Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft
File: CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft (raw, json)
Hash identifier: Fy0ZH3y1EbkJJHEq4A8As0K42GpMccG90t6r9/+DCFM=
Subject key identifier: A7:8E:83:92:A2:CA:E6:99:13:3A:DE:09:F9:45:50:85:D2:E7:06:11
Authority key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5
Certificate issuer: /CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5
Certificate serial: 0BEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft
Manifest number: 1281
Signing time: Sat 12 Apr 2025 18:29:12 +0000
Manifest this update: Sat 12 Apr 2025 18:29:11 +0000
Manifest next update: Sat 19 Apr 2025 18:29:11 +0000
Files and hashes: 1: CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl (hash: Pj0PEQO9qfZ/efq02Qb91AZ5/Ba7jJA6jCP19Fx1yBA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl
rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 18:29:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3052 (0xbec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C612E, serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5
Validity
Not Before: Apr 12 18:29:11 2025 GMT
Not After : Apr 19 18:29:11 2025 GMT
Subject: CN=67fab0f8-1244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c5:55:ee:17:76:92:ea:06:10:e3:c8:d6:c2:
f5:f5:3d:89:c1:6b:d4:c9:6e:37:fe:a6:ab:d8:ad:
e4:05:c8:22:c8:8a:a2:37:eb:ce:00:a6:d7:95:10:
07:5b:7b:3f:15:9f:cb:83:bd:ec:44:0e:54:4f:84:
c4:7e:fd:bc:4c:61:2a:fd:d3:c7:d4:63:3f:4e:b7:
03:ab:02:e4:0e:21:cf:a3:cf:2e:5d:bd:4f:34:56:
5b:35:e1:b0:13:e7:05:38:dc:d2:ab:15:c8:ff:da:
65:2e:6a:e6:08:0b:f2:a6:91:a6:d6:32:06:9e:19:
ae:dc:b0:dd:11:b2:a0:2e:30:cf:b2:dc:85:e1:d8:
10:37:12:ee:fe:cb:07:04:ed:37:53:be:c0:a0:e6:
45:18:28:0e:be:6b:72:9f:40:8f:90:dd:16:ac:8a:
2f:26:30:f3:cc:d1:c4:b6:07:b8:fe:21:7e:0c:d7:
ce:81:02:50:44:0d:2f:a6:86:7f:9b:1a:2b:73:56:
88:f7:1c:a8:e7:f1:ce:02:8c:b0:d0:f0:d6:71:b2:
dc:e9:ba:6f:9f:40:7c:c2:72:bd:dd:3c:11:36:0a:
15:f9:b9:c1:d1:9c:eb:0c:ed:c1:fa:20:15:c4:91:
ef:21:49:76:dc:8d:7c:37:a4:07:eb:5b:84:51:10:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8E:83:92:A2:CA:E6:99:13:3A:DE:09:F9:45:50:85:D2:E7:06:11
X509v3 Authority Key Identifier:
keyid:09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:64:8f:ba:ef:84:ee:3d:51:37:d1:d5:53:92:82:9b:94:4d:
a7:35:8a:37:c3:e6:c5:08:3e:8d:e1:9d:96:b6:d4:4d:7f:2d:
ed:92:62:f7:0d:b5:a2:af:21:10:a6:c1:e8:67:5f:63:07:1f:
60:55:7a:bd:fb:27:c4:5c:aa:39:e5:4f:bb:d1:e6:de:5f:dc:
4a:72:fa:4e:72:c1:dd:73:85:23:2c:78:dc:2b:7e:af:b6:06:
61:4f:e3:0d:ca:ad:89:7e:10:59:c8:be:b2:72:97:a0:d4:47:
0e:58:9d:a0:87:1c:0f:e2:fc:23:10:e5:72:91:91:eb:23:02:
35:7a:f8:b0:5e:11:fc:bb:c8:0b:e3:6b:d5:c3:14:ee:20:a8:
27:3d:17:25:5b:0b:c9:ce:5c:87:f5:c5:95:7a:6a:0d:6c:20:
e7:3a:a9:04:8d:d8:b2:a5:f6:6d:8b:10:6f:80:d0:47:d5:79:
d3:f9:89:48:48:38:1d:c8:5d:be:c8:9a:ff:9b:0b:67:55:aa:
f6:3c:22:d4:5a:d0:1c:2d:d6:43:f5:06:45:53:d1:01:cc:7e:
52:0a:90:1d:e0:4d:0c:77:c2:ac:da:0c:d9:42:8c:a0:bf:1d:
50:8c:73:7b:ea:b7:1a:1c:36:5b:75:9d:d5:f7:b6:b2:32:c0:
91:58:4a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:29:20 2025 by rpki-client