
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
File: J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft (raw, json)
Hash identifier: naQiUx9iWShtDMMX+YiAonml8UVGoxEfzCc9I1ueQPI=
Subject key identifier: A2:FF:A6:C5:3D:40:77:A9:EA:12:E5:24:BD:88:DD:14:D6:D2:04:91
Authority key identifier: 27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B
Certificate issuer: /CN=A91BBCAF/serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
Manifest number: 011E
Signing time: Tue 15 Apr 2025 03:41:27 +0000
Manifest this update: Tue 15 Apr 2025 03:41:26 +0000
Manifest next update: Tue 22 Apr 2025 03:41:26 +0000
Files and hashes: 1: J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl (hash: XPTKRnVcZmsnJtGoWPM84x95r79Nlpn573IXxKlcBnI=)
2: D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa (hash: VxCtnEbF2p63KawOX+Ec2pPAYcngxsY5VpNi8SAFc50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl
rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Apr 2025 03:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBCAF, serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
Validity
Not Before: Apr 15 03:41:26 2025 GMT
Not After : Apr 22 03:41:26 2025 GMT
Subject: CN=67fdd566-ccc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:85:b2:7c:77:b2:64:f8:d2:b6:d7:fa:15:
1e:fc:d2:ce:cb:1a:05:2c:d0:c5:e6:7b:d7:fe:51:
f4:6c:5d:61:a2:24:a6:76:d5:49:6b:f1:22:c9:1d:
93:07:12:d4:31:75:f8:c9:55:dd:2b:d2:dd:7e:f8:
6f:a0:d4:99:c6:e0:69:3d:9d:c1:2d:64:50:41:96:
9c:8c:08:5a:de:c8:3d:6e:04:23:ed:d0:db:d1:a6:
f1:ae:8c:80:f8:ad:20:91:c4:fe:e3:94:df:07:ac:
cc:6e:65:d3:05:13:08:74:e0:d1:d1:62:9f:2a:13:
a3:79:8a:5a:1c:20:7d:77:da:85:49:1a:23:81:b0:
ce:99:b1:bd:69:84:20:d2:0d:da:db:3d:58:00:64:
f7:42:d9:5d:32:75:6e:ff:c5:73:7c:9a:38:74:1c:
cb:49:83:cb:be:8b:91:07:79:b6:54:a3:2f:f5:28:
cd:06:24:94:3c:db:cd:97:d2:ad:eb:1c:32:1c:58:
25:a3:f9:1b:c0:27:7d:2b:f2:fe:c2:6d:ee:6a:30:
f0:6e:78:3c:2e:21:f9:28:a1:be:0c:98:2b:07:71:
c1:5c:76:d4:5b:ad:70:2d:03:75:95:4c:84:50:ea:
04:93:55:e0:70:13:18:a4:e0:18:9d:42:8e:f3:73:
ba:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FF:A6:C5:3D:40:77:A9:EA:12:E5:24:BD:88:DD:14:D6:D2:04:91
X509v3 Authority Key Identifier:
keyid:27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c8:50:84:42:82:dd:2c:b5:bf:b2:89:39:46:4c:30:dc:a2:
c0:42:4c:01:92:4d:aa:94:80:2f:0e:0f:1a:a2:c1:a8:73:46:
d2:52:c2:03:14:8b:0b:50:3f:f4:be:41:a7:66:65:84:5d:ff:
40:00:ae:78:87:f1:e4:d9:fc:58:55:f7:c6:ac:7b:48:77:9a:
86:fb:ad:48:c9:73:70:57:29:39:9a:88:16:ce:e0:ed:2b:bb:
fd:67:bb:2a:f6:5a:87:93:aa:09:89:68:7e:e2:30:bc:0c:13:
8b:ab:f2:89:f5:ba:f7:ae:f5:61:0c:cb:68:81:b5:82:14:07:
fd:c6:21:aa:0a:20:f0:83:6f:9f:55:41:52:1f:16:8c:8e:ea:
fd:e5:3c:b2:d1:c3:9d:55:a8:a3:77:2c:99:d4:7f:62:e8:ea:
91:04:1a:3b:0d:82:c4:a1:c0:49:9e:cf:1b:51:dd:bf:1f:c5:
da:a8:7b:2b:11:f0:15:8a:1f:37:02:c3:ef:4f:f8:cd:18:18:
da:6c:d7:52:c6:55:5c:32:42:6d:1e:79:54:8c:f8:46:51:5c:
9c:0e:9e:bd:aa:a3:f6:8f:9c:9b:93:9a:77:b2:23:72:d3:22:
35:1f:c4:13:ab:5a:2d:77:63:17:ac:05:b2:53:2c:b6:f9:ef:
80:35:3d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:19:17 2025 by rpki-client