Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
File: 5yN2M529XTAqWcz6d6wJzRcjlU0.mft (raw, json)
Hash identifier: OADGlxJXOnJNTyP5/Lhtuuq0d6jOiGAuXP13VUeGagA=
Subject key identifier: 63:AE:6F:AF:D4:B2:B9:FD:5D:0B:A6:4B:40:B8:63:A6:6C:3E:BC:38
Authority key identifier: E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D
Certificate issuer: /CN=A91CD60C/serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
Manifest number: 5E
Signing time: Thu 17 Apr 2025 05:58:35 +0000
Manifest this update: Thu 17 Apr 2025 05:58:35 +0000
Manifest next update: Thu 24 Apr 2025 05:58:35 +0000
Files and hashes: 1: 5yN2M529XTAqWcz6d6wJzRcjlU0.crl (hash: pu0pOG2+6Q8ebZdPddwpWPHNiJfLvVRR18YVXioCDTw=)
2: AC8EE79E975B11EFB1D18E82C4F9AE02.roa (hash: kMM0jFEoPR+G6/cERfYwCAE7TUEU6HaJy9v+jML5/oY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl
rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Apr 2025 05:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD60C, serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D
Validity
Not Before: Apr 17 05:58:35 2025 GMT
Not After : Apr 24 05:58:35 2025 GMT
Subject: CN=6800988b-f9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:df:c4:0b:49:32:69:af:63:d2:66:0f:d9:
0d:0b:dc:43:ff:01:3a:d0:1c:03:17:29:15:3d:ee:
5b:01:ff:1b:d0:55:1d:8a:5e:21:de:56:e2:09:1e:
da:62:d2:b3:37:dd:ff:18:f1:da:f3:c4:ef:41:05:
5a:e9:97:e9:cf:48:c4:01:07:d8:60:07:05:a7:ab:
a1:a1:8d:ab:3f:d2:90:33:41:e3:9e:1e:d7:05:45:
37:8c:01:df:a9:74:89:fb:a9:b7:68:00:cf:7d:b3:
20:01:d3:9a:c7:bb:03:d5:e9:db:27:0d:de:e1:a4:
67:0f:5f:59:85:c8:34:47:b1:ab:9e:db:b5:27:6d:
88:82:73:fb:f9:6a:f5:41:85:79:db:d7:0a:41:80:
53:a2:59:53:0d:69:f7:ad:b9:41:fa:6d:c7:77:49:
3c:4f:ac:46:7d:51:27:af:ee:9e:20:8f:8a:2c:d0:
9d:68:4c:0c:8d:f6:97:1b:ad:24:3a:2a:c4:34:34:
99:f0:27:50:e0:27:3b:f4:48:ff:76:b4:e5:95:fe:
4d:3b:71:a0:62:55:32:80:a2:fe:ce:c2:70:7f:f4:
e8:4a:8d:bd:29:c1:5e:fa:e4:be:e9:43:d5:69:dd:
4d:f5:b9:62:f1:fe:b0:b6:f0:5d:12:85:df:f2:3b:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AE:6F:AF:D4:B2:B9:FD:5D:0B:A6:4B:40:B8:63:A6:6C:3E:BC:38
X509v3 Authority Key Identifier:
keyid:E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4c:c1:58:4e:97:b5:e7:3b:e3:3e:45:e8:32:d1:75:72:70:
45:36:20:22:4e:90:7d:6b:a7:8d:64:d1:55:96:15:b7:bb:d0:
a2:44:c6:a0:d8:39:c7:46:a2:0e:77:8d:ea:57:fc:e2:bc:6b:
0f:a2:69:09:94:ad:82:fb:f2:6f:21:eb:93:a9:98:94:89:4b:
29:5b:5e:97:a3:98:3d:92:be:e8:0f:37:a4:cb:9f:5f:f2:51:
05:e5:7a:32:5f:8b:13:ed:f9:7d:a1:50:b5:76:db:0f:42:ce:
db:d4:e2:47:75:6c:04:7e:d0:27:c9:8e:3f:ec:fb:6d:d4:44:
03:c1:86:08:d2:12:4a:98:95:60:fb:c7:cf:e1:4f:57:de:53:
ff:f6:be:89:ad:5e:12:49:00:28:1d:25:71:be:d6:a5:1b:6e:
85:18:aa:2d:6f:bf:56:19:61:56:54:79:e6:dd:58:d9:f9:ec:
ca:a1:7e:a6:cd:9e:d9:81:32:0e:a1:01:70:48:05:1a:ef:53:
78:01:6e:64:9d:e7:9b:17:b6:94:b6:d0:f5:c0:09:bb:76:08:
be:24:62:05:6c:0a:c4:06:4a:c9:19:ce:bd:4f:fb:b6:f0:68:
8e:b2:01:dd:fd:c2:ff:d5:11:b2:db:7f:25:15:50:58:e8:9f:
f1:2c:eb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:31:24 2025 by rpki-client