Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
File: r9CVWn3X-bDsKkShHZNyB8J1SmM.mft (raw, json)
Hash identifier: T2+z4Si7nhygrOQfgZ6RnoqbbiEY3AV70eyxW+5fnZ8=
Subject key identifier: 54:03:65:86:98:7F:2D:50:49:91:96:3F:F2:F0:84:CB:A3:92:31:E9
Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
Certificate issuer: /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
Certificate serial: 03D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
Manifest number: 03C0
Signing time: Wed 09 Apr 2025 00:25:54 +0000
Manifest this update: Wed 09 Apr 2025 00:25:53 +0000
Manifest next update: Wed 16 Apr 2025 00:25:53 +0000
Files and hashes: 1: r9CVWn3X-bDsKkShHZNyB8J1SmM.crl (hash: OlF2CKTOjx+6urL/YlV/kEI7k4imbdqxAz96ZKy3RrQ=)
2: E69ABF78033911EFBE28FC1FC4F9AE02.roa (hash: K3rDHWPEAJEer2ozScBARYUC6OZeQAKfAz9YzKjyZUE=)
3: CB8AA43A4D9B11EFB201E984C4F9AE02.roa (hash: SQTlYtZWBprTsXZg4y/agCbXu15OoonPVSUB6W+3pMo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl
rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 00:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978 (0x3d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1018
Validity
Not Before: Apr 9 00:25:53 2025 GMT
Not After : Apr 16 00:25:53 2025 GMT
Subject: CN=67f5be91-ed2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:78:6a:21:a1:49:c1:5d:c8:66:f4:e5:6a:
68:a5:1e:85:c0:7e:bf:0b:5e:50:aa:11:ff:c2:67:
7b:84:47:06:b1:dc:fc:dc:48:62:a6:a6:4f:f8:30:
0b:6e:88:6c:e3:30:0e:60:7a:c5:22:e1:08:94:05:
28:8c:6b:e3:0e:e9:53:18:fa:88:b8:49:80:6c:7b:
5f:bb:ab:40:af:e7:6c:d8:b8:33:a6:c6:43:b2:bb:
61:ac:93:eb:12:a2:89:d8:ac:74:6b:c2:c7:a2:c4:
9b:62:27:e1:7b:83:ee:14:7a:fb:77:0c:9a:6a:71:
58:87:12:0b:40:c5:a6:89:b5:28:5e:93:7a:bf:7f:
c5:0a:2f:3f:9b:6d:78:8d:b6:d0:9c:00:34:44:c7:
c8:0a:43:ad:d8:73:e7:1d:b1:6f:33:ac:4c:67:aa:
4b:80:60:8c:ba:d3:6e:30:53:ce:da:88:2e:28:4a:
6e:14:04:2e:0f:de:5e:e5:af:16:c0:21:1c:84:5f:
ba:39:9c:ac:1d:09:ee:e8:3c:32:33:70:a5:e0:48:
7a:e1:ed:8c:8a:23:84:0e:53:d5:7d:77:7a:90:b9:
d9:1b:21:c9:75:04:cd:93:65:85:aa:42:5d:14:36:
0a:65:5b:01:41:58:53:bd:be:0b:8c:27:0f:d2:7b:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:03:65:86:98:7F:2D:50:49:91:96:3F:F2:F0:84:CB:A3:92:31:E9
X509v3 Authority Key Identifier:
keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:28:e5:75:41:90:c5:51:fe:23:3e:ba:a8:1e:cf:c3:f9:9c:
4d:25:7c:8a:4e:e8:a1:09:79:cc:b4:96:fd:2d:c4:45:e2:cf:
95:80:2a:fc:ed:64:9a:d5:7b:d7:df:e3:84:1d:f4:82:a9:0c:
4b:e9:36:5b:2e:06:43:83:61:bf:67:9e:51:27:bc:45:9a:fe:
eb:07:31:4b:32:8c:8b:6d:65:18:9e:c9:76:79:6a:d1:d5:5a:
23:8b:c4:52:da:5e:50:68:33:6a:0b:e4:0f:0c:d0:e7:91:2a:
bf:7e:b8:8d:15:cb:72:bc:e6:f5:4b:7f:de:b1:c8:f9:ae:4f:
42:e9:f8:b2:28:9e:ed:9b:63:57:59:0e:e4:ed:ab:87:88:b2:
46:d5:56:0d:30:29:bd:e0:39:41:c7:7a:21:6a:2e:33:55:d6:
c5:2d:37:3a:ee:35:d7:43:fe:3d:0a:48:2f:ae:68:ff:02:61:
08:83:bc:9c:47:dc:21:e0:b2:51:8d:f5:fb:83:4c:88:37:0b:
a3:9c:3d:2b:d4:2d:88:ad:cd:7d:f3:c0:83:51:af:20:5a:13:
3b:4f:05:61:3e:dd:92:03:35:66:7a:17:3e:70:a9:54:92:86:
f4:87:8d:40:05:d5:8c:df:5a:62:22:60:89:27:18:0f:b7:cf:
08:75:07:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:26:27 2025 by rpki-client