Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
File: TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json)
Hash identifier: B0agSP7Agryltcyp/qmvN/30aQaL2/ncnBzR5+CkM8E=
Subject key identifier: 92:83:53:D0:34:16:83:87:D6:2A:70:B0:D7:61:EC:6E:31:F3:49:80
Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E
Certificate issuer: /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E
Certificate serial: 099C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
Manifest number: 0997
Signing time: Tue 08 Apr 2025 19:57:11 +0000
Manifest this update: Tue 08 Apr 2025 19:57:11 +0000
Manifest next update: Tue 15 Apr 2025 19:57:11 +0000
Files and hashes: 1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: wmwb3+7n35c4pggwt+0DP8kvyKgFxIx0jJ4+rO1+1Io=)
2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: uCKaTzHSq8roKOND3QIAWtaboT0I2xNDmaN9cosgyvs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl
rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 19:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2460 (0x99c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C19F7
Validity
Not Before: Apr 8 19:57:11 2025 GMT
Not After : Apr 15 19:57:11 2025 GMT
Subject: CN=67f57f97-a521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:61:95:5d:66:2f:25:95:02:82:b6:d0:2b:
44:2e:bf:9e:91:c8:57:4c:54:b4:94:94:a4:bb:70:
96:88:4e:a4:57:e2:6f:9b:f4:53:98:e6:31:9a:72:
da:11:f2:68:dd:ae:a4:ef:62:5f:87:d9:2b:09:93:
e6:17:61:13:a1:47:9e:3a:47:43:07:3d:de:a2:73:
37:81:d5:cb:23:7a:32:e5:ce:d9:dd:a9:ea:12:7c:
5c:7c:95:fc:ee:8b:46:60:f0:bb:13:c1:69:70:61:
9e:0b:be:66:1b:29:ce:65:9d:22:55:97:3f:68:76:
ae:1e:f3:08:03:8d:4f:7d:b3:76:cb:46:81:c8:b4:
4e:db:94:71:78:3f:ea:9a:ac:fc:bd:b0:7e:0b:11:
e8:cd:88:00:7d:11:e1:cc:fb:8d:5d:83:33:85:f6:
d8:94:b5:63:e5:d7:7e:4f:a9:0c:b8:4b:b9:24:73:
da:f1:54:0f:1f:f2:bf:3f:3b:15:ac:63:c7:f8:30:
a1:28:f4:ed:5e:24:c2:4c:db:40:50:f2:bf:c6:dc:
63:fb:e8:2f:d2:b2:1f:5d:53:ba:04:a3:83:64:56:
1a:d3:89:a1:4a:7c:ba:8c:28:a3:14:78:3f:ca:d0:
ee:44:32:4d:b1:9c:7b:5d:bc:14:86:e8:12:75:63:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:83:53:D0:34:16:83:87:D6:2A:70:B0:D7:61:EC:6E:31:F3:49:80
X509v3 Authority Key Identifier:
keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4b:58:14:1b:9c:cf:6a:35:36:e3:ae:a7:52:43:c6:e5:a1:
ed:3d:50:89:9c:36:34:37:3e:80:3a:12:51:a7:6c:61:a4:62:
03:6b:e6:4a:48:a5:af:8f:f4:e1:91:65:42:ff:10:e7:36:46:
c3:0b:2b:e1:c9:78:2c:8f:da:8c:be:cf:f1:9f:bb:7a:17:12:
ea:52:57:f7:95:b8:ed:d0:f1:8a:87:90:af:97:ca:fa:6f:38:
70:e6:11:6e:85:27:7e:28:1b:d1:2b:c8:74:fb:f8:96:82:cf:
53:70:bb:34:8c:e5:16:da:d8:a7:7c:33:02:5a:d7:46:a0:84:
83:ad:21:e8:6a:3e:22:fc:2e:b1:cc:d4:f1:4b:33:5e:16:d9:
a2:f8:02:34:83:94:4b:e6:8e:94:20:57:14:e9:13:dc:b3:50:
6a:a6:53:db:01:29:c3:34:26:ca:a8:8b:db:bc:80:55:b7:36:
da:84:8d:14:72:6c:fd:8e:f1:12:8a:f7:10:35:08:91:93:e1:
58:4e:7a:61:72:2a:c9:80:28:32:36:74:2f:70:73:9e:e7:05:
1a:91:2e:3c:66:71:2e:f2:1c:e4:69:7a:71:c3:74:6a:0b:c7:
86:6c:61:00:eb:49:c9:db:0a:ca:18:02:5a:2b:b6:10:ea:00:
56:57:c0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:22:31 2025 by rpki-client