Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft
File: bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft (raw, json)
Hash identifier: PKqldtMmV+eXj8AW0QsfduH18nXc60MoSp3C5whGw9Y=
Subject key identifier: 1F:7D:21:BB:50:E4:4C:DD:FF:0C:D9:E6:E6:73:70:C9:56:4E:72:C8
Authority key identifier: 6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5
Certificate issuer: /CN=A91DDDA7/serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5
Certificate serial: 063B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft
Manifest number: 0635
Signing time: Sat 12 Apr 2025 20:08:17 +0000
Manifest this update: Sat 12 Apr 2025 20:08:17 +0000
Manifest next update: Sat 19 Apr 2025 20:08:17 +0000
Files and hashes: 1: bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl (hash: nWXPE8+aWCE1HFKiOhvCiAx7QLaUNd51wAeSBlCTdrc=)
2: 815931708D5411EB9DA31875C4F9AE02.roa (hash: LyuoMJXz1NyXM9pSNW11Fa6fRcMflVH6LhgfRij1kVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl
rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 20:08:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1595 (0x63b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDDA7, serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5
Validity
Not Before: Apr 12 20:08:17 2025 GMT
Not After : Apr 19 20:08:17 2025 GMT
Subject: CN=67fac831-3888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:45:49:12:3a:fb:b3:10:07:cd:9a:2a:c1:
bb:f5:1d:c2:75:d8:90:d5:65:b2:a9:26:a8:b5:77:
b2:28:52:59:b4:80:65:8b:28:09:42:52:89:1d:52:
3d:9c:61:54:1a:e7:bf:bf:08:7a:05:51:a4:e1:9e:
01:7d:27:4d:ec