Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
File: nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json)
Hash identifier: s4mjo1LcIoTcL6qfHaE5LZGMbPRZbepitLdD7hQnres=
Subject key identifier: A5:B0:03:72:11:1E:1E:02:28:FF:5F:17:D3:84:51:24:EC:A2:18:99
Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81
Certificate issuer: /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
Manifest number: 66
Signing time: Wed 09 Apr 2025 05:48:11 +0000
Manifest this update: Wed 09 Apr 2025 05:48:11 +0000
Manifest next update: Wed 16 Apr 2025 05:48:10 +0000
Files and hashes: 1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: aEaKBN0mh8WpTCui6xr6Pgv727IAIQfDv0eCDilwILw=)
2: 262A51D67BED11EF9BAF751AC4F9AE02.roa (hash: Se4X5BCi6S9clBdJBFWLU+YP4g35YhqfcEGf60R+i8s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl
rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 05:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B190F
Validity
Not Before: Apr 9 05:48:11 2025 GMT
Not After : Apr 16 05:48:10 2025 GMT
Subject: CN=67f60a1b-4b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:86:c9:96:e2:4c:09:00:a0:6e:02:d2:62:26:
f5:f2:ac:1d:d8:50:72:95:97:15:27:13:3b:3c:e6:
21:e5:0a:d3:a2:07:25:ad:87:36:6f:8c:74:ac:a3:
3d:1c:74:04:16:e3:9b:49:6c:af:1d:d7:ca:9d:a0:
e2:36:79:b0:c3:de:f7:b7:63:df:25:b7:58:6f:ff:
4a:2f:f8:2f:e6:5a:d7:70:85:44:e6:07:b7:31:eb:
10:f7:2e:e8:66:79:7a:a0:b9:cd:e2:a7:f6:96:7d:
94:28:5c:0e:20:d1:36:56:71:ef:31:07:69:a5:7a:
e3:e3:54:1e:ab:2c:14:07:97:24:9f:02:45:f1:bd:
c5:e1:bb:99:c1:80:aa:93:04:42:8f:c3:22:c6:51:
7b:c3:a9:63:60:0c:0c:30:02:0b:62:ff:13:77:fa:
66:f1:67:75:d8:42:9e:b0:6f:29:01:44:8b:28:87:
3e:d6:a8:ac:94:3a:2c:36:fe:d7:0e:f1:44:ee:98:
e6:d2:e8:76:b7:63:13:34:0a:df:84:42:31:93:28:
36:57:56:d3:ef:e9:63:cb:12:3c:d1:41:d4:f9:a2:
d3:62:35:90:13:95:80:49:87:cb:d4:52:97:7b:f8:
65:32:50:32:36:4b:f6:b2:5e:28:cf:54:d2:8d:52:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B0:03:72:11:1E:1E:02:28:FF:5F:17:D3:84:51:24:EC:A2:18:99
X509v3 Authority Key Identifier:
keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0f:79:0b:34:94:c1:6b:8b:bc:0e:83:69:5c:8c:9f:13:bb:
7a:ee:68:78:fc:b8:a5:c9:c3:b5:ff:34:57:5d:4c:a9:4a:4b:
a5:f8:00:4a:90:14:84:b8:f0:f7:bc:c8:f4:73:b8:d5:30:08:
81:0d:44:d3:64:2b:1e:ba:fc:a9:19:c8:51:cc:a4:65:d4:12:
49:e9:09:c4:e7:bf:99:4d:45:85:d6:7d:ea:16:87:6e:d5:c9:
c1:5a:fc:b5:db:da:ac:7a:ae:ff:b2:75:21:43:42:3c:ea:88:
08:51:6d:89:91:2c:9b:66:a1:a6:93:0b:bb:19:e2:2b:d1:18:
f1:df:8c:72:a4:8e:7f:72:b2:5a:09:2b:dd:0c:bb:5d:48:11:
47:c8:6d:b0:1c:9b:73:0d:0e:9c:5e:5c:6a:ee:e8:78:0f:74:
63:dc:2d:ad:dc:85:6e:59:31:d3:95:f9:17:b3:bb:60:08:6c:
08:36:fe:34:74:ba:79:d9:31:a8:8f:85:3a:0d:74:6a:7e:43:
c9:df:1b:86:db:14:b3:45:51:20:96:a3:16:9a:fc:46:7a:88:
8b:9f:0a:9c:f2:34:56:53:c2:48:80:82:63:1e:e9:ee:cb:0d:
3d:8c:4d:79:6e:32:f7:ee:c6:35:d9:74:14:f0:99:30:c5:03:
c8:af:77:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:56:20 2025 by rpki-client