Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
File: mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json)
Hash identifier: 8bOE0Q+ZdvfliWA/35DQMwDZneyZlRv9/21f4RPV12A=
Subject key identifier: 6A:EE:FF:DC:F6:70:80:00:C4:11:E7:F4:B8:57:9E:B6:D7:97:83:9E
Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
Certificate issuer: /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01
Certificate serial: 06B7
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
Manifest number: 06AC
Signing time: Tue 08 Apr 2025 21:55:59 +0000
Manifest this update: Tue 08 Apr 2025 21:55:59 +0000
Manifest next update: Tue 15 Apr 2025 21:55:59 +0000
Files and hashes: 1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: MP5XAenKZdwXLhH2xPtaYqvUmUkRFntJuhsevx4pb0M=)
2: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: JfxeOd6cRi7KX9xc58yMMc6yyj7Cm4GP42UD9FpSFGI=)
3: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: In2tzB1kyTLYqr+oV0wjHkiLI0adEmKOWeAAfiinzls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 21:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1719 (0x6b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB435
Validity
Not Before: Apr 8 21:55:59 2025 GMT
Not After : Apr 15 21:55:59 2025 GMT
Subject: CN=67f59b6f-ac6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:f7:84:13:c8:26:e4:36:eb:d5:0a:52:3c:
a8:46:a6:1a:4e:4a:8d:15:eb:88:67:b1:d2:4b:02:
aa:11:de:8e:13:c8:78:3a:b7:54:3c:07:a3:df:92:
e5:d3:7d:4d:2c:51:41:f9:63:77:b8:e5:de:97:e1:
bb:54:eb:c7:33:d6:f4:71:4c:e2:be:42:c4:cd:b1:
3b:d3:6b:95:c8:98:c9:45:50:06:d3:96:f3:0e:a3:
80:0e:54:80:7d:b1:c7:cf:fb:a8:51:e4:d9:0d:94:
53:c4:b4:87:09:f7:00:6f:65:70:4d:b9:20:5e:58:
bc:d0:83:d1:ff:06:90:fa:d5:e1:58:31:6c:0e:e4:
9e:53:7e:fa:89:7b:b5:9b:f2:2d:7d:17:79:f8:95:
5c:06:b9:14:0d:90:c7:27:b3:27:d9:d9:05:1d:f6:
22:08:f0:b8:35:2d:99:22:af:ee:5f:1a:8e:f8:5d:
8d:4b:31:57:90:1d:48:d4:70:0f:f2:2e:d8:1f:1d:
f1:86:10:b1:90:40:7f:1f:16:39:ba:21:49:cf:66:
e7:bc:33:9e:c2:43:02:76:88:dc:fd:23:ff:43:b9:
2d:47:34:16:db:3e:19:92:ed:07:67:94:54:b9:4f:
7e:f2:b4:d0:0e:e1:01:dc:cc:4e:f2:ef:df:14:b1:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:FF:DC:F6:70:80:00:C4:11:E7:F4:B8:57:9E:B6:D7:97:83:9E
X509v3 Authority Key Identifier:
keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:a0:2b:5f:dc:b5:4b:8c:0a:a3:43:ba:78:ab:0e:3a:6a:b6:
b3:92:75:9d:69:45:53:ec:10:e2:ea:30:75:20:ad:b9:4d:c4:
35:66:0d:11:48:be:08:d6:43:97:82:77:6f:63:db:c2:52:90:
29:f4:40:3a:96:96:a6:27:9a:27:1f:3c:c5:08:67:fb:a6:3f:
70:17:8a:ce:ae:39:05:3c:2c:b2:b2:65:e5:ca:f1:7e:b8:5e:
c0:f8:1e:15:86:86:49:1e:e8:55:17:a0:79:0a:93:e5:ca:48:
f9:85:68:00:96:bd:79:cf:55:0a:c3:db:76:17:09:2a:51:a4:
f1:cf:93:81:7c:37:96:c4:32:e9:47:b0:83:40:0c:75:e2:80:
20:7f:41:87:82:f9:c2:00:c6:28:68:f8:0c:67:53:29:3c:71:
be:6e:ae:5a:aa:75:42:13:e5:50:e3:e0:73:9d:b7:76:91:45:
63:c1:07:54:bd:64:c1:9b:1c:d6:d2:7f:84:9c:48:87:f6:8d:
4b:20:8d:89:f8:c1:25:3e:74:25:ca:7d:51:78:9b:09:4b:40:
34:cd:e7:99:b2:39:70:6a:9e:22:98:0b:e2:f5:d0:99:46:3c:
53:35:e2:09:2f:38:e4:96:19:0c:fb:de:82:25:ed:75:8b:19:
aa:e0:cb:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I0MzUxMTAvBgNVBAUTKDk4Qzk3RTA1MkQ3RDlBRDUzNjA5NTlCOUQzRTA3NkRB
REQ3NkVBMDEwHhcNMjUwNDA4MjE1NTU5WhcNMjUwNDE1MjE1NTU5WjAYMRYwFAYD
VQQDEw02N2Y1OWI2Zi1hYzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwc/3hBPIJuQ269UKUjyoRqYaTkqNFeuIZ7HSSwKqEd6OE8h4OrdUPAej35Ll
031NLFFB+WN3uOXel+G7VOvHM9b0cUzivkLEzbE702uVyJjJRVAG05bzDqOADlSA
fbHHz/uoUeTZDZRTxLSHCfcAb2VwTbkgXli80IPR/waQ+tXhWDFsDuSeU376iXu1
m/ItfRd5+JVcBrkUDZDHJ7Mn2dkFHfYiCPC4NS2ZIq/uXxqO+F2NSzFXkB1I1HAP
8i7YHx3xhhCxkEB/HxY5uiFJz2bnvDOewkMCdojc/SP/Q7ktRzQW2z4Zku0HZ5RU
uU9+8rTQDuEB3MxO8u/fFLEkdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGru/9z2
cIAAxBHn9LhXnrbXl4OeMB8GA1UdIwQYMBaAFJjJfgUtfZrVNglZudPgdtrdduoB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9FQzA1OTA0NjVC
RTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10VTJDVm01MC1CMjJ0MTI2
Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL21NbC1CUzE5bXRVMkNWbTUwLUIyMnQxMjZnRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjQzNS9FQzA1OTA0NjVCRTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10
VTJDVm01MC1CMjJ0MTI2Z0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA3oCtf3LVLjAqjQ7p4qw46arazknWdaUVT7BDi6jB1IK25TcQ1Zg0R
SL4I1kOXgndvY9vCUpAp9EA6lpamJ5onHzzFCGf7pj9wF4rOrjkFPCyysmXlyvF+
uF7A+B4VhoZJHuhVF6B5CpPlykj5hWgAlr15z1UKw9t2FwkqUaTxz5OBfDeWxDLp
R7CDQAx14oAgf0GHgvnCAMYoaPgMZ1MpPHG+bq5aqnVCE+VQ4+Bznbd2kUVjwQdU
vWTBmxzW0n+EnEiH9o1LII2J+MElPnQlyn1ReJsJS0A0zeeZsjlwap4imAvi9dCZ
RjxTNeIJLzjklhkM+96CJe11ixmq4MsB
-----END CERTIFICATE-----
Generated at Fri Apr 11 05:26:29 2025 by rpki-client