Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
File: IkB3DhUcdBqE3pTijHUgArg5--0.mft (raw, json)
Hash identifier: d9risQOyGhA9HVguuinSs2qRig6seX5zP8qNO8joNO4=
Subject key identifier: E5:CF:D0:B8:C8:5D:DA:42:E4:D3:CD:9D:7E:A1:D5:5C:97:CC:82:C7
Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED
Certificate issuer: /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED
Certificate serial: 0736
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
Manifest number: 072D
Signing time: Tue 08 Apr 2025 21:31:50 +0000
Manifest this update: Tue 08 Apr 2025 21:31:50 +0000
Manifest next update: Tue 15 Apr 2025 21:31:50 +0000
Files and hashes: 1: IkB3DhUcdBqE3pTijHUgArg5--0.crl (hash: k/nOuKCfUi4wyM4IX9QO8vkBvD4kNcifxJ8PnLodKjg=)
2: 05E355AEA03811EDBC101B49C4F9AE02.roa (hash: VX7tWpkB3IpeXdKnDIMHBHz09wmck5Wxazs1on6cWAs=)
3: 8224075A293711EB9DE16C62C4F9AE02.roa (hash: UtE0iQnooYxxq8F81zrRGsRO6qH6B3IIfoj4HCuUdUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl
rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 21:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1846 (0x736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A665A
Validity
Not Before: Apr 8 21:31:50 2025 GMT
Not After : Apr 15 21:31:50 2025 GMT
Subject: CN=67f595c6-b4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2a:0b:3e:f9:20:45:31:e5:1a:f7:a8:5a:09:
61:e9:56:38:17:c7:e6:7b:43:ca:8a:cb:f0:54:1e:
03:84:e0:f2:49:0d:0a:b0:ca:31:a1:52:4f:1f:04:
93:8c:5c:29:ae:b8:f7:7c:ee:4c:44:79:6a:ad:2b:
6a:4a:eb:6e:e2:c5:f7:9c:9d:57:24:8d:89:74:0d:
b2:a3:b0:90:2d:53:50:07:47:9f:c7:d3:e0:ee:1b:
13:bf:5c:9f:b9:2e:df:c0:a1:64:37:2f:45:47:fe:
18:8d:67:50:36:e9:c3:21:fb:39:e6:90:c3:eb:72:
68:6f:ea:b1:da:5f:cc:a6:8a:61:0e:38:fc:f4:02:
7b:75:aa:18:9f:00:cb:47:e4:26:35:79:56:56:70:
c3:23:37:4e:9f:f5:2a:aa:1d:54:70:01:74:13:7f:
5c:b5:dd:0d:be:44:55:d9:bb:f0:2e:19:f4:8b:27:
e3:c4:bb:12:84:a5:13:cd:c1:c4:db:91:77:0e:39:
36:52:50:fa:36:6d:75:24:a9:ae:10:e2:7f:79:aa:
80:c4:aa:f5:ab:c3:cb:3e:58:89:4f:03:0b:35:2d:
30:c5:e0:80:ff:c8:58:4e:d0:c2:fa:6c:5e:2a:e4:
e6:3b:fe:9b:ec:06:af:33:a1:e8:25:70:ab:19:0a:
5d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CF:D0:B8:C8:5D:DA:42:E4:D3:CD:9D:7E:A1:D5:5C:97:CC:82:C7
X509v3 Authority Key Identifier:
keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:06:59:ab:41:a5:c2:a8:d0:03:ee:fa:20:ed:8d:f7:f5:a5:
8f:de:71:86:00:99:03:4c:6a:75:31:2b:e2:ef:54:2b:23:e0:
6f:a1:65:ff:33:61:3b:a4:2c:ea:4d:89:a4:67:e0:7d:b4:75:
55:5d:bf:7e:19:0f:25:df:5a:57:6f:06:8d:6f:5a:15:97:0d:
3b:7a:13:4e:02:05:d8:17:5c:fd:91:7e:25:57:98:33:3e:90:
68:61:a0:7d:56:4d:d2:5a:2a:89:68:75:b7:fc:a8:3d:51:f4:
08:0c:46:b0:a9:76:a2:6a:4f:56:6b:eb:88:aa:ee:92:bf:a0:
a6:63:48:03:bb:46:c2:cc:62:11:1a:85:10:c5:42:b7:c6:ec:
d3:67:74:80:38:7f:67:65:bc:68:90:16:77:84:51:c2:2d:e2:
9a:4e:32:b8:08:ad:a8:95:f1:98:1b:c7:a7:43:20:0f:f4:6f:
6f:14:64:60:78:b4:4f:39:90:42:17:5f:82:ed:49:66:10:82:
2a:45:d2:28:73:3b:30:86:26:c7:5e:c2:54:0b:62:51:3a:d3:
64:f4:09:6d:cf:55:88:90:d4:c9:eb:2a:43:57:c6:9a:6e:2a:
12:41:f0:17:82:dc:1c:14:b6:71:8c:11:1b:b9:d6:ff:86:60:
b1:db:b2:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTY2NUExMTAvBgNVBAUTKDIyNDA3NzBFMTUxQzc0MUE4NERFOTRFMjhDNzUyMDAy
QjgzOUZCRUQwHhcNMjUwNDA4MjEzMTUwWhcNMjUwNDE1MjEzMTUwWjAYMRYwFAYD
VQQDEw02N2Y1OTVjNi1iNGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9CoLPvkgRTHlGveoWglh6VY4F8fme0PKisvwVB4DhODySQ0KsMoxoVJPHwST
jFwprrj3fO5MRHlqrStqSutu4sX3nJ1XJI2JdA2yo7CQLVNQB0efx9Pg7hsTv1yf
uS7fwKFkNy9FR/4YjWdQNunDIfs55pDD63Job+qx2l/MpophDjj89AJ7daoYnwDL
R+QmNXlWVnDDIzdOn/Uqqh1UcAF0E39ctd0NvkRV2bvwLhn0iyfjxLsShKUTzcHE
25F3Djk2UlD6Nm11JKmuEOJ/eaqAxKr1q8PLPliJTwMLNS0wxeCA/8hYTtDC+mxe
KuTmO/6b7AavM6HoJXCrGQpd+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXP0LjI
XdpC5NPNnX6h1VyXzILHMB8GA1UdIwQYMBaAFCJAdw4VHHQahN6U4ox1IAK4Ofvt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjY1QS9DOEZBRDEzODI5
MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RCcUUzcFRpakhVZ0FyZzUt
LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lrQjNEaFVjZEJxRTNwVGlqSFVnQXJnNS0tMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NjY1QS9DOEZBRDEzODI5MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RC
cUUzcFRpakhVZ0FyZzUtLTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6BlmrQaXCqNAD7vog7Y339aWP3nGGAJkDTGp1MSvi71QrI+BvoWX/
M2E7pCzqTYmkZ+B9tHVVXb9+GQ8l31pXbwaNb1oVlw07ehNOAgXYF1z9kX4lV5gz
PpBoYaB9Vk3SWiqJaHW3/Kg9UfQIDEawqXaiak9Wa+uIqu6Sv6CmY0gDu0bCzGIR
GoUQxUK3xuzTZ3SAOH9nZbxokBZ3hFHCLeKaTjK4CK2olfGYG8enQyAP9G9vFGRg
eLRPOZBCF1+C7UlmEIIqRdIoczswhibHXsJUC2JROtNk9Altz1WIkNTJ6ypDV8aa
bioSQfAXgtwcFLZxjBEbudb/hmCx27Kn
-----END CERTIFICATE-----
Generated at Fri Apr 11 19:52:28 2025 by rpki-client