Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
File: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json)
Hash identifier: homGCbY+NzbHtWyK4FY+DinBvNTg6VtAFs29/76mBNg=
Subject key identifier: 6A:C1:E0:D3:93:E0:A1:7E:33:17:0C:EC:E6:0F:D5:79:64:95:73:0F
Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
Certificate issuer: /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
Manifest number: 014F
Signing time: Wed 09 Apr 2025 03:11:35 +0000
Manifest this update: Wed 09 Apr 2025 03:11:35 +0000
Manifest next update: Wed 16 Apr 2025 03:11:35 +0000
Files and hashes: 1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: OmmEMWbjrUKc7SLBN+DJJtEUSlU1u429TQAkrqWswGQ=)
2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: GbdpkuqmY37s9wPgW3tN3BtEev3tZBJWQSfg/vR2zzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 03:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D61DF
Validity
Not Before: Apr 9 03:11:35 2025 GMT
Not After : Apr 16 03:11:35 2025 GMT
Subject: CN=67f5e567-a454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:53:89:d3:94:56:04:3a:9c:bf:21:82:91:
f0:e4:bd:4c:3a:82:7c:b1:39:6f:b8:24:35:6f:84:
98:98:32:82:9a:09:b8:99:11:82:15:48:e4:ac:81:
34:97:5a:73:78:12:cc:c7:2b:1f:90:af:3e:53:f5:
c3:97:dc:89:69:5d:94:0b:0a:40:1e:0a:3b:92:2f:
62:17:d3:8c:d5:4f:7e:ab:8a:32:f8:ca:8d:14:b0:
6c:b1:7d:d8:65:a5:be:6d:27:ed:74:78:c7:be:f0:
9d:44:0f:b2:58:bc:03:8f:05:6e:d1:7f:f1:85:ef:
6b:70:d2:67:82:b3:e7:1e:a8:1a:ab:26:8e:43:ee:
33:79:fa:79:a2:01:82:7a:e4:21:29:db:ea:20:e7:
0c:6e:7d:bb:6f:a0:16:1c:5b:03:e9:99:47:d5:42:
4e:e5:7b:31:19:bb:16:57:02:29:fb:12:1d:ef:6f:
82:07:6e:f1:2d:88:1d:2d:f0:9a:77:84:a2:37:a4:
11:3f:9b:80:3d:93:c6:e0:14:fe:3f:9b:ad:72:d6:
01:f1:dd:02:cd:88:b1:22:0a:c5:15:43:b8:69:8c:
e1:94:9f:67:48:70:11:21:bf:af:3f:d3:f6:7b:7f:
9d:7a:a9:62:3e:39:92:2c:4e:d7:ae:02:23:64:a4:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C1:E0:D3:93:E0:A1:7E:33:17:0C:EC:E6:0F:D5:79:64:95:73:0F
X509v3 Authority Key Identifier:
keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:c9:51:6c:28:c0:c9:67:8c:88:ac:fd:7d:e1:4f:80:9a:e8:
81:b7:5f:f2:d3:67:ec:63:b0:13:f8:0e:5b:e2:1f:c7:24:9f:
6e:d4:dd:bf:7e:6f:2c:af:26:a8:68:02:b4:a9:8d:db:2d:42:
0f:68:0f:b2:80:5c:43:cc:24:d7:39:72:ba:ba:42:82:b5:e4:
0a:b0:54:cb:41:b9:a4:61:33:72:c3:eb:8c:e9:4f:e2:27:c4:
a0:f2:44:a1:9f:15:ea:57:a5:4a:31:9a:15:bc:cd:5b:18:52:
fc:6e:43:84:eb:1e:75:d6:96:43:40:77:52:6e:d8:78:8a:92:
2d:3f:bf:c7:c3:ec:79:4d:cb:a6:d1:68:c5:f8:1c:98:2d:c9:
d2:7a:72:e9:11:dd:56:25:3a:38:57:a3:87:22:b9:00:a8:c1:
2a:24:41:9f:a4:a9:01:ca:fa:fa:a9:de:e2:d8:13:f0:c5:f7:
45:9a:8e:b2:95:9a:de:d1:ad:7d:8a:da:d0:92:eb:90:13:25:
b2:d9:0e:dc:ca:40:d1:90:18:f8:20:e4:f3:7b:7b:fa:4e:76:
d9:b5:02:89:63:b2:06:08:92:d2:6f:a9:e3:68:ff:4d:e2:60:
2d:37:4f:a9:67:af:c6:2c:63:26:10:64:6d:19:8b:1c:53:a4:
c2:80:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 08:23:19 2025 by rpki-client