Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
File: bzPCWtM2F4RBLEKweYYz0Dslvso.mft (raw, json)
Hash identifier: AwS5DhBjAl2j7fepsk3WEXQxW5ssMgb0MyfFCqiFNW8=
Subject key identifier: F7:8A:06:CA:78:B8:FC:73:2E:20:A0:AF:88:89:3D:32:98:0B:A4:FA
Authority key identifier: 6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
Certificate issuer: /CN=A91AB027/serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Certificate serial: 0F1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
Manifest number: 0F13
Signing time: Mon 14 Apr 2025 17:36:14 +0000
Manifest this update: Mon 14 Apr 2025 17:36:13 +0000
Manifest next update: Mon 21 Apr 2025 17:36:13 +0000
Files and hashes: 1: bzPCWtM2F4RBLEKweYYz0Dslvso.crl (hash: TMXomMcnbEzotPnj9tHad85j+LzKqnpy+srYqyrByrg=)
2: 62C1F5587ACD11E9AC0A867BC4F9AE02.roa (hash: nPLVWy54o20K9NCgnKMQdW3UHlJN80xYDJGM9u1xe5s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Apr 2025 17:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3867 (0xf1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB027, serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Validity
Not Before: Apr 14 17:36:13 2025 GMT
Not After : Apr 21 17:36:13 2025 GMT
Subject: CN=67fd478d-1296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:7e:2e:3c:96:97:98:d9:93:82:1d:dc:3f:
13:97:e6:4c:ab:9c:04:e7:7b:94:a8:7c:a0:60:1b:
00:e3:59:86:4a:09:d8:14:62:cb:9f:40:38:a5:01:
18:d3:fb:d3:06:23:bf:53:31:ca:1a:f8:f6:b2:5b:
da:0e:32:8f:a0:de:41:5e:da:24:24:4e:e6:e0:81:
51:2c:58:91:2f:10:f8:a2:1b:c0:a3:4c:fb:89:84:
b1:30:d9:c7:82:b5:95:fe:6a:99:d1:62:a1:da:7c:
4d:1b:6c:59:10:70:6b:0f:3c:2b:b5:4c:6b:4e:09:
0e:33:28:64:53:9d:93:b9:56:e8:b0:93:b2:9a:5e:
aa:98:e8:cb:24:57:1f:bb:be:9e:0c:10:f0:47:58:
0f:90:fa:a7:13:88:58:69:30:15:e7:e2:88:50:b9:
c3:4f:af:0e:00:58:26:46:9c:c7:30:30:a2:f2:d9:
7f:ef:93:e9:5d:84:be:7b:ca:a7:00:10:a9:84:88:
3a:f1:3b:43:bb:0d:4d:26:77:70:f4:34:c4:0e:92:
b4:a3:54:5b:c0:a7:d0:8c:c3:ed:f7:c5:fe:bc:8d:
68:ba:e4:b8:7e:fc:5b:9c:ae:4e:56:a2:29:f3:ac:
b6:f4:ca:43:68:69:4b:50:d4:d8:60:13:38:bd:83:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8A:06:CA:78:B8:FC:73:2E:20:A0:AF:88:89:3D:32:98:0B:A4:FA
X509v3 Authority Key Identifier:
keyid:6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:c5:33:94:df:2c:7d:96:a4:82:58:ca:5f:d5:30:f1:59:c2:
7d:62:45:e1:08:d2:11:18:5c:a3:25:26:d3:a4:aa:e5:8c:9e:
1c:dc:be:ad:79:21:17:52:65:51:28:8c:f4:a8:bc:f2:2b:65:
7c:8e:60:c8:dc:a5:f1:58:aa:4a:b8:fe:eb:7f:52:01:a7:ee:
5e:52:3b:88:64:82:2d:c4:a3:70:59:3e:2e:11:23:4d:4c:37:
da:44:09:c2:26:74:ae:4d:24:4d:11:eb:0b:ff:43:76:aa:6d:
cf:0d:74:40:2a:f2:7f:e0:22:42:1b:d8:7e:5d:af:ad:61:36:
4a:e7:5a:68:09:88:10:7d:be:f1:c1:41:cc:c6:e6:4c:78:7b:
3f:ca:1d:34:69:60:39:5d:30:13:42:69:9c:b6:3f:84:fe:a3:
4e:b2:3e:6a:07:c6:89:85:ee:0e:8a:0f:96:53:6d:a9:e7:12:
ea:64:cb:60:8d:58:b0:9a:11:1e:c1:0a:7a:7d:50:ca:80:e4:
b7:08:5d:e2:87:d9:b6:34:11:81:23:89:c2:6f:6a:4d:a9:f2:
bc:2f:26:07:52:6a:31:fb:7e:ff:53:a3:45:27:cf:26:46:be:
af:28:2c:97:3b:78:a5:70:8c:3b:22:40:89:e9:be:f3:42:0e:
07:be:a0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:35:21 2025 by rpki-client