Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
File: EouTW4ldrG6Xco__i9w1bokYU-8.mft (raw, json)
Hash identifier: GE3aDWcsckHLTHxrDidRZd8EgEbG1gCcf2BWhVW7/Wk=
Subject key identifier: 28:A0:E8:17:1E:6C:7F:ED:1B:C2:5F:D1:9A:75:D0:87:2A:1A:CF:C5
Authority key identifier: 12:8B:93:5B:89:5D:AC:6E:97:72:8F:FF:8B:DC:35:6E:89:18:53:EF
Certificate issuer: /CN=A91B7709/serialNumber=128B935B895DAC6E97728FFF8BDC356E891853EF
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
Manifest number: 5F
Signing time: Tue 15 Apr 2025 05:49:14 +0000
Manifest this update: Tue 15 Apr 2025 05:49:14 +0000
Manifest next update: Tue 22 Apr 2025 05:49:14 +0000
Files and hashes: 1: EouTW4ldrG6Xco__i9w1bokYU-8.crl (hash: 3cbtvZ8zUHmT7d3TO6cwCQu39ymfMUOP0Ee6xAgdtno=)
2: 06F9E5368BB711EFB4630B30C4F9AE02.roa (hash: wAMyns8JAwyol9+kP2W1kb8SKSEmxeqxcrfUrnMoAjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.crl
rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Apr 2025 05:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7709, serialNumber=128B935B895DAC6E97728FFF8BDC356E891853EF
Validity
Not Before: Apr 15 05:49:14 2025 GMT
Not After : Apr 22 05:49:14 2025 GMT
Subject: CN=67fdf35a-8820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b8:58:e0:29:e3:dd:7e:90:45:fe:e7:1c:82:
2c:e3:a8:d9:15:fe:8b:61:68:51:ae:87:ce:be:a6:
75:cd:84:ef:b3:63:39:95:0d:fe:41:2a:8e:76:70:
c8:a7:6d:b4:c5:eb:9d:b3:1c:af:89:ab:d3:cc:3a:
48:6c:0d:79:97:02:11:62:90:6d:0a:f5:1d:16:74:
89:fc:42:ed:92:15:d3:de:47:63:d3:53:f3:aa:ef:
29:9f:44:d8:b2:c5:56:09:19:81:8f:de:51:04:d6:
d8:ad:02:e4:68:08:71:b2:c8:bb:12:53:80:bd:ee:
b9:1b:36:c7:95:11:d4:a5:36:a1:97:c6:99:33:90:
3d:3f:25:ec:bd:a7:09:08:5a:5a:d0:73:4c:1e:27:
1f:da:6d:34:47:ad:ff:e5:4d:d0:2e:5c:60:22:8c:
db:db:4d:5f:0e:c2:95:e6:69:c0:de:ff:9e:78:55:
4d:fb:8e:68:17:6f:ff:d9:40:1f:45:d4:69:95:d6:
2f:2d:ef:d8:f4:2d:2e:0d:c2:b5:e9:a9:45:61:c3:
c8:fa:14:b5:e9:8f:76:47:30:b4:32:27:ac:d4:84:
e5:ca:2f:48:2a:2e:d4:22:7a:bb:f3:ab:0b:5e:42:
d5:b8:32:bf:67:b3:2f:a3:f2:bf:70:8d:6f:57:5e:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A0:E8:17:1E:6C:7F:ED:1B:C2:5F:D1:9A:75:D0:87:2A:1A:CF:C5
X509v3 Authority Key Identifier:
keyid:12:8B:93:5B:89:5D:AC:6E:97:72:8F:FF:8B:DC:35:6E:89:18:53:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:fb:e4:1e:0f:10:47:78:7d:d5:04:03:a5:7d:48:8a:25:65:
3f:d8:50:60:3e:0d:50:e6:1e:1a:1b:0e:11:70:5b:dd:ee:ca:
10:dd:ae:86:55:d6:f3:c5:ee:50:c4:43:d3:42:6a:fd:4e:e6:
5f:7d:19:66:dc:67:37:30:c4:6d:4e:eb:71:bb:04:81:c4:a9:
0b:f8:81:04:e0:8a:89:59:e8:50:62:29:52:f4:37:b4:6b:4c:
b1:f3:5b:18:7f:8f:98:ec:17:5d:0c:3c:1c:fe:ac:1d:2e:c0:
a0:7c:78:19:56:e1:5e:06:68:f3:0d:33:b2:d1:5e:17:6d:fb:
ba:c2:5b:b5:8c:e7:7e:e3:4e:7e:3f:35:db:fd:81:e4:ae:fa:
9a:ef:6f:37:00:38:61:9c:d5:ba:e1:59:e4:ed:7d:ac:8d:0a:
33:b5:ed:5e:dd:31:a1:d5:07:a1:ad:f6:74:f4:e3:f4:2c:8b:
fe:0b:76:4c:bb:05:4c:c8:bb:20:3f:fa:df:54:fc:48:de:41:
90:9e:61:f1:38:c6:c8:7d:e6:43:c8:59:d6:fb:f8:26:38:4a:
09:08:8a:c9:c3:d6:b2:88:cf:48:0c:eb:e3:49:2f:5c:b7:74:
eb:ca:42:a6:c7:df:a0:fb:51:b6:ce:41:38:65:da:57:12:02:
a5:ba:0d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:23:56 2025 by rpki-client