
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
File: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft (raw, json)
Hash identifier: ZFoKCBTFMJX8weYC10+BYJglW51njDjMyCN7siXr1q0=
Subject key identifier: AF:40:09:79:D1:91:FF:7D:F7:70:EF:B4:B5:43:76:11:C8:CA:CF:FB
Authority key identifier: D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4
Certificate issuer: /CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
Certificate serial: 087E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
Manifest number: 0874
Signing time: Sat 12 Apr 2025 20:24:50 +0000
Manifest this update: Sat 12 Apr 2025 20:24:50 +0000
Manifest next update: Sat 19 Apr 2025 20:24:50 +0000
Files and hashes: 1: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl (hash: eNwKpllWZJbAIUokbpPI2g1aV4AJDaY9IENoNRVe2E8=)
2: 6E038820BF6211EA94C2957CC4F9AE02.roa (hash: z3K04y8FAXseRSAao3Z4/OGvZnmija66bg8pyXugrIU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl
rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 20:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174 (0x87e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE08E, serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
Validity
Not Before: Apr 12 20:24:50 2025 GMT
Not After : Apr 19 20:24:50 2025 GMT
Subject: CN=67facc12-bbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:57:be:1f:a0:77:f7:a2:d5:63:fa:85:38:
3e:ad:ca:ce:29:80:c5:18:7d:7d:4f:81:d0:8c:20:
70:65:f2:10:44:5b:38:00:94:ca:34:a2:67:3e:cd:
91:8e:21:5c:8a:00:2b:65:0d:7c:96:e3:4e:69:34:
54:67:6e:97:c1:82:fe:96:59:ff:8d:b7:ab:63:4f:
b1:cf:1f:11:4e:fa:a7:04:e7:8d:b1:8c:79:fa:07:
1e:f9:87:58:32:84:7e:ee:fc:06:ed:17:dd:be:a7:
6f:e4:d8:e2:47:43:38:4a:51:d7:25:a6:30:62:9e:
59:db:c6:20:fe:ef:d4:3b:8d:c1:96:9b:0a:ba:21:
e5:c5:fd:ca:dc:66:60:b4:30:90:92:b7:96:a6:77:
17:40:8c:19:98:12:41:1d:f1:ca:ac:2f:de:d6:34:
3a:38:24:b1:ee:fa:e1:06:9e:11:d6:a4:41:13:b6:
84:7a:14:47:1c:bd:1d:84:de:5b:8e:62:5e:1a:71:
72:07:36:8d:28:ca:c3:40:a5:01:5d:7c:0c:05:88:
08:39:6a:3c:f9:93:ff:54:ca:6a:e3:98:a8:a8:e5:
b5:82:7f:b0:9d:cb:e0:b0:f7:d6:12:8c:4d:8a:49:
c9:d9:fd:d0:67:62:0a:bb:a5:29:86:56:35:da:73:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:40:09:79:D1:91:FF:7D:F7:70:EF:B4:B5:43:76:11:C8:CA:CF:FB
X509v3 Authority Key Identifier:
keyid:D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:36:8c:d4:a9:9e:ca:d5:d7:63:89:2e:86:12:ba:9e:f3:6a:
e6:a0:29:38:fc:b0:02:b0:51:75:c2:2c:e5:8f:de:c6:98:79:
ff:32:9d:07:8e:22:91:bd:89:2b:3a:f7:89:85:9f:d2:d7:32:
ea:ee:28:1a:4f:8e:54:4a:b8:c3:63:de:3d:98:8f:44:9f:06:
79:42:da:d8:9e:2e:4e:c0:ab:1a:56:92:92:04:eb:7d:d2:69:
6f:db:28:ec:15:82:ec:fd:ac:d5:f0:17:19:28:9c:6f:2b:fc:
57:28:f6:85:8e:3c:4a:33:45:ad:59:e8:cb:0d:e4:d2:14:40:
1a:77:eb:57:91:01:1e:a2:45:ab:b5:0b:aa:49:b4:31:f8:b7:
44:26:70:71:53:a7:a6:cb:68:13:b1:53:f1:57:1a:c7:15:85:
d3:d0:2e:8c:9e:7c:ca:24:f3:62:ca:69:db:9c:cc:af:92:44:
bc:73:c2:b3:39:5c:2f:a4:4f:f9:18:26:68:c7:b3:84:1c:88:
ec:ac:fd:5b:39:c1:e1:17:f2:e5:ea:35:94:ae:3d:5b:c6:d7:
ba:98:58:75:7a:84:98:0c:d2:ca:95:94:5b:84:b2:c4:32:00:
d8:d7:fe:81:2e:bf:5d:04:1e:7f:4f:9e:7a:f5:b9:ac:69:4c:
73:05:9b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:39:04 2025 by rpki-client