Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
File: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json)
Hash identifier: MTYTCh6p+n2TIwywqoIMDSuKnZWEJz+cTti+xUMaZx4=
Subject key identifier: 25:C5:9B:A2:2F:5E:84:85:F2:C7:09:E5:8C:64:D7:83:0C:26:31:44
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial: 0B76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
Manifest number: 0B53
Signing time: Sat 12 Apr 2025 18:57:31 +0000
Manifest this update: Sat 12 Apr 2025 18:57:30 +0000
Manifest next update: Sat 19 Apr 2025 18:57:30 +0000
Files and hashes: 1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: ne8+a2c4z1CPxlmgQqAj8umsPSnmhdJT2nf6gFxWMks=)
2: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: fUCvUsdE5BjK2E7JovOFAfK5/ksn+RyULPqTK3NyDTE=)
3: F8088528E65D11EDB5112931C4F9AE02.roa (hash: Lzmul2Cef2NofonlnFrwzVunzHlMbNBTtbdpet7f/jA=)
4: D9173AE459E811ED85614349C4F9AE02.roa (hash: zJ5BK1dHdR/yZ3djpSjZWWfhHBcKyuyePotDm2SHibI=)
5: D7D5B86859E811ED85614349C4F9AE02.roa (hash: Ltz6LBvyoZXhbJ9WTgNP/OOOspHsk57wHv6qE/cOGxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 18:57:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2934 (0xb76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Validity
Not Before: Apr 12 18:57:30 2025 GMT
Not After : Apr 19 18:57:30 2025 GMT
Subject: CN=67fab79b-0610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:b3:93:38:02:26:88:10:8d:c9:27:4e:ff:
10:51:9b:1c:57:a3:93:f1:44:40:a7:61:ee:7b:5a:
51:fc:8c:07:9f:a8:f5:da:82:d0:50:14:20:9f:05:
74:9a:a1:e9:7d:9d:cd:c6:48:21:6f:53:1d:4f:fa:
8a:95:b0:bd:09:9e:87:50:fb:ae:c6:10:9c:26:4c:
27:48:85:56:6b:51:3b:81:e8:85:6d:3e:10:d9:75:
b6:2d:ed:40:3e:0c:17:76:03:fe:ee:51:f0:6b:02:
4d:0a:fb:d4:9d:77:fd:cf:b4:fd:d4:54:66:51:99:
85:aa:40:ef:cf:90:67:b5:2b:a5:2d:0f:4c:64:f0:
e0:eb:ea:5a:e0:05:2a:b6:b0:cb:54:93:8b:90:42:
64:11:f0:99:78:15:6a:b4:d9:8b:95:bd:2c:7d:ff:
36:4d:cf:45:1e:d7:80:45:b3:1b:e3:f9:0b:fa:ff:
4e:39:e7:33:aa:b2:ae:e1:3d:36:9d:92:b4:77:c1:
cc:74:46:19:77:f8:52:3a:50:db:c0:b1:f0:69:13:
d5:8a:63:42:89:f9:c2:8e:15:56:76:1d:d4:17:ac:
f3:ce:7d:76:1d:4e:71:38:01:69:8d:57:14:62:49:
1a:4a:1e:15:6d:3e:58:36:7e:97:20:7b:0b:1a:ab:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C5:9B:A2:2F:5E:84:85:F2:C7:09:E5:8C:64:D7:83:0C:26:31:44
X509v3 Authority Key Identifier:
keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:ab:3f:88:64:7e:5f:0b:08:53:f0:2c:52:2a:33:33:58:f9:
67:ad:46:54:c4:e6:2a:ef:d9:65:df:01:be:59:4d:ca:29:bc:
92:dd:67:e2:f3:68:78:70:02:99:24:04:1c:93:e6:a2:59:e9:
72:8b:4e:28:6e:1b:f6:98:78:a2:a3:28:67:50:fa:9e:6a:82:
63:3f:50:52:3e:7a:6e:18:69:13:e4:62:a4:34:c4:f7:8a:3f:
17:bd:5c:1e:25:de:53:cf:ad:69:2e:6f:e8:be:45:c6:fe:11:
27:86:ee:83:ef:b7:7b:3c:ab:16:7b:3d:e9:af:c1:0d:91:dc:
e0:f7:f2:60:b2:29:29:31:98:0d:83:4e:22:7d:fc:b9:f0:18:
14:71:bc:ba:2f:a9:d4:5d:31:51:6c:87:88:de:b6:cc:7f:57:
43:37:ab:00:04:f8:33:19:13:af:17:bb:52:1d:82:58:bc:26:
6c:7a:ab:d5:bd:c3:cb:b5:e6:5c:bc:4b:9d:c4:29:fc:02:b3:
5a:37:64:a3:ce:30:9a:94:e0:39:48:d5:af:ea:ce:24:7e:89:
d2:bb:21:ef:95:e9:2e:2f:32:e0:3b:47:f6:22:00:8f:66:30:
f8:4c:f6:b2:b1:a2:cf:60:7b:59:f7:f7:66:f2:b2:b3:77:ad:
b8:43:86:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg0MDUxMTAvBgNVBAUTKDJEOUVEM0QyNkU2MzVGN0NGRkU0QkJGNTIwODcxNTBC
N0E0MjE4OEYwHhcNMjUwNDEyMTg1NzMwWhcNMjUwNDE5MTg1NzMwWjAYMRYwFAYD
VQQDEw02N2ZhYjc5Yi0wNjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAovuzkzgCJogQjcknTv8QUZscV6OT8URAp2Hue1pR/IwHn6j12oLQUBQgnwV0
mqHpfZ3Nxkghb1MdT/qKlbC9CZ6HUPuuxhCcJkwnSIVWa1E7geiFbT4Q2XW2Le1A
PgwXdgP+7lHwawJNCvvUnXf9z7T91FRmUZmFqkDvz5BntSulLQ9MZPDg6+pa4AUq
trDLVJOLkEJkEfCZeBVqtNmLlb0sff82Tc9FHteARbMb4/kL+v9OOeczqrKu4T02
nZK0d8HMdEYZd/hSOlDbwLHwaRPVimNCifnCjhVWdh3UF6zzzn12HU5xOAFpjVcU
YkkaSh4VbT5YNn6XIHsLGqudkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXFm6Iv
XoSF8scJ5Yxk14MMJjFEMB8GA1UdIwQYMBaAFC2e09JuY198/+S79SCHFQt6QhiP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwNS9GOUMxOTY5NjMy
MTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algzel81THYxSUljVkMzcENH
STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xaN1QwbTVqWDN6XzVMdjFJSWNWQzNwQ0dJOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODQwNS9GOUMxOTY5NjMyMTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algz
el81THYxSUljVkMzcENHSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAEqz+IZH5fCwhT8CxSKjMzWPlnrUZUxOYq79ll3wG+WU3KKbyS3Wfi
82h4cAKZJAQck+aiWelyi04obhv2mHiioyhnUPqeaoJjP1BSPnpuGGkT5GKkNMT3
ij8XvVweJd5Tz61pLm/ovkXG/hEnhu6D77d7PKsWez3pr8ENkdzg9/JgsikpMZgN
g04iffy58BgUcby6L6nUXTFRbIeI3rbMf1dDN6sABPgzGROvF7tSHYJYvCZseqvV
vcPLteZcvEudxCn8ArNaN2SjzjCalOA5SNWv6s4kfonSuyHvlekuLzLgO0f2IgCP
ZjD4TPaysaLPYHtZ9/dm8rKzd624Q4bJ
-----END CERTIFICATE-----
Generated at Sun Apr 13 14:49:27 2025 by rpki-client