Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
File: AruX_YsfYg4CoeLK21nWVvAa2kU.mft (raw, json)
Hash identifier: +issYxRfRkkYduzqgp6wrrYAYl8SCuC7i1dCvwWEV9g=
Subject key identifier: 5E:AF:08:99:56:3F:BF:2E:1E:B1:87:9D:41:26:69:90:68:E5:27:E6
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Certificate issuer: /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial: 0305
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
Manifest number: 02FA
Signing time: Wed 09 Apr 2025 00:57:13 +0000
Manifest this update: Wed 09 Apr 2025 00:57:13 +0000
Manifest next update: Wed 16 Apr 2025 00:57:13 +0000
Files and hashes: 1: AruX_YsfYg4CoeLK21nWVvAa2kU.crl (hash: XhKOeyV1IjLmu6JLKy+ZPckvGeMuiatzct6j4cY6NOw=)
2: E100C846D0D211EC92E5014CC4F9AE02.roa (hash: 1/Pe3M/1G4UPq/rk/to0ivJs3udNjtiSMOYgKnEzG+4=)
3: 2DED8B66D02011ECB021972BC4F9AE02.roa (hash: X1fS93fErO++gD03CgWQlQr9RcZXTdWLfGnx0iqRdE4=)
4: 2D478AFED02011ECB021972BC4F9AE02.roa (hash: KiWMfnaqo/tfw5gCcea55F0jBNiA0r/0TcX17r/8cvk=)
5: 8FCF722626C911EE9F1A0917C4F9AE02.roa (hash: qejGSJs6cPmwpEoFNORTx2hIhyRLer5JBQ2gW4em5wk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 00:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 773 (0x305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE108
Validity
Not Before: Apr 9 00:57:13 2025 GMT
Not After : Apr 16 00:57:13 2025 GMT
Subject: CN=67f5c5e9-5a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:4f:c5:1b:d7:97:9e:53:e2:ec:f0:ed:4a:
47:d6:ea:9a:92:45:6e:59:5d:49:cd:be:f7:90:ba:
28:64:c4:78:af:31:31:5c:c3:54:54:0a:01:a2:ee:
52:51:b9:ce:d0:9d:33:0e:e3:48:b6:e1:fc:bd:58:
97:82:4b:60:30:07:91:f7:3e:34:af:06:d9:95:46:
25:07:d7:77:4c:6e:17:e8:3e:b1:d4:c8:be:c0:6e:
22:09:c5:40:a6:9e:a7:0a:35:46:c5:9f:45:c3:84:
bf:23:d1:ee:50:84:22:cb:9a:ab:95:c9:84:24:10:
d3:3c:a1:f4:2f:f3:3c:f9:3a:f5:76:31:3a:5c:58:
06:4d:50:57:1b:06:20:e6:fd:78:df:a9:83:09:83:
bf:2a:0b:87:1a:8f:1b:94:de:0c:43:72:78:60:4a:
da:89:8a:7e:aa:e2:45:35:1c:46:35:8f:fd:43:d2:
b2:18:b1:79:71:c4:74:a7:82:9a:06:c7:15:27:fb:
b2:3c:3a:d8:b2:6e:03:fd:32:6d:13:14:39:c1:63:
4f:ec:48:11:c8:5b:f4:0d:0c:58:6d:52:bf:af:53:
3f:a2:12:64:e9:a5:42:6d:6f:bf:e5:b8:e9:81:84:
e2:4c:e1:56:84:6b:c9:ec:af:88:07:c1:b1:a6:01:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AF:08:99:56:3F:BF:2E:1E:B1:87:9D:41:26:69:90:68:E5:27:E6
X509v3 Authority Key Identifier:
keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:56:e2:cf:b6:01:c9:bc:1c:c5:da:a6:f1:fd:ce:37:f9:fd:
7f:bd:08:84:74:33:f8:4c:3f:1f:0d:29:bf:92:36:13:65:80:
d6:24:a0:ea:8a:37:4b:c9:59:02:a6:cd:c0:19:d4:8c:e7:a8:
e0:bd:74:4b:05:ab:b7:1a:94:a2:41:29:c4:a6:56:0a:fc:b0:
ce:24:60:7c:bb:e7:aa:94:95:b4:8b:d4:3c:5f:2a:09:d4:05:
df:09:bd:b8:e1:f3:65:a5:9e:55:72:3b:b2:42:6f:b0:6b:68:
21:1a:76:db:6d:d2:ac:ed:4a:88:50:f3:97:96:90:e1:15:54:
eb:d1:9e:01:95:1d:3a:3d:d5:da:d3:a5:c9:e5:14:d6:f7:c4:
a1:a6:6b:82:34:98:10:a8:db:55:0f:de:14:f1:34:65:ff:98:
10:d5:40:ad:5c:fe:b6:46:1f:d3:5a:cb:3b:d0:ec:4a:66:17:
a5:1f:10:b8:69:93:10:7a:31:12:57:6e:41:77:b1:a6:8f:a8:
40:93:db:b0:b1:af:41:46:b1:49:3b:0f:6c:cd:d6:cb:b8:7c:
0b:87:16:78:6c:6e:10:e8:92:cf:60:ee:f2:8e:c3:89:e1:59:
25:13:57:13:97:9a:24:f7:5e:1f:d8:2e:2a:1f:ca:eb:59:1f:
db:4f:b2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:52:55 2025 by rpki-client