Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json)
Hash identifier: b1q7uH5AJeVJcY41/mnN7ViRrqu0Mh5yeLwyuT/jFsg=
Subject key identifier: 70:40:56:F4:DD:96:53:BF:E9:EC:AE:8B:D9:A4:81:1F:3E:69:45:B5
Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Certificate serial: 08BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
Manifest number: 18F4
Signing time: Sat 12 Apr 2025 17:17:47 +0000
Manifest this update: Sat 12 Apr 2025 17:17:47 +0000
Manifest next update: Sat 19 Apr 2025 17:17:47 +0000
Files and hashes: 1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: Duz7VT47uT8jihqSEyDprjY1u8hQFxmIrqPe3RNbgaU=)
2: 8CB86F5AC21A11EFAB75870CC4F9AE02.roa (hash: WQ5jUHH7wep6BOMSnSWYPD3vNOy/VLawhQ+VNu2qvIc=)
3: E62A9F32CA6611EFAA521732C4F9AE02.roa (hash: vwPT4lr50IGcOZxTvf7JyWM9bGLxcukFrRFH+vh9jsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 17:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2238 (0x8be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Validity
Not Before: Apr 12 17:17:47 2025 GMT
Not After : Apr 19 17:17:47 2025 GMT
Subject: CN=67faa03b-6a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:bb:1a:40:a3:8c:c2:ed:aa:8a:d8:c1:c8:
8e:ff:c4:35:c3:3c:2e:ef:f1:e4:50:1a:12:00:d6:
15:f2:6c:ea:30:1f:22:17:fd:29:28:10:0f:4d:32:
d2:fa:6f:9c:1d:8f:8f:bd:b8:0e:c1:7a:b0:03:ce:
3f:01:ac:97:ad:fa:5e:a9:df:57:78:f3:0b:21:eb:
41:54:6c:f8:f2:ca:d7:ae:b5:c3:45:e8:29:75:3b:
ca:15:c1:bb:81:1f:b8:4e:95:90:af:aa:41:16:5d:
20:d2:d3:e4:74:c8:33:68:d7:14:0c:79:45:c7:bc:
a4:0d:ed:bd:0b:fe:25:b7:e0:b4:da:aa:a3:03:b0:
67:16:23:f5:f4:c2:1f:af:f8:78:c6:7d:ad:8b:95:
b0:bf:c5:14:f8:bf:50:bb:02:66:d1:ea:3a:86:0e:
36:73:77:d9:8a:1f:0e:73:21:fa:22:bb:23:7a:55:
41:ec:66:87:3d:1f:d4:bc:0d:9d:c4:c0:7d:4a:c9:
68:0d:a9:18:e0:9a:6e:fd:8d:e6:b4:49:90:2d:d9:
86:20:00:1e:d3:2f:86:eb:79:f5:6b:5c:25:cb:8e:
ac:9f:32:c0:57:f8:d9:ec:7c:67:bf:ed:a2:5f:12:
61:8d:04:65:3e:43:5e:b6:f9:29:a0:9b:17:92:cc:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:40:56:F4:DD:96:53:BF:E9:EC:AE:8B:D9:A4:81:1F:3E:69:45:B5
X509v3 Authority Key Identifier:
keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:4c:e9:2d:76:16:de:12:b2:f0:87:bc:76:a7:6b:04:28:75:
c5:82:15:5d:27:04:b3:3a:38:0f:6e:6f:8e:fe:81:f3:4e:0d:
ab:47:93:94:ec:77:30:f9:c5:e0:8a:55:e8:a4:ff:27:de:54:
0c:63:a0:71:51:e5:57:00:fd:3d:65:92:f0:c2:dc:ae:13:9e:
a7:b4:12:04:d8:bd:4d:6b:07:78:ff:94:ab:08:a0:75:7f:83:
a3:ce:47:46:c5:65:5a:79:57:8e:b2:55:e4:51:c1:1e:4c:8d:
0a:c7:07:e4:9c:1e:52:82:33:52:1c:09:39:f5:bd:20:d3:ae:
e2:fe:c4:10:d9:d6:11:ca:19:7b:c1:bc:d7:8d:fb:01:b7:54:
d3:43:89:81:9b:2f:4e:4c:b2:65:df:2c:1f:6b:c6:34:c5:74:
c0:a5:22:c2:f4:bd:82:26:54:e6:fe:c5:d9:79:c5:74:e6:c9:
ec:2e:73:ff:15:7f:3e:15:de:3b:50:6a:c7:3c:26:88:06:2b:
21:1f:c3:74:0c:93:c9:7a:9f:8e:64:d9:ed:66:5f:e9:6a:88:
d6:46:49:98:f8:50:f4:84:58:ab:83:47:70:2e:58:25:c4:81:
a4:e0:13:70:2b:c4:1a:20:fe:a4:32:31:fa:9c:0d:e0:50:93:
f1:0a:2d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:59:05 2025 by rpki-client