Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
File: LNEILrR3cdIdqQBYLz7IfGndXMw.mft (raw, json)
Hash identifier: V/Yv/y8qVIB1/FfwGtf+zPWyulL/6TtYkjNRqFsmRfA=
Subject key identifier: EE:96:ED:A4:B4:B0:C4:E9:97:9D:2B:FA:E9:16:FE:9F:E2:EE:82:42
Authority key identifier: 2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC
Certificate issuer: /CN=A91D84F7/serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
Manifest number: 7D
Signing time: Sun 13 Apr 2025 05:24:11 +0000
Manifest this update: Sun 13 Apr 2025 05:24:10 +0000
Manifest next update: Sun 20 Apr 2025 05:24:10 +0000
Files and hashes: 1: LNEILrR3cdIdqQBYLz7IfGndXMw.crl (hash: WxV0/3t6nNXkiKO4c/LNu+iPRSXLhEXHBi2+42ZSBMk=)
2: AAFB89C25B8E11EF8774691FC4F9AE02.roa (hash: NJQC0pcrHh/JBVTRfv/b6T3EEDKwTW5kx/DQtkXyO1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl
rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 05:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D84F7, serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
Validity
Not Before: Apr 13 05:24:10 2025 GMT
Not After : Apr 20 05:24:10 2025 GMT
Subject: CN=67fb4a7b-a418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:94:16:30:47:1f:5f:9d:30:39:51:61:f6:
6d:6d:52:e3:71:ef:1b:b2:bb:9d:de:a6:46:33:fa:
41:68:23:6b:cb:14:c0:ba:18:01:f3:e9:78:0c:df:
3f:49:ed:86:6c:9e:fb:60:1b:2b:ad:b2:28:04:49:
69:60:d4:65:df:d9:53:9e:de:56:50:a9:bf:4e:18:
32:70:b9:c2:fb:d7:2c:bd:b0:be:fa:62:e0:87:b4:
7c:cd:11:c8:59:b0:7f:50:55:a4:6c:68:81:67:26:
42:4e:43:d1:57:c1:05:90:65:fb:e1:3d:d6:95:85:
68:60:fc:a9:09:a4:4b:4b:a7:3f:81:f5:1c:3d:ef:
f3:4f:a3:80:29:d1:3b:40:b5:1f:6b:02:65:d9:49:
89:b8:67:56:f0:25:fd:3a:8c:0e:2c:86:ed:3b:49:
13:6b:4c:96:7b:c1:97:ef:91:4f:f3:77:62:49:c4:
f0:38:a3:89:6a:69:bd:c4:85:b4:66:93:7b:85:15:
8c:39:25:cf:83:1f:ba:3d:fe:8b:aa:e8:bb:b7:9b:
35:17:8f:40:e5:c1:26:de:74:11:75:93:37:b7:ac:
ef:72:66:10:cc:da:99:cf:d1:d1:a6:5d:ee:70:9e:
ab:27:af:5c:51:e5:a8:b2:8f:68:92:98:7f:ac:8b:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:96:ED:A4:B4:B0:C4:E9:97:9D:2B:FA:E9:16:FE:9F:E2:EE:82:42
X509v3 Authority Key Identifier:
keyid:2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:57:9d:7d:e1:75:87:b3:7e:29:39:2e:79:a9:34:cc:60:9a:
c0:28:93:2e:7b:be:3b:78:89:1a:35:26:75:64:4e:b8:7c:84:
