Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft
File: bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft (raw, json)
Hash identifier: 8UASoBaa5iqht98dqNu+cUjFhq6WodAkQfO94Y1nH6E=
Subject key identifier: 07:B6:93:88:40:D3:E6:7B:F3:DC:5F:4A:EB:C7:33:EB:46:32:A1:2A
Authority key identifier: 6D:D0:75:C0:70:CD:19:40:5C:09:4D:4D:3D:4B:DA:16:34:0C:EE:FC
Certificate issuer: /CN=A91B4873/serialNumber=6DD075C070CD19405C094D4D3D4BDA16340CEEFC
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bdB1wHDNGUBcCU1NPUvaFjQM7vw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft
Manifest number: 92
Signing time: Sun 13 Apr 2025 05:08:33 +0000
Manifest this update: Sun 13 Apr 2025 05:08:32 +0000
Manifest next update: Sun 20 Apr 2025 05:08:32 +0000
Files and hashes: 1: bdB1wHDNGUBcCU1NPUvaFjQM7vw.crl (hash: RwURSSakcynyxYFtDtsJWk5wF20BIRtdKdB0+3zL2ts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.crl
rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bdB1wHDNGUBcCU1NPUvaFjQM7vw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 05:08:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4873, serialNumber=6DD075C070CD19405C094D4D3D4BDA16340CEEFC
Validity
Not Before: Apr 13 05:08:32 2025 GMT
Not After : Apr 20 05:08:32 2025 GMT
Subject: CN=67fb46d1-5f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:c0:68:b0:32:0d:84:b9:af:bd:a1:61:1b:
d6:aa:30:1b:46:67:21:f7:9a:38:3c:57:79:85:c8:
85:b1:08:f2:f3:09:f2:f4:fc:ea:e2:de:c1:60:e8:
c4:05:ad:fc:5e:44:a5:d2:f2:54:88:f1:21:2d:7d:
1a:48:b2:48:15:44:91:eb:ed:98:91:71:69:96:77:
44:ad:f0:72:6e:e2:00:fb:07:4b:d5:1b:37:81:89:
d3:a3:f1:f3:65:44:09:40:d7:7b:57:85:a4:51:c1:
78:b7:05:f1:42:4a:99:ce:d6:e4:09:ef:e1:3c:84:
0c:f9:30:14:59:0e:0c:e0:34:a2:0f:2b:ab:31:ad:
19:f3:3a:2b:cf:f5:ab:12:32:80:7e:d4:e8:99:c3:
c2:1b:eb:d3:4e:1b:78:4e:6d:69:49:ea:0a:68:6d:
e3:56:d6:6f:3d:55:f1:e5:17:35:1d:a5:cb:53:4d:
a4:5b:a3:30:0d:2b:5f:af:da:50:fd:7c:8f:14:08:
16:99:1b:7f:f5:9f:5f:d1:e6:da:12:71:69:99:19:
3d:f2:e2:0f:ef:b3:45:93:73:09:46:1e:59:ac:46:
c0:e7:78:e7:b6:8f:57:84:43:cb:68:13:3c:3f:35:
78:f7:3f:80:08:5e:36:05:31:47:1f:d9:70:17:6a:
32:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B6:93:88:40:D3:E6:7B:F3:DC:5F:4A:EB:C7:33:EB:46:32:A1:2A
X509v3 Authority Key Identifier:
keyid:6D:D0:75:C0:70:CD:19:40:5C:09:4D:4D:3D:4B:DA:16:34:0C:EE:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bdB1wHDNGUBcCU1NPUvaFjQM7vw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:e1:57:66:8b:30:dc:9c:de:53:b2:a4:95:eb:63:fa:78:0f:
73:10:50:89:8e:d2:53:0b:0f:de:b4:09:da:34:62:43:d3:c8:
3e:c5:c7:f3:02:fc:47:21:22:61:09:05:e9:86:bd:62:cd:ca:
43:33:4c:c7:5e:70:7b:a8:17:65:e9:c2:93:0f:8f:fb:1c:70:
b9:6b:6c:1c:43:7d:3d:ac:23:d9:96:f3:15:75:7f:46:f0:31:
46:21:11:cf:b6:8d:45:98:e5:e1:c1:7f:03:0f:8b:ae:4c:6b:
e2:92:fb:1f:64:19:ba:93:e1:2d:f7:61:19:0d:59:d3:68:c5:
7c:92:69:e0:54:43:f7:5a:65:8f:a3:c9:78:fd:7c:6d:a4:1b:
47:f0:c8:2c:fe:4a:5b:64:fa:0b:d9:29:8d:0d:6b:04:97:fe:
f0:fd:59:45:7f:62:43:b8:d7:e0:7d:72:ec:d3:06:cb:33:cb:
57:6a:01:ad:6b:c9:59:b3:d5:b0:95:78:8d:d3:ff:49:ce:1a:
8a:7a:0e:e4:15:b3:1a:f4:77:d8:c5:de:83:f3:20:17:f8:7f:
e9:57:a5:24:01:8b:a6:b6:ba:5f:6a:63:5a:36:34:cf:df:ca:
31:5e:d4:1a:a8:20:f0:0a:a7:bc:cf:d9:a8:34:37:83:d7:02:
42:95:19:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:10:20 2025 by rpki-client