
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
File: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft (raw, json)
Hash identifier: cwpFYBygKgyZt3hNMgIRtp61eC2eidBkG7oU8Do98WA=
Subject key identifier: CC:84:B0:59:8D:6B:03:12:4B:96:63:E7:C8:6A:54:EE:40:9F:66:5F
Authority key identifier: F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81
Certificate issuer: /CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881
Certificate serial: 071A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
Manifest number: 0715
Signing time: Sat 12 Apr 2025 21:32:54 +0000
Manifest this update: Sat 12 Apr 2025 21:32:53 +0000
Manifest next update: Sat 19 Apr 2025 21:32:53 +0000
Files and hashes: 1: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl (hash: BsgyMNOn4YZywY9vWDgHatDzUUFCdwqeTJ3EL32L7uE=)
2: AD7A378C334411EB901EBB81C4F9AE02.roa (hash: qziDfsPw/gmvbvNR9GeSBAN/K4Vo5CvfMXXnhzWlgBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl
rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 21:32:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1818 (0x71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA053, serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881
Validity
Not Before: Apr 12 21:32:53 2025 GMT
Not After : Apr 19 21:32:53 2025 GMT
Subject: CN=67fadc05-2191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:ff:6e:65:f5:9b:0b:21:36:5a:1e:14:8c:
7c:64:de:9d:3d:ed:b0:4b:5f:f0:59:0e:11:3b:6d:
55:ad:d8:3d:97:b5:0d:b0:f8:06:e6:78:79:00:3a:
07:d8:99:bc:c4:8f:97:db:d8:33:b5:b5:ce:d6:88:
c7:14:7d:74:9a:a3:cb:e8:4b:cc:21:82:46:1e:6f:
f1:58:7e:be:cd:89:2f:00:86:24:d6:d2:e5:f0:ab:
2b:c9:8e:0f:76:08:5c:2f:be:31:cb:15:49:2a:f8:
6a:3e:8e:2a:81:34:3e:cb:ab:e9:f5:cc:41:0c:00:
cf:b8:51:b9:09:8b:ca:7d:96:18:16:19:56:3c:bb:
37:dd:46:47:ab:45:28:a5:07:8b:cd:93:14:73:51:
6d:f9:7f:4a:a5:5d:12:d4:8c:3a:03:6e:3e:20:32:
e0:36:6c:10:1a:a7:c9:f5:d1:89:24:b6:dc:57:0e:
42:68:03:9f:95:36:81:9d:8e:3f:4e:b7:46:26:b4:
15:2f:ef:80:16:18:25:d6:2b:47:08:7c:55:a4:cc:
ac:07:ca:6a:19:d1:74:7b:b5:0c:fa:fb:f4:09:9c:
78:9b:97:86:22:4d:67:0f:91:a6:08:74:7b:0d:da:
f7:2e:58:e8:a9:a5:b4:31:8b:28:45:5d:73:64:59:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:84:B0:59:8D:6B:03:12:4B:96:63:E7:C8:6A:54:EE:40:9F:66:5F
X509v3 Authority Key Identifier:
keyid:F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:94:f9:04:93:96:c3:46:6c:76:be:90:ee:76:0f:5e:4b:c8:
60:8b:d4:18:fc:07:9f:f7:0f:da:58:05:fe:c4:e1:a7:11:8a:
cb:15:57:2e:eb:5e:69:15:ae:0a:fd:1f:e1:b9:5d:71:cf:2b:
ea:30:9e:76:38:fb:ee:43:65:ba:5a:62:0c:e5:42:fb:57:74:
42:09:e1:38:4e:47:9a:9f:f5:fa:e3:56:79:c6:30:c9:a9:e6:
6e:b4:d2:30:07:35:0c:71:80:2e:46:2d:7d:06:cf:10:0d:b5:
c8:d2:03:58:7b:25:ee:c2:9c:d6:12:99:5b:b2:ec:eb:b0:b3:
6e:78:ea:8d:00:e4:c8:1a:9c:62:49:e5:d3:33:63:c2:f2:d1:
1a:f2:fb:7c:09:35:b4:76:b5:c9:82:48:39:f6:2a:08:e3:c9:
f6:bd:84:cf:df:b2:6a:53:4d:41:28:30:6a:92:81:c9:97:4e:
2e:f8:cf:f2:f6:c7:ec:da:db:00:46:8e:59:47:c7:bf:8a:66:
b8:ce:13:48:ec:ba:fb:90:0e:0d:33:92:98:bb:a6:74:57:0b:
83:de:78:4a:e5:5f:49:bd:3b:e0:15:a1:54:63:4e:c3:fe:62:
3f:00:54:47:c4:d7:0f:a2:e4:b1:9d:95:7c:2e:fc:02:ab:d0:
63:e2:ee:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUEwNTMxMTAvBgNVBAUTKEY5MkE3NTBCNTI0Nzk0RDRGQkJGMjE4ODVCREFGNkQw
NzhGMUU4ODEwHhcNMjUwNDEyMjEzMjUzWhcNMjUwNDE5MjEzMjUzWjAYMRYwFAYD
VQQDEw02N2ZhZGMwNS0yMTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxNP/bmX1mwshNloeFIx8ZN6dPe2wS1/wWQ4RO21Vrdg9l7UNsPgG5nh5ADoH
2Jm8xI+X29gztbXO1ojHFH10mqPL6EvMIYJGHm/xWH6+zYkvAIYk1tLl8KsryY4P
dghcL74xyxVJKvhqPo4qgTQ+y6vp9cxBDADPuFG5CYvKfZYYFhlWPLs33UZHq0Uo
pQeLzZMUc1Ft+X9KpV0S1Iw6A24+IDLgNmwQGqfJ9dGJJLbcVw5CaAOflTaBnY4/
TrdGJrQVL++AFhgl1itHCHxVpMysB8pqGdF0e7UM+vv0CZx4m5eGIk1nD5GmCHR7
Ddr3LljoqaW0MYsoRV1zZFkSJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyEsFmN
awMSS5Zj58hqVO5An2ZfMB8GA1UdIwQYMBaAFPkqdQtSR5TU+78hiFva9tB48eiB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My9BRkI2QkY3NjMz
NDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxOVDd2eUdJVzlyMjBIang2
SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1TcDFDMUpIbE5UN3Z5R0lXOXIyMEhqeDZJRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTA1My9BRkI2QkY3NjMzNDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxO
VDd2eUdJVzlyMjBIang2SUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRlPkEk5bDRmx2vpDudg9eS8hgi9QY/Aef9w/aWAX+xOGnEYrLFVcu
615pFa4K/R/huV1xzyvqMJ52OPvuQ2W6WmIM5UL7V3RCCeE4Tkean/X641Z5xjDJ
qeZutNIwBzUMcYAuRi19Bs8QDbXI0gNYeyXuwpzWEplbsuzrsLNueOqNAOTIGpxi
SeXTM2PC8tEa8vt8CTW0drXJgkg59ioI48n2vYTP37JqU01BKDBqkoHJl04u+M/y
9sfs2tsARo5ZR8e/ima4zhNI7Lr7kA4NM5KYu6Z0VwuD3nhK5V9JvTvgFaFUY07D
/mI/AFRHxNcPouSxnZV8LvwCq9Bj4u5d
-----END CERTIFICATE-----
Generated at Mon Apr 14 14:45:28 2025 by rpki-client