b2:d9:e9:14:ac:d2:11:cd:b7:b8:73:07:05:f9:7e:e3:e4:0a:
7d:ac:29:83:41:df:3f:6f:83:10:8a:e6:bf:58:db:de:f6:ff:
5f:36:bf:2a:42:8f:83:1f:9a:da:7d:42:47:7c:85:00:8f:e7:
84:c1:ba:59:a7:07:71:d6:92:34:f9:a7:0c:ac:b9:93:58:9f:
a0:a4:a4:e1:75:fc:24:8c:52:6a:5b:ce:0d:2f:f2:42:a9:d9:
f9:0e:36:3f:e3:57:ba:b2:ba:48:a0:26:67:32:62:67:82:ba:
63:1a:08:0e:f8:d1:93:06:99:51:c6:73:d2:60:7d:34:6e:c2:
bc:66:7f:26:76:f6:62:ca:a7:ef:97:7e:23:9e:29:19:b0:68:
ea:09:a2:16:42:af:18:8b:97:da:aa:32:74:95:14:ed:ea:2a:
59:7e:3a:1f:ac:72:ee:1a:7f:07:32:2f:56:51:4d:16:2d:60:
59:de:4d:8d:a9:ad:e3:7f:56:46:f5:91:aa:dd:9e:a5:b0:56:
d1:1c:4d:f7:7a:f9:2f:42:7f:10:e8:86:2c:12:01:9e:87:8c:
c9:18:e2:1a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
ODRGNzExMC8GA1UEBRMoMkNEMTA4MkVCNDc3NzFEMjFEQTkwMDU4MkYzRUM4N0M2
OURENUNDQzAeFw0yNTA0MTMwNTI0MTBaFw0yNTA0MjAwNTI0MTBaMBgxFjAUBgNV
BAMTDTY3ZmI0YTdiLWE0MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZ6pQWMEcfX50wOVFh9m1tUuNx7xuyu53epkYz+kFoI2vLFMC6GAHz6XgM3z9J
7YZsnvtgGyutsigESWlg1GXf2VOe3lZQqb9OGDJwucL71yy9sL76YuCHtHzNEchZ
sH9QVaRsaIFnJkJOQ9FXwQWQZfvhPdaVhWhg/KkJpEtLpz+B9Rw97/NPo4Ap0TtA
tR9rAmXZSYm4Z1bwJf06jA4shu07SRNrTJZ7wZfvkU/zd2JJxPA4o4lqab3EhbRm
k3uFFYw5Jc+DH7o9/ouq6Lu3mzUXj0DlwSbedBF1kze3rO9yZhDM2pnP0dGmXe5w
nqsnr1xR5aiyj2iSmH+sizQtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7pbtpLSw
xOmXnSv66Rb+n+LugkIwHwYDVR0jBBgwFoAULNEILrR3cdIdqQBYLz7IfGndXMww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4NEY3Lzc5Q0FGQjI2NUI4
RTExRUY5MTc3RTkxRUM0RjlBRTAyL0xORUlMclIzY2RJZHFRQllMejdJZkduZFhN
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTE5FSUxyUjNjZElkcVFCWUx6N0lmR25kWE13LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4
NEY3Lzc5Q0FGQjI2NUI4RTExRUY5MTc3RTkxRUM0RjlBRTAyL0xORUlMclIzY2RJ
ZHFRQllMejdJZkduZFhNdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACpXnX3hdYezfik5LnmpNMxgmsAoky57vjt4iRo1JnVkTrh8hLLZ6RSs
0hHNt7hzBwX5fuPkCn2sKYNB3z9vgxCK5r9Y2972/182vypCj4Mfmtp9Qkd8hQCP
54TBulmnB3HWkjT5pwysuZNYn6CkpOF1/CSMUmpbzg0v8kKp2fkONj/jV7qyukig
JmcyYmeCumMaCA740ZMGmVHGc9JgfTRuwrxmfyZ29mLKp++XfiOeKRmwaOoJohZC
rxiLl9qqMnSVFO3qKll+Oh+scu4afwcyL1ZRTRYtYFneTY2preN/Vkb1kardnqWw
VtEcTfd6+S9CfxDohiwSAZ6HjMkY4ho=
-----END CERTIFICATE-----
Generated at Sun Apr 13 22:38:18 2025 by rpki-client