Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft
File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json)
Hash identifier: QL9ovr73Ytrw1OEFcDtvU68IzbNHPtd/2mbY1SRoV1c=
Subject key identifier: 92:86:45:21:E2:6A:55:50:F4:30:09:55:21:4F:10:58:B1:CF:CF:3B
Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8
Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8
Certificate serial: 6D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft
Manifest number: 6B
Signing time: Thu 17 Apr 2025 05:42:27 +0000
Manifest this update: Thu 17 Apr 2025 05:42:27 +0000
Manifest next update: Thu 24 Apr 2025 05:42:27 +0000
Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: 9zZFg0Su5zlGXSjaxM9khGiOmRnhPFkoAPxJH99RMNc=)
2: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: Y94sd9E5GlcMt+lxymyuqjd3AEApdFlcMVQYEZaGYA0=)
3: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: jUEy/iUbesTw/bKzIqKbuM3aQtOsfpKNSiK5hvDoL0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl
rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Apr 2025 04:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8
Validity
Not Before: Apr 17 05:42:27 2025 GMT
Not After : Apr 24 05:42:27 2025 GMT
Subject: CN=680094c3-6cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:6a:57:3d:82:a7:a1:e6:e5:36:7b:7c:13:
4f:29:27:66:71:49:a7:89:7a:2e:6d:c9:25:98:d6:
b3:e9:d9:39:1f:30:8f:86:8a:18:46:88:96:d8:a6:
05:cd:cf:32:25:b0:5c:21:92:dd:e8:57:c4:01:29:
3d:45:02:ec:64:04:a7:73:da:f7:df:f6:a5:ed:a5:
e4:b9:34:dd:99:92:82:64:28:33:3a:7a:37:b2:66:
82:b5:1e:ed:35:3d:44:c6:f0:8c:77:b2:36:0b:de:
23:3e:b1:87:58:f1:6d:6f:e3:17:00:fa:c7:b9:f6:
98:e0:76:05:ca:38:a3:27:c5:4b:80:00:d5:c1:11:
09:b6:f5:f3:79:7d:d4:ae:32:a6:47:97:ff:19:a9:
7b:e5:58:05:f6:0a:7c:3d:14:2f:49:3c:c9:5d:16:
72:c4:62:7a:e6:f6:ab:b2:58:3d:40:f3:bf:f2:a2:
1b:83:5b:c3:42:10:13:b8:94:15:25:e5:54:3a:42:
60:aa:65:1c:f0:0c:82:39:a7:dd:09:ed:36:dc:f6:
b6:87:76:48:a9:f6:c6:19:b3:d4:fd:b7:e7:7d:a5:
9a:89:58:28:74:80:d3:7d:d7:9d:53:3c:d1:6a:89:
76:9b:31:f4:f2:ec:15:e9:96:61:86:2d:48:f3:76:
4f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:86:45:21:E2:6A:55:50:F4:30:09:55:21:4F:10:58:B1:CF:CF:3B
X509v3 Authority Key Identifier:
keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5a:cb:d6:01:24:4b:20:48:1c:e4:81:f1:42:f8:84:b7:e7:
cf:26:3d:7a:47:62:50:14:b4:73:3f:30:4e:09:f2:e0:f2:68:
fc:42:e4:e0:35:08:43:07:c9:84:4e:1e:36:2e:c9:3f:18:08:
f7:e0:a8:69:d8:93:0e:95:6f:c1:0c:13:e3:fa:db:1e:42:51:
cc:bd:58:e2:f1:e7:70:69:b7:47:59:c7:55:ef:6f:eb:22:92:
24:18:07:9c:2f:ab:0d:5f:42:af:7e:71:88:22:e9:42:90:8b:
11:1f:22:a7:0b:6c:06:21:cd:be:81:93:04:50:c3:44:7e:d2:
79:16:29:51:a6:21:be:0a:f7:ed:65:25:cc:50:66:78:16:ae:
d8:1e:86:d8:2a:27:57:a5:60:c0:1f:93:a9:d5:e9:3b:15:49:
35:37:16:de:d7:28:89:4b:ac:b6:3a:92:75:b6:a7:34:47:9f:
e1:e0:71:d8:8a:ac:d3:be:56:85:49:c2:d2:ad:a5:b3:88:0a:
21:b8:2e:3e:cf:9c:b6:6f:de:96:6e:b8:6a:83:9b:dc:30:ee:
f5:aa:2a:9c:40:9f:e3:20:fb:01:ac:41:fd:7d:54:55:4c:c2:
9b:34:fb:d2:fe:6d:ee:68:86:7a:51:59:9b:99:f9:20:5f:49:
c4:24:4b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:10:24 2025 by rpki-client