Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
File: z9EY2pb_YF-93yeqSqAmO072edo.mft (raw, json)
Hash identifier: NyLsDTxLz8ZseDH23D1PBWGOIatnQe9xtznOSSnj3HA=
Subject key identifier: D8:CC:5A:5F:23:68:E8:F7:13:96:DA:9C:65:DC:B8:84:22:5C:1D:3B
Authority key identifier: CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA
Certificate issuer: /CN=A91C9E82/serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
Manifest number: 011D
Signing time: Tue 15 Apr 2025 03:38:09 +0000
Manifest this update: Tue 15 Apr 2025 03:38:09 +0000
Manifest next update: Tue 22 Apr 2025 03:38:09 +0000
Files and hashes: 1: z9EY2pb_YF-93yeqSqAmO072edo.crl (hash: W+1HbQVnq5IPwSuXe0FWpoWgVRvNHAktVOUejEQH/Ac=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl
rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Apr 2025 03:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9E82, serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA
Validity
Not Before: Apr 15 03:38:09 2025 GMT
Not After : Apr 22 03:38:09 2025 GMT
Subject: CN=67fdd4a1-8998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:39:d0:fd:b0:c0:56:38:0e:bb:31:e4:61:
ed:c0:a7:01:79:15:17:96:9b:1e:4f:31:a7:b7:fc:
cd:b0:fb:49:42:a3:25:b5:a8:73:be:5b:7b:02:8c:
9d:9d:5a:58:e7:ca:30:19:e9:18:08:c3:09:61:7f:
df:0c:9d:53:77:31:8a:00:ae:45:a7:d6:09:a9:1b:
86:e3:db:4c:0b:72:f2:23:e1:19:7b:84:12:5c:d7:
b8:43:cd:eb:7c:f4:3f:55:d3:8d:80:34:77:95:a9:
4f:00:c5:05:db:b4:36:7e:3f:54:33:cb:11:fc:35:
14:34:4f:72:1b:e8:e0:d3:7d:bc:dd:eb:16:1c:c6:
18:4e:bf:3a:89:b0:01:45:84:d2:7b:aa:ea:38:80:
bc:98:b9:8f:42:2d:d9:dd:ca:cd:92:46:05:77:dc:
a2:d9:f6:08:53:90:db:89:c3:63:8c:98:39:d2:32:
58:80:b2:1b:76:79:38:38:7b:72:f4:70:8d:69:a2:
8d:53:6e:e4:40:ac:5f:e4:58:66:0b:62:57:c3:42:
03:df:85:a5:e6:46:59:8d:8f:27:17:d1:44:44:fa:
04:2f:37:b9:7a:e0:dd:3b:db:f5:f1:71:a3:27:ee:
9d:33:6b:34:f2:7f:3f:f2:5d:42:26:58:69:d4:39:
8e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CC:5A:5F:23:68:E8:F7:13:96:DA:9C:65:DC:B8:84:22:5C:1D:3B
X509v3 Authority Key Identifier:
keyid:CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6a:6c:06:86:49:d0:0d:30:15:b6:3b:c9:a7:52:89:b3:a0:
5c:23:f3:55:dc:8d:8c:33:32:da:9e:3c:80:ff:e0:69:be:e4:
01:de:88:c9:ae:30:3a:40:6a:eb:47:a2:f4:00:b3:05:b0:92:
58:3e:a9:8d:cc:8c:8a:5d:f9:5d:14:c4:36:dc:f9:d0:ea:2c:
43:d8:54:1f:1f:77:3b:8e:99:f8:e0:ca:61:c6:c6:da:35:29:
79:4e:91:41:a5:2d:0b:ac:7f:5f:99:75:e2:82:af:0a:40:e3:
9c:9f:32:bd:2a:b3:4b:41:f2:1a:39:0c:27:94:f3:76:c3:65:
fc:0c:fb:e9:42:b4:4b:d7:8f:0d:58:c2:9b:65:72:ed:db:41:
11:19:bd:c1:c3:bf:05:58:77:a2:3e:3e:21:23:f7:85:5b:72:
47:c3:31:a2:a6:3e:b9:00:42:2b:95:34:f3:18:ba:7e:ea:06:
76:11:94:56:67:c9:4f:15:d8:f8:5f:a1:8d:b1:aa:9a:c7:2b:
8c:f8:98:e0:10:07:10:4b:5c:a6:e9:7e:06:bb:38:96:5f:a0:
32:f8:eb:4b:c1:29:f9:44:b8:5c:04:27:65:6a:fc:bf:82:ec:
67:93:0c:59:43:6c:a4:78:06:2a:6c:0e:d0:61:b0:ee:8f:f1:
84:ea:8b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:46:37 2025 by rpki-client