Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
File: G7spe8goFmqkl9N8cmW_tgGuA2A.mft (raw, json)
Hash identifier: uudiJuykZwDTJahiXnnlSFVxt+TV4YfSGVIkrol2w9A=
Subject key identifier: EF:10:E4:F3:13:1C:0C:CD:A4:68:44:DB:FC:10:53:6A:88:D1:A5:73
Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60
Certificate issuer: /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
Certificate serial: 0E1B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
Manifest number: 0E11
Signing time: Wed 16 Apr 2025 17:45:50 +0000
Manifest this update: Wed 16 Apr 2025 17:45:50 +0000
Manifest next update: Wed 23 Apr 2025 17:45:50 +0000
Files and hashes: 1: G7spe8goFmqkl9N8cmW_tgGuA2A.crl (hash: qsg9AZpgm+CH4kpDZ7NSfjp4+DYf+vZUXWDOaLq9Juo=)
2: BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (hash: XB0QLbbknxQIRTO38MXkPwNFVVbVpdhvXqbqZxANpFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl
rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Apr 2025 17:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3611 (0xe1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
Validity
Not Before: Apr 16 17:45:50 2025 GMT
Not After : Apr 23 17:45:50 2025 GMT
Subject: CN=67ffecce-47b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:ab:60:a7:48:9f:63:d1:9a:ab:97:4a:22:
c4:f9:fc:20:56:26:be:71:aa:e9:1a:f9:30:26:d3:
ec:d7:ad:a4:c0:e6:a2:0d:f6:b6:5b:ca:7f:4f:da:
35:32:26:42:b5:92:a6:ee:7a:81:c6:6f:27:4f:03:
ea:61:8b:a9:22:6a:b7:10:70:8c:9a:5c:7c:49:c8:
12:82:e4:47:24:ea:ed:dc:b1:71:ef:19:d3:e6:78:
b3:58:4e:ed:d2:77:5f:cb:3f:28:a9:3c:8a:90:11:
8d:7b:e1:a4:01:b4:bf:40:ca:80:4a:44:b6:50:5a:
6f:41:04:a7:e6:58:1f:c4:29:f3:dc:cc:7e:f2:a3:
17:37:55:11:88:27:22:7d:e0:d6:06:b7:86:01:e3:
0e:78:d8:94:93:e5:32:3e:b0:0f:cb:5f:bc:35:ba:
22:41:7a:ed:aa:08:50:9e:8d:b0:89:42:41:7e:e9:
15:72:1d:ba:0d:d1:9c:fd:ce:35:1f:2e:55:05:4a:
02:be:70:ac:09:1e:c1:2f:15:ed:5b:07:09:fe:b3:
52:45:33:8a:98:72:02:2d:62:20:e5:88:3d:b2:70:
16:6a:a6:9a:b1:2e:fd:76:1e:58:63:c5:bc:b0:5a:
5f:6b:92:54:49:99:c3:d2:7e:24:86:ad:e3:96:ca:
9c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:10:E4:F3:13:1C:0C:CD:A4:68:44:DB:FC:10:53:6A:88:D1:A5:73
X509v3 Authority Key Identifier:
keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a1:ee:52:46:d8:f1:d5:50:da:9c:d0:cb:0d:01:26:63:21:
51:73:73:f7:01:f9:a2:73:6a:28:05:ba:75:c2:61:61:d8:3b:
da:b6:73:d7:52:12:48:0e:a3:f1:b3:d3:33:2d:6e:6e:a4:9f:
e9:dc:ec:6c:d4:d5:f7:4d:ae:59:78:7e:37:97:65:e0:cd:87:
73:a5:b8:79:63:84:7a:2e:a2:f6:24:3e:b4:fa:74:e5:26:f2:
49:c3:7e:c4:47:8f:b3:ea:04:80:66:06:73:72:08:02:82:f2:
51:c0:a9:53:e9:57:e3:71:25:dc:8d:ad:e0:df:f9:ec:15:36:
84:8a:de:33:98:39:01:45:13:46:88:a9:78:37:53:56:f5:e3:
7b:e4:c9:1b:a5:e4:f5:19:2d:50:71:91:89:40:a9:41:74:14:
f6:51:6f:4f:c3:cb:9d:82:15:00:56:f7:8c:0d:09:a0:2b:81:
91:46:b8:eb:66:e0:d7:13:32:b2:72:53:76:ab:1f:cf:55:d5:
5f:40:3c:72:f9:2d:c0:57:ae:38:01:7f:f0:b3:fd:8a:0e:15:
79:70:e8:d4:f2:dd:da:0d:6b:16:6c:7d:73:28:e8:ad:42:40:
bd:1c:10:c2:a7:9b:ec:db:05:fe:cc:a4:2e:cb:42:58:f6:87:
86:b4:0a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:00:11 2025 by rpki-client