOZH2P3rwuRE=)
2: 952AA4424DAF11EC86ED5273C4F9AE02.roa (hash: 70pXo7TPZehC7uJ0XdtVRKfDG1GkFpY/5x3mmDYZSxI=)
3: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (hash: w67HRNi/yFu6FrtkXk67zQVeYi9FWWK0Yn59oMaToP8=)
4: 75426BC6A8C511EC8F560C42C4F9AE02.roa (hash: c26DXYzcpQgya2lb6mPXdMatF2eIuHc37QpxkKWbfsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl
rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Apr 2025 23:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115 (0x45b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8
Validity
Not Before: Apr 14 23:55:05 2025 GMT
Not After : Apr 21 23:55:05 2025 GMT
Subject: CN=67fda059-fb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:d0:fe:43:86:da:53:b2:5b:5a:2f:21:41:
d0:ee:9c:c0:7a:16:14:51:ea:4e:95:30:89:97:46:
b3:15:dc:8e:1a:89:ca:97:21:a1:ed:e2:d1:4a:0a:
e1:75:44:e5:ab:21:d8:38:88:1a:61:da:5d:7c:c4:
94:bc:e3:e9:e1:1d:45:c1:0c:5e:cb:d8:3e:56:33:
96:f9:dd:1a:4a:96:c4:16:4a:1a:a4:89:b4:e8:d7:
09:5a:54:7e:94:de:27:ba:94:93:9d:45:db:0f:1f:
01:1b:1b:0f:24:59:87:4b:0b:7b:6b:a8:dc:f2:98:
d8:e3:0a:77:b0:4d:be:b0:a8:eb:4a:96:d0:90:fe:
45:c3:41:36:fe:8c:b0:02:9e:41:50:ac:1a:1b:5e:
a9:95:12:09:98:4f:4a:f4:c9:65:a2:97:c1:bc:28:
4f:9a:bc:e9:18:a9:c6:3a:5c:93:91:79:85:ad:5f:
05:9b:ec:a0:65:71:99:24:c5:36:b8:f6:3a:dc:22:
8b:c4:6e:93:02:38:9a:f6:a8:61:f9:9a:c4:21:b2:
3b:05:d3:11:06:46:cd:06:6f:81:78:52:22:9e:e2:
79:25:7f:2a:80:79:28:b8:7e:ab:d0:05:86:d2:44:
8b:eb:a5:38:9f:c1:2c:e1:4b:be:41:5a:35:a5:cb:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:04:D2:A4:79:76:AF:88:60:AC:F4:40:23:EF:16:61:CB:23:A9:5C
X509v3 Authority Key Identifier:
keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:e9:07:55:68:c6:2a:a2:3d:aa:d2:a6:71:cb:30:ab:56:6d:
c8:3c:5a:eb:a1:36:92:cf:23:b8:13:b2:7c:72:0e:ac:b9:22:
67:e2:5e:29:0e:ca:12:3e:73:f3:8f:a5:25:33:40:76:04:99:
72:d0:39:d0:10:40:9c:f4:bb:05:b4:0f:a8:ca:1a:57:de:09:
97:7f:03:7f:04:37:85:9d:be:ec:80:50:bf:16:88:93:b6:ba:
38:f9:68:2c:94:0a:35:d9:ae:2f:5e:cb:6d:80:bb:78:8d:55:
d3:7d:b8:50:ee:58:47:67:51:20:d5:42:82:b5:5a:92:f8:6f:
28:ac:12:ee:6c:5d:a4:3a:e2:38:54:11:80:83:e7:ae:c6:d3:
0f:50:0c:03:b2:33:80:96:68:42:52:68:42:af:8c:90:54:f2:
05:21:8f:e7:16:fd:3d:a9:1b:0a:65:89:70:82:8d:98:ee:02:
e8:31:67:ab:6a:28:b8:12:ba:08:ef:ca:4a:09:74:e4:0a:94:
ff:f2:ea:7e:4e:94:78:87:5a:57:db:5c:5e:15:e3:ff:1b:08:
9d:62:44:58:3e:1b:69:cf:9b:7a:4a:7b:c9:e9:a8:f8:24:63:
fb:5d:1c:c9:50:9b:c4:97:53:8f:ce:f1:27:c5:69:54:59:83:
de:db:91:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:23:57 2025 by rpki-client