Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft
File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json)
Hash identifier: VNU8zoJEU29Brimcu7rmA0fXvi9nCk+pPvIs3Y2zUD4=
Subject key identifier: C9:DD:04:05:9C:62:81:9B:0B:23:28:4D:DB:BC:CA:53:E1:5D:B9:F9
Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8
Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8
Certificate serial: 0C96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft
Manifest number: 0C87
Signing time: Sat 12 Apr 2025 18:06:24 +0000
Manifest this update: Sat 12 Apr 2025 18:06:24 +0000
Manifest next update: Sat 19 Apr 2025 18:06:24 +0000
Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: ZJrCWTv90HAwG5+sf4QPvTU2x7r1V9vXvyV0ZutpB1k=)
2: 7A89B302E7E511EFA8BD237AC4F9AE02.roa (hash: UCWjaCqEsXVhT35xitXZIRxEvFr2BDAPH30xrreLvIA=)
3: ACEBFE04E7E511EFBC775C0EC4F9AE02.roa (hash: 0yGPdzFunQ5T02jKLxMdi+Rjr7DQq/Vj6dobHVz6yro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl
rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 18:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3222 (0xc96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8
Validity
Not Before: Apr 12 18:06:24 2025 GMT
Not After : Apr 19 18:06:24 2025 GMT
Subject: CN=67faaba0-a3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:b0:4a:6a:08:96:ef:25:83:5f:c7:af:ab:
e0:f0:9c:0a:a7:f9:68:4e:82:40:fe:59:50:0b:05:
5f:fe:e7:22:ab:ff:3f:82:0a:72:78:f1:a4:3f:89:
2a:ec:03:3d:6b:f8:07:92:ee:15:0f:2e:ea:ac:cc:
8b:da:37:e8:ae:ca:00:2e:e4:86:16:05:f1:6f:79:
af:3f:32:fe:06:de:96:da:8e:e4:99:59:6b:c9:c2:
ff:11:bd:b5:85:f3:2f:0e:ec:81:ea:3c:f4:5b:a2:
b0:45:ab:08:57:d3:4c:c1:cf:a4:d3:3a:56:96:23:
fb:c9:b2:af:00:8a:29:b0:97:3a:42:67:22:ae:00:
8e:12:4d:ae:a6:5e:fd:55:89:5d:14:f0:36:86:5b:
a1:34:d8:6d:a2:9c:67:b8:e7:3a:2a:9d:eb:9f:3b:
07:e9:3b:a2:de:de:1f:9a:13:35:ea:c2:64:b0:e2:
ce:4b:82:83:f1:34:f5:2a:f0:bd:bb:1a:a0:92:d2:
0a:b3:70:09:d0:6d:d6:1a:af:3d:1e:b4:cc:d7:dc:
70:a9:d1:e7:85:53:2e:99:af:04:11:d0:0a:75:e9:
c3:aa:39:ba:cd:74:e3:59:c6:75:ea:5a:6f:af:bd:
c9:25:29:61:d2:cf:a9:c4:81:20:c9:89:6c:fd:21:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DD:04:05:9C:62:81:9B:0B:23:28:4D:DB:BC:CA:53:E1:5D:B9:F9
X509v3 Authority Key Identifier:
keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:bc:0f:c4:e6:ea:17:a3:54:50:c5:b2:d9:2c:5b:49:a6:60:
3c:13:fb:4f:ca:95:f8:a2:37:1e:0a:df:f5:de:eb:72:64:f3:
25:55:cf:1a:97:9b:03:ec:51:2a:08:8a:bb:ff:aa:56:7d:3f:
59:58:7f:50:71:3b:9c:f0:73:c4:67:24:61:c5:f9:82:e0:af:
00:10:2b:5c:ce:b0:83:52:c0:f0:ab:45:09:2b:bd:9f:67:8c:
ce:3a:8d:d2:cb:e6:81:74:1d:fb:3c:ef:f7:0b:13:4d:0d:48:
30:1a:d9:86:43:80:e6:bc:8c:9c:ef:7c:d4:5d:eb:22:cb:66:
26:f6:f7:e6:3d:a3:00:08:15:0b:fa:26:67:a4:54:9b:b8:a0:
ec:64:2f:54:fc:be:4b:43:e5:9b:c6:94:ee:5c:29:08:bb:d8:
a7:8c:9d:95:f9:72:8b:90:42:dd:b3:0e:59:85:35:f6:66:7d:
55:41:d9:f0:12:99:59:b3:f2:8c:72:51:36:be:21:28:7e:7e:
10:08:8b:05:b4:0c:93:51:f8:4e:cb:d3:60:5b:ed:24:92:55:
1c:bb:33:22:58:ac:9f:b9:f4:1c:5b:d8:b2:a6:7f:a6:b8:91:
ed:66:2d:80:53:9f:44:e3:88:37:cd:27:c2:39:89:2b:41:04:
36:ba:6e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:46:04 2025 by rpki-client