Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json)
Hash identifier: 08eet/TKmqL/eooVW00P09VFt90EhqL0scOtbHqrSGs=
Subject key identifier: 60:E0:46:04:EA:38:0C:09:A5:5F:C5:03:1D:5C:FC:3F:73:66:22:BE
Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58
Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58
Certificate serial: 03B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
Manifest number: 03AC
Signing time: Wed 09 Apr 2025 00:25:33 +0000
Manifest this update: Wed 09 Apr 2025 00:25:33 +0000
Manifest next update: Wed 16 Apr 2025 00:25:33 +0000
Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: yCWH4R0FssPHjZTZloyPef0n+gGb+nmfNrc5qMY77oA=)
2: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cu8wLYBxbGfRWUV9Ye7bg1eRpOLSnTYKjsEY2WUidXM=)
3: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: EDOt0WGEdnT9+FI7T0IrxIQR/uJ+FjweoW8YpKMKOQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl
rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 00:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948 (0x3b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D40A4
Validity
Not Before: Apr 9 00:25:33 2025 GMT
Not After : Apr 16 00:25:33 2025 GMT
Subject: CN=67f5be7d-2f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:a2:e7:ad:ea:75:64:47:5b:1d:d4:c2:07:
a9:08:f4:a8:c6:7a:e5:15:99:d5:6e:c6:b4:6f:42:
1a:e9:e6:6b:fe:cc:90:20:4f:0f:69:1d:a9:c8:35:
6a:28:ef:2c:35:93:f1:1e:20:cc:ea:26:be:94:74:
a8:42:f9:c0:d7:52:f4:a2:1e:a6:1f:ed:71:08:72:
ef:f1:d2:e5:64:73:27:14:a9:b1:f0:26:0c:ff:71:
f9:8a:d2:3d:f3:bc:98:48:ce:1b:e4:02:df:8b:29:
03:1d:26:a6:18:64:38:b5:1c:cf:ab:ef:15:1c:56:
c6:e4:a0:65:28:41:3e:00:67:8c:cd:9a:f0:f2:45:
59:cf:4d:4c:c0:28:f6:79:c0:36:c9:89:9f:ad:c7:
80:c9:4a:9c:08:3d:5f:70:e7:49:ca:c6:3f:bd:ca:
cd:93:d3:51:8b:d4:da:de:3d:27:58:fc:3f:8a:54:
4a:d2:c1:99:b4:9b:b6:86:99:6a:1b:00:dc:52:7a:
b1:61:2e:69:08:75:f8:75:7f:9a:38:9f:10:55:dc:
56:1d:28:3e:1f:00:ef:50:e6:b6:8b:33:2a:5d:be:
18:75:3e:14:8e:06:e5:17:14:5d:d1:61:68:94:28:
bb:6a:43:e5:23:c6:ca:00:d0:12:06:05:d8:a6:b3:
41:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E0:46:04:EA:38:0C:09:A5:5F:C5:03:1D:5C:FC:3F:73:66:22:BE
X509v3 Authority Key Identifier:
keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:23:b7:17:ad:c3:e6:3f:c6:ca:32:56:24:63:0f:c0:24:38:
03:72:d8:4f:2c:36:e2:f2:77:88:4e:11:9b:64:cb:5e:14:2a:
e0:8d:8e:fc:98:d2:81:0b:8e:1b:ca:0b:da:81:d6:08:ae:ed:
23:5f:5c:4e:3e:d0:76:57:de:49:7d:92:ee:cb:25:fb:c6:77:
c5:7f:41:97:4a:36:d9:e4:8d:72:b8:d6:02:f4:4e:8c:fe:92:
d9:45:f6:cf:94:b9:83:b7:7c:87:ae:72:37:28:77:35:dc:1a:
f4:a1:80:2b:c1:1d:e0:38:cd:1f:13:13:16:16:e5:a5:6f:34:
ef:ca:e5:c9:b7:05:ee:30:70:a3:8c:10:8b:35:da:1c:cd:85:
17:bd:64:ae:67:14:14:57:85:2b:ed:4d:d7:5a:08:26:fa:8a:
0c:03:be:f4:1c:1f:36:e8:90:f8:23:49:a8:77:50:20:6b:ce:
6d:0c:c7:4f:15:3b:57:bc:b1:f4:7b:3f:b9:0c:7c:f7:0a:bb:
c7:06:27:6b:8e:05:c1:92:80:be:22:1b:28:07:cd:a8:f1:8a:
89:73:36:63:1d:2a:da:b5:b2:17:1c:52:5b:06:96:9d:d8:24:
f3:04:ca:64:ea:1e:fb:e9:fd:66:dd:2c:d3:8d:54:c5:a7:c4:
7c:49:df:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:46:56 2025 by rpki-client