Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
File: AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft (raw, json)
Hash identifier: yyDpBo+HVDoWcV/mGNl+52zwgxtoJne8VJCzjsYcFmI=
Subject key identifier: 1C:F5:61:76:25:8E:94:1E:2A:CB:90:0B:3E:F0:A9:35:43:A6:07:FC
Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27
Certificate issuer: /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
Manifest number: 026C
Signing time: Wed 09 Apr 2025 01:22:05 +0000
Manifest this update: Wed 09 Apr 2025 01:22:04 +0000
Manifest next update: Wed 16 Apr 2025 01:22:04 +0000
Files and hashes: 1: AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl (hash: DlgZ1L5thgqfZQwhJYZ7nKpPwPjT/faLhkPuYlUDOzg=)
2: CBD4FE1208B611EDACE57065C4F9AE02.roa (hash: WXESl+cDjvowOeUJyXhiCBItPAjmmkM/CbjCul3Q7bU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl
rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 01:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5CB1
Validity
Not Before: Apr 9 01:22:04 2025 GMT
Not After : Apr 16 01:22:04 2025 GMT
Subject: CN=67f5cbbd-1b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:41:f7:a6:a3:b8:93:e9:dc:1c:71:cd:60:
30:76:b6:2f:76:e9:53:c0:d2:52:8b:e6:a5:2b:cf:
c8:55:7a:e6:17:98:13:6f:ae:cf:4b:d3:0f:57:4b:
88:99:0b:01:be:74:b6:f4:b2:d1:cd:8b:66:25:e0:
93:ad:f9:e8:43:aa:79:c2:27:92:6f:07:c7:d6:bb:
0f:0b:e0:ad:3b:21:83:a2:54:67:c5:f1:f3:25:7b:
0f:3c:c0:be:d1:a2:92:19:37:e4:2b:ce:35:7c:4f:
31:c1:e1:1b:fa:8a:2e:ef:cf:a3:7b:02:ed:0c:d4:
b7:4c:5a:f9:52:a0:f2:32:ef:eb:63:b5:20:b4:2f:
c3:37:c6:1c:8c:0d:14:7b:ac:e9:ec:a9:0a:f6:9b:
e0:f6:ee:af:3c:58:46:3d:c4:c0:99:74:b2:b5:93:
a4:0a:da:0c:4e:26:c3:98:74:cd:76:5f:3d:23:a2:
b8:72:0e:af:90:31:da:e0:94:6b:47:d0:ef:f8:ab:
b7:e7:5e:57:64:73:e2:4d:97:bf:b9:21:29:8e:62:
61:70:f6:31:ae:43:2f:d6:8b:49:31:cd:95:3c:c7:
7f:2e:ce:42:73:2f:b8:7c:96:2a:10:46:54:96:ca:
15:42:4c:48:54:73:25:93:0a:4c:07:17:67:2a:30:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F5:61:76:25:8E:94:1E:2A:CB:90:0B:3E:F0:A9:35:43:A6:07:FC
X509v3 Authority Key Identifier:
keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:77:0e:74:5c:b4:01:a4:ac:23:2d:81:59:3e:86:00:6e:6b:
25:bc:a9:d3:e1:33:52:33:ee:be:ac:cc:0d:f1:8d:fb:57:65:
dc:e0:76:78:af:41:41:28:f4:ef:40:4d:7f:a0:d1:7e:6c:4a:
19:10:de:c0:38:28:3d:d1:42:fb:e4:77:e6:3a:6f:bc:76:5e:
b1:6b:81:2d:fd:8c:77:58:68:06:c4:46:ea:88:d1:a1:e8:82:
71:c9:d6:66:e1:47:77:57:13:3b:bc:7a:a7:1e:80:d7:9e:a7:
33:fe:9b:25:f9:3d:2d:83:2e:27:3b:e5:f0:a8:f8:eb:ab:26:
0d:a5:4f:39:9e:f9:e5:c5:99:af:33:ff:bf:ee:df:a7:d7:cd:
9a:44:57:db:04:d3:38:94:d1:05:f7:bf:bd:5a:3b:ea:d5:dc:
71:5f:de:f3:34:55:c6:14:91:f0:70:1e:6a:7f:51:8c:ad:f8:
1c:c2:a4:ae:8d:ac:a2:4a:0b:e9:2d:04:47:4f:e5:34:68:cf:
a2:c6:3c:41:5b:ee:1a:11:55:c0:0f:23:8d:dd:39:b2:0e:79:
eb:f9:d2:d0:c4:57:49:1b:67:6b:7e:80:b1:ec:f4:f9:35:10:
1e:50:8e:e1:c0:39:02:d6:48:21:27:f4:62:6a:73:90:70:5e:
f2:60:d3:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVDQjExMTAvBgNVBAUTKDAwQTEwMDgzRkRCMDE2QzMwM0Q0RTYxOUVDNjFBQjY1
ODM4MDBEMjcwHhcNMjUwNDA5MDEyMjA0WhcNMjUwNDE2MDEyMjA0WjAYMRYwFAYD
VQQDEw02N2Y1Y2JiZC0xYjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwrxB96ajuJPp3BxxzWAwdrYvdulTwNJSi+alK8/IVXrmF5gTb67PS9MPV0uI
mQsBvnS29LLRzYtmJeCTrfnoQ6p5wieSbwfH1rsPC+CtOyGDolRnxfHzJXsPPMC+
0aKSGTfkK841fE8xweEb+oou78+jewLtDNS3TFr5UqDyMu/rY7UgtC/DN8YcjA0U
e6zp7KkK9pvg9u6vPFhGPcTAmXSytZOkCtoMTibDmHTNdl89I6K4cg6vkDHa4JRr
R9Dv+Ku3515XZHPiTZe/uSEpjmJhcPYxrkMv1otJMc2VPMd/Ls5Ccy+4fJYqEEZU
lsoVQkxIVHMlkwpMBxdnKjANmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBz1YXYl
jpQeKsuQCz7wqTVDpgf8MB8GA1UdIwQYMBaAFAChAIP9sBbDA9TmGexhq2WDgA0n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUNCMS8xMTY3MkMyMDA3
RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0ZzTUQxT1laN0dHclpZT0FE
U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FLRUFnXzJ3RnNNRDFPWVo3R0dyWllPQURTYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUNCMS8xMTY3MkMyMDA3RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0Zz
TUQxT1laN0dHclpZT0FEU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpdw50XLQBpKwjLYFZPoYAbmslvKnT4TNSM+6+rMwN8Y37V2Xc4HZ4
r0FBKPTvQE1/oNF+bEoZEN7AOCg90UL75HfmOm+8dl6xa4Et/Yx3WGgGxEbqiNGh
6IJxydZm4Ud3VxM7vHqnHoDXnqcz/psl+T0tgy4nO+XwqPjrqyYNpU85nvnlxZmv
M/+/7t+n182aRFfbBNM4lNEF97+9Wjvq1dxxX97zNFXGFJHwcB5qf1GMrfgcwqSu
jayiSgvpLQRHT+U0aM+ixjxBW+4aEVXADyON3TmyDnnr+dLQxFdJG2drfoCx7PT5
NRAeUI7hwDkC1kghJ/RianOQcF7yYNNX
-----END CERTIFICATE-----
Generated at Fri Apr 11 05:26:18 2025 by rpki-client