Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
File: 1QwK07StgdVVlFzH8_HuHB-t5hc.mft (raw, json)
Hash identifier: 5Wvpbu7zZXXWx7zICHW2urqT+A9UyrNShvdXFbIdG6E=
Subject key identifier: 2B:01:B7:6F:A7:5A:54:15:1E:C0:65:76:45:1C:FA:0F:AB:DC:FC:F2
Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
Certificate issuer: /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Certificate serial: 0B09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
Manifest number: 0AFD
Signing time: Sat 12 Apr 2025 19:07:50 +0000
Manifest this update: Sat 12 Apr 2025 19:07:49 +0000
Manifest next update: Sat 19 Apr 2025 19:07:49 +0000
Files and hashes: 1: 1QwK07StgdVVlFzH8_HuHB-t5hc.crl (hash: oxRib++HaB72mXYfuA4U6tK2A0aOAmYQ5X+eEn9V64w=)
2: 1E6B12EC049F11F0AD5C7C33C4F9AE02.roa (hash: gD5Iq8akoAlTIS4ryMBL5JIYOH1ViK0S3xNtIRVVfYc=)
3: 74CA44AA049F11F087661234C4F9AE02.roa (hash: 2OIryrqTJwARaXm6rXTbRJKfK80d24FVCzeiupTYqAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl
rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 19:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2825 (0xb09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Validity
Not Before: Apr 12 19:07:49 2025 GMT
Not After : Apr 19 19:07:49 2025 GMT
Subject: CN=67faba05-ed09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:a4:1b:e4:e7:7f:c5:20:6c:b9:a0:c7:b1:
cd:a5:d0:55:68:cc:4a:e8:cb:06:b1:ca:41:75:1d:
3c:ad:59:66:fe:6f:fc:bd:c0:1b:99:fd:2d:1b:04:
26:f5:be:6c:4b:10:47:0b:c6:1e:5b:f6:0f:a2:a7:
33:98:4a:fc:1d:aa:37:25:07:19:63:f3:91:20:5c:
13:89:19:18:7b:0d:41:41:88:19:b0:36:19:77:23:
be:ca:55:c5:28:c8:c5:42:a9:68:7d:9f:6d:fa:03:
f3:ed:cf:8e:3a:86:d9:39:75:be:85:e5:cb:5e:a5:
bf:4c:eb:f9:d5:9b:40:dd:14:d9:b6:f3:41:21:19:
d6:78:1c:1a:6e:55:1e:e8:70:fb:37:35:9b:cf:45:
9d:6f:7a:e9:55:6e:07:b4:bd:36:10:b2:0e:27:2b:
c3:8f:db:fe:25:4b:37:71:6d:20:94:d7:bc:ce:7d:
22:1d:9b:75:43:bf:d6:39:e3:d6:94:51:bd:d2:85:
39:0e:1d:45:03:a1:55:60:76:b2:b6:95:92:d1:6c:
09:d7:d8:e8:29:19:67:82:8f:e0:cd:5b:46:e5:1d:
f9:a6:58:d7:0b:46:c6:b9:e7:30:e0:a6:5e:de:fb:
8a:77:b8:34:3d:e6:e8:c2:72:06:4b:6c:9a:e5:d9:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:01:B7:6F:A7:5A:54:15:1E:C0:65:76:45:1C:FA:0F:AB:DC:FC:F2
X509v3 Authority Key Identifier:
keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:f9:81:93:48:73:5f:54:d2:83:eb:72:29:8d:a9:93:9c:b6:
e4:d4:e7:f3:dd:cd:e4:08:6a:3c:87:64:2b:71:81:c2:32:40:
1d:c3:69:86:11:cf:41:28:4f:e4:27:79:8a:5d:ee:4e:b8:c4:
40:8b:39:1e:ef:0f:b6:d7:9e:c3:22:a2:11:22:b4:fd:bb:06:
24:d7:32:a6:13:36:43:1e:ed:8e:fa:c9:b0:dd:7e:a9:b0:c0:
4a:ac:fa:dd:81:cc:e2:67:02:e4:62:89:fe:e7:f9:13:fc:4e:
a3:ce:5c:2e:1a:ba:cf:f4:f5:c9:51:22:d2:19:f7:27:8f:9f:
2d:07:55:ef:d5:45:78:81:f6:c3:4a:cc:5a:98:c7:09:1a:91:
39:0e:98:39:99:e6:b3:c8:e1:fc:82:89:f4:3c:8f:3f:c5:93:
84:eb:e1:cb:ed:ed:81:0d:57:68:0d:03:7c:c3:7a:c4:01:93:
83:6d:b1:a8:06:67:c2:67:68:84:b7:19:8f:94:32:d6:79:bb:
0d:63:6e:70:80:b3:e1:8f:86:ea:ab:2f:ce:e7:66:a9:7f:06:
a2:de:bf:4e:a0:3b:25:8e:69:9a:ad:da:40:3f:c4:4e:24:e4:
25:f0:11:42:98:b5:b4:d6:1b:f7:24:45:c8:de:f2:5d:6d:a3:
6e:2d:c4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:33:59 2025 by rpki-client