Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
File: XnKqfVsdVjLl0z_scvp0M_Sc4po.mft (raw, json)
Hash identifier: 9SwpU7T3W/pWOxWWTl/VqJCRdRGwUWSoiLyZ0MtxznY=
Subject key identifier: 5A:1E:5B:16:BA:6A:F2:4E:7D:21:9D:F1:4C:37:13:04:85:2F:55:65
Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
Certificate issuer: /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
Manifest number: 0136
Signing time: Fri 11 Apr 2025 04:00:59 +0000
Manifest this update: Fri 11 Apr 2025 04:00:58 +0000
Manifest next update: Fri 18 Apr 2025 04:00:58 +0000
Files and hashes: 1: XnKqfVsdVjLl0z_scvp0M_Sc4po.crl (hash: dmXdx6oYkw17AI1LWtgUPn4w/uspxMKtxoHqs8wyvF4=)
2: 36C31E00637111EEA51CA05EC4F9AE02.roa (hash: VRlasPmFdnGQ7jXmsGRiZ9YkkvB4UEQJbRXUpRC4bL8=)
3: 00E626A4A57611EF98285E5FC4F9AE02.roa (hash: ebTeaPrWBlAg+bHK7CkBFu5kiy7GaQn9QlJ0VdT4JzQ=)
4: 98BE8828663D11EE8CBBAE7CC4F9AE02.roa (hash: qOQvPOfqQOexW3Sxvhsqmm5W1KEN72YTFSt5Z0QktXg=)
5: 99341DD6663D11EE8CBBAE7CC4F9AE02.roa (hash: pidH+xtb8OXyN3SlmzLiBUdr0SQho8QbaXQpLP6w5rQ=)
6: 678C24C0663F11EEBD955D43C4F9AE02.roa (hash: LMxslHx0hj+eRPegweO/Q77RiY35syFR40MU3J+sT8s=)
7: 9830B6D8663D11EE8CBBAE7CC4F9AE02.roa (hash: Wa8VD0lmDOwdth5KoUIOfMLBdB57aoMl1cYAfCOjMXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl
rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Apr 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9E82
Validity
Not Before: Apr 11 04:00:58 2025 GMT
Not After : Apr 18 04:00:58 2025 GMT
Subject: CN=67f893fa-2eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:a6:c7:8c:69:7d:60:dd:3e:f1:c7:98:a6:
bc:fa:a0:7f:68:2b:8b:8d:d7:30:74:16:8a:df:79:
a0:6f:a7:12:51:66:60:10:7e:7d:ae:8e:d4:a6:e5:
df:9f:e7:86:1b:7f:40:67:b8:dc:ee:70:45:a4:f0:
a7:ea:fc:28:35:97:5a:cf:e8:cd:21:1c:5c:f1:33:
d9:ef:ac:bf:69:87:58:2c:3e:6c:0c:02:08:5b:d9:
9b:a2:c6:ed:c4:ff:d2:f7:b0:c8:dd:f0:68:4e:e4:
cb:fe:ab:c6:12:54:07:d4:d2:eb:e5:44:73:6b:c7:
62:ab:1b:6f:e7:5c:41:d4:29:cb:7f:af:24:ab:9b:
d2:14:94:d9:67:d6:23:70:29:68:b9:65:01:56:b6:
f6:90:62:cf:4a:3e:b7:a5:4f:73:00:23:39:ca:35:
bd:d1:2a:d9:d0:e8:26:a2:a9:40:71:98:87:e8:35:
e8:fa:19:97:99:23:06:35:63:d5:4e:1c:df:65:90:
1b:8b:15:6a:c2:94:11:60:fc:c4:39:23:cf:f6:d3:
e6:2d:53:42:54:3c:a8:db:ca:b3:4c:a0:54:d1:e6:
43:43:65:2e:72:0a:e6:fb:da:6e:03:bc:0f:3e:de:
6b:88:ee:3c:30:1f:42:3d:5d:d0:78:05:ba:3c:8f:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1E:5B:16:BA:6A:F2:4E:7D:21:9D:F1:4C:37:13:04:85:2F:55:65
X509v3 Authority Key Identifier:
keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2f:9f:e7:04:7c:c7:13:a1:2b:d1:59:69:76:08:8c:c6:89:
bf:28:49:aa:ce:03:97:5c:3b:a3:83:07:54:9d:3b:fd:91:5d:
e0:dc:ca:8b:e5:83:42:ef:7f:b3:ed:24:e0:32:de:4f:83:28:
f9:74:e8:31:4d:08:5a:53:20:f0:d8:52:4d:05:8b:16:16:af:
58:cd:98:c1:b8:c0:d1:e7:51:af:33:74:41:06:ea:72:49:e2:
b7:a7:94:14:35:ae:3b:d8:8e:7e:69:14:0e:59:98:14:24:aa:
58:14:49:f1:7e:43:b7:d6:ff:5a:48:ce:4a:a6:51:27:0f:b8:
95:70:6d:9a:2d:5d:64:3c:87:2e:80:27:6a:0a:b0:fd:dc:c3:
b7:d9:4f:e9:37:a7:01:1a:0d:02:4a:18:bb:2e:99:45:cf:53:
b7:1e:d3:ae:67:c5:c3:a3:b9:48:a3:f1:10:a1:4b:6e:64:14:
08:9d:64:92:15:b1:16:2e:af:13:41:ab:e7:aa:b9:b5:dc:95:
2e:8f:f0:77:47:11:08:cd:c0:df:77:a9:9e:39:35:be:d3:d2:
b6:a8:0b:e8:ee:1e:4e:1d:1e:92:4a:42:13:96:b7:8b:5b:64:
36:af:a8:1b:14:7e:e8:b6:88:63:b4:f5:de:c7:a7:9e:d9:b0:
8d:ff:25:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:29:20 2025 by rpki-client