Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json)
Hash identifier: pEV3GiD1Xze0PHpYynOG3fAjgqpjN8WKUzOwJz9kJl4=
Subject key identifier: 4E:5B:D5:34:18:AE:3C:D1:AA:7B:97:26:10:D7:B3:70:88:3F:91:1F
Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
Manifest number: F4
Signing time: Fri 11 Apr 2025 04:37:46 +0000
Manifest this update: Fri 11 Apr 2025 04:37:46 +0000
Manifest next update: Fri 18 Apr 2025 04:37:46 +0000
Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: IyudFMatQW9bZ6SpabCughorUQqAM+HrRVuSy/OiCh8=)
2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: oOShpLLwZ53WfwV7OnNp44ZUZdSDR6asOa981HQ2+Vc=)
3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: 007pZaHi7dzfk1B80jPKtGC0xcoQZrmeiL6AHZuwDA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Apr 2025 04:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Validity
Not Before: Apr 11 04:37:46 2025 GMT
Not After : Apr 18 04:37:46 2025 GMT
Subject: CN=67f89c9a-9e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:a2:db:06:bf:ac:e1:9a:70:87:41:a1:8a:
c8:ea:24:ca:b5:9d:13:bf:09:8b:0a:98:55:b2:e4:
9c:6d:9b:c2:7f:3f:6d:3a:ad:90:30:c8:4b:63:c9:
ee:cd:b0:05:8c:f5:0d:d4:12:d5:8c:b3:c1:9a:a4:
c5:0e:ed:7e:d5:15:95:e9:e2:68:eb:9b:c9:0e:46:
64:e4:0f:78:e2:9a:d9:02:81:0f:0a:00:c7:ba:46:
04:fc:a0:55:46:4e:cc:48:ca:33:24:3b:53:32:2c:
0f:c5:cb:b8:70:be:8f:e0:33:3b:6e:cb:ee:34:eb:
06:73:7f:65:94:6e:04:bc:a9:3f:74:66:33:cf:ae:
b9:bc:b9:c1:88:b5:5f:78:25:ae:23:09:45:5d:68:
7a:07:87:e1:94:d2:3c:b2:74:86:6a:f5:ce:5a:8a:
f2:5f:19:cc:09:c8:d4:19:86:62:39:92:67:f6:6e:
8b:ba:21:7c:91:e5:a8:1b:35:b3:73:2e:a7:6d:3c:
91:78:98:aa:c3:bf:2b:5c:5a:4b:2c:09:7e:bb:42:
54:8b:d2:58:8a:f6:39:3e:cd:66:cc:61:dd:25:56:
0e:bc:34:3a:b9:18:37:66:c7:64:dd:8a:8c:c5:71:
3b:9f:97:f7:24:8a:d7:38:66:93:a2:43:ee:eb:c2:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5B:D5:34:18:AE:3C:D1:AA:7B:97:26:10:D7:B3:70:88:3F:91:1F
X509v3 Authority Key Identifier:
keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4b:75:22:5b:45:45:a5:c9:60:4b:db:21:fa:28:de:1b:9e:
5f:28:35:bd:bf:02:c5:0d:bc:50:40:86:82:dc:35:1c:8a:0c:
d2:5b:29:3b:7a:11:42:3e:6b:98:06:6f:8a:80:e3:67:85:d0:
31:a3:d2:06:a8:06:e6:57:4b:e0:dc:71:01:2c:81:d2:d7:a1:
78:e6:20:57:d7:7b:ac:84:c6:1b:fa:ac:14:77:fa:0d:d4:4a:
ea:fd:a1:ec:e2:58:fa:6c:95:dc:d9:8c:d1:18:bb:2b:0d:91:
a3:77:5a:87:1a:00:3e:38:bc:ce:e6:e9:8c:fd:92:6c:63:46:
22:e5:7f:4e:42:d0:f8:68:00:46:8b:a4:5e:3e:1b:03:4f:88:
09:bc:e6:82:a7:e8:87:c7:bb:88:7f:4b:c2:92:57:c8:cc:6c:
b0:c7:b6:a9:b3:43:aa:7b:e6:da:96:ca:55:90:d1:c8:b2:5a:
78:ac:2b:76:c5:bc:8d:26:c5:48:4a:57:3e:69:9c:b1:03:c2:
af:bf:53:5f:9a:78:01:49:f7:5e:03:19:6a:5a:01:1c:d0:52:
70:4a:c9:86:9a:6f:0e:bc:23:ac:13:52:c6:10:c2:51:cd:5e:
11:e6:63:78:2a:4d:8f:b0:cd:32:56:13:a4:e9:c2:67:e8:d0:
7f:10:c7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:11:54 2025 by rpki-client