Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft
File: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft (raw, json)
Hash identifier: 4yiVslLKhs+HPaLN77Zd6YuQ8x8R4DAXH7q+1xDCoio=
Subject key identifier: 61:F2:27:DF:F0:99:D7:5D:B8:5E:E8:55:60:B5:E1:95:E7:42:0F:4F
Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C
Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C
Certificate serial: 0491
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft
Manifest number: 048C
Signing time: Wed 16 Apr 2025 23:40:17 +0000
Manifest this update: Wed 16 Apr 2025 23:40:16 +0000
Manifest next update: Wed 23 Apr 2025 23:40:16 +0000
Files and hashes: 1: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl (hash: 6jmup8wU6z5Fjw5YfcXj3Pwn0aOFRdCoM9hGe+FjE8c=)
2: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (hash: +rLDpG6E4AF0Dcxf7o8iMswR6KeKAMAGKwbYTVWTRnM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl
rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Apr 2025 23:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1169 (0x491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3ABA, serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C
Validity
Not Before: Apr 16 23:40:16 2025 GMT
Not After : Apr 23 23:40:16 2025 GMT
Subject: CN=68003fe1-2e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:24:67:d1:b5:cf:87:ee:95:c4:22:8a:59:
40:54:b6:74:96:9c:82:06:f4:2c:22:35:ac:03:b0:
66:2b:52:55:46:be:ad:fb:c8:e7:e6:98:5d:0f:1c:
9b:83:e4:0b:8e:8c:c2:0d:65:52:cc:38:56:f9:ea:
13:3a:05:9a:a4:5e:ad:b7:7c:79:41:c9:c2:c1:37:
7c:5e:4a:39:ed:61:28:e8:5e:46:30:5d:62:5f:ca:
61:a5:5b:ce:a3:8f:50:b3:d6:3c:82:27:9d:7c:fb:
7a:f6:cd:b5:66:bb:2b:8c:96:1b:7e:c5:54:55:9e:
9b:1f:a0:17:b4:24:5e:83:54:cb:52:c2:c7:2d:39:
36:57:7c:14:49:e3:26:e1:e6:3a:6e:10:bf:c8:79:
4f:36:76:d3:92:86:5e:c8:23:9c:fd:6d:ad:91:36:
4d:a6:2b:e6:0b:39:56:09:0b:74:6c:2d:b3:cd:43:
7e:1c:95:62:15:d5:01:8d:10:86:01:9d:95:5c:8c:
5a:da:69:cd:a8:aa:c0:bc:6e:cf:f9:dd:3f:79:e8:
53:a4:f0:87:d7:09:31:55:a6:92:c2:c6:09:78:cc:
a5:72:93:9d:9d:cf:6f:35:e1:30:74:f7:d5:fd:f0:
89:7c:f5:df:2d:49:d2:40:31:7e:e1:cb:b7:e6:2b:
28:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F2:27:DF:F0:99:D7:5D:B8:5E:E8:55:60:B5:E1:95:E7:42:0F:4F
X509v3 Authority Key Identifier:
keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:87:38:05:cc:33:20:23:8c:77:b2:0f:bd:3d:0a:d6:4f:69:
fb:71:5f:31:ce:ee:cc:72:76:58:ea:b8:db:99:7e:1f:3d:0c:
a4:6d:7a:6a:d3:d8:d5:33:53:e4:e9:fa:8d:e1:db:64:5a:90:
fc:72:7b:4f:e3:1d:eb:ef:fb:e2:20:7f:49:0f:02:b4:ac:4f:
a6:dd:e5:ce:dd:e6:20:49:12:18:2b:5c:b6:00:3b:f0:47:c7:
bd:5f:18:91:2d:b0:1e:8b:c0:fa:75:29:46:90:92:4b:06:88:
50:32:7d:74:42:30:c9:14:d7:0b:ac:32:3b:57:c3:61:5d:be:
aa:c6:58:62:0d:94:ec:7f:04:00:97:c7:f9:32:96:7b:02:9c:
59:e3:ba:d6:ec:a2:51:db:11:62:dd:5f:27:2f:44:59:98:a1:
16:10:6c:0a:cd:cc:de:fa:67:4d:83:57:d8:7b:bf:ea:1d:12:
27:7b:71:d9:dc:7e:1e:55:2b:b8:6e:c1:9c:63:f7:4d:13:67:
f7:04:2f:ba:a8:99:1e:d0:41:83:a9:ea:b4:31:ad:00:1e:3a:
b1:57:c7:c1:94:c1:5d:58:cd:9a:6e:a1:0a:76:be:65:e7:77:
11:c7:80:72:fb:1b:1e:e3:88:63:14:03:9e:30:79:70:fe:f6:
75:e5:ef:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:59:40 2025 by rpki-client