Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
File: BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft (raw, json)
Hash identifier: P6HNbwoffSXSX3N6m88rfSmwUutrJNW281i1Anu9AkQ=
Subject key identifier: 99:AB:E8:51:4F:7A:B3:46:86:48:AE:74:C7:67:40:88:B2:0A:62:1B
Authority key identifier: 06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
Certificate issuer: /CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Certificate serial: DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
Manifest number: D3
Signing time: Sun 13 Apr 2025 04:31:25 +0000
Manifest this update: Sun 13 Apr 2025 04:31:25 +0000
Manifest next update: Sun 20 Apr 2025 04:31:25 +0000
Files and hashes: 1: BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl (hash: rInbDSJV5kWPJSyqZL3rHRHAXFLakbbvjr0BNrg9eis=)
2: 81D7045C0F5511EFA55FC44EC4F9AE02.roa (hash: /wi8tgvE4O56j6aStHMPLW1czedgDux+3mSXV2uL2Wc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl
rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 04:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DD1, serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Validity
Not Before: Apr 13 04:31:25 2025 GMT
Not After : Apr 20 04:31:25 2025 GMT
Subject: CN=67fb3e1d-71f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:07:24:9c:39:32:e1:07:09:cb:ac:5d:7c:
c4:a4:d8:90:b8:ae:03:b4:20:ad:fb:57:8f:9f:d4:
6b:6c:0e:57:12:80:80:fd:95:35:d5:2a:08:6d:b6:
b3:4a:c6:67:9b:a4:6c:f4:68:ba:3e:61:94:6f:0a:
07:07:5a:dd:16:fb:b1:b1:89:3c:8b:fe:c5:bf:03:
32:cf:b0:ef:df:34:3a:af:d3:a2:9d:07:3e:ad:10:
f8:de:ef:4b:9a:cf:14:52:1e:31:aa:51:f6:02:57:
eb:de:56:45:eb:74:a3:ca:be:be:11:05:da:8a:48:
17:10:ff:7d:f7:3a:b6:ec:77:7e:36:36:8c:c3:8e:
39:23:76:c9:87:83:56:90:00:9c:c3:bc:09:70:c0:
5c:d0:22:88:45:7f:59:77:7d:f9:b9:26:39:5a:79:
ad:25:bb:b4:1e:8c:40:28:9d:4f:c3:d7:2f:6c:6b:
e6:b4:a0:9b:49:4a:95:25:c4:69:d4:18:09:fd:d9:
42:6b:29:59:77:36:61:30:aa:d8:69:7c:eb:62:e0:
32:8b:62:7c:70:8e:2b:23:c7:72:d4:09:b6:2a:29:
18:60:7b:c0:b5:2a:75:c4:34:eb:3a:1f:71:a7:2d:
b2:32:94:f5:53:bf:ad:f3:c9:9d:30:b6:07:b1:eb:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AB:E8:51:4F:7A:B3:46:86:48:AE:74:C7:67:40:88:B2:0A:62:1B
X509v3 Authority Key Identifier:
keyid:06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:94:12:d3:46:bb:09:4b:2b:34:db:e2:9a:14:94:9d:95:4c:
4e:d5:7d:0c:14:68:5d:52:01:4c:5d:ed:cf:0c:9a:75:e3:5d:
e9:5c:80:ef:2c:ff:d5:1a:68:d6:24:4c:c1:e3:94:ed:17:b8:
8b:2f:7b:a9:b0:b7:7f:65:2e:8e:b6:4b:5a:09:1d:e7:0f:70:
b3:e3:80:a9:22:df:c6:bd:bf:b2:e0:5a:a3:b2:66:bd:d0:a7:
94:42:b9:6c:8b:26:e6:3e:06:1a:56:1d:de:c7:fc:03:d2:ce:
a3:1e:1b:74:a6:c4:63:75:cd:97:2d:5c:39:3d:bd:a4:24:5e:
76:6b:27:75:7b:63:79:f8:d8:65:d9:98:6e:86:66:25:53:15:
6f:06:97:83:05:b3:0a:44:bd:65:27:c9:dd:52:bb:15:2f:31:
3d:42:33:b4:49:e2:58:23:9d:8c:ae:b7:03:23:44:58:60:18:
95:66:47:6a:31:7d:c0:9a:ae:a2:70:d0:c5:68:75:8b:db:50:
ac:c9:13:69:ac:12:4d:34:8c:88:e9:6b:4a:76:fc:0b:e0:44:
ec:8a:bf:41:25:36:ae:a4:2e:2d:5a:92:e6:d7:45:3e:9c:4a:
ce:15:2d:60:ed:5f:10:a2:36:a5:68:bd:04:10:b6:3d:16:ea:
94:05:f0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:45:25 2025 by rpki-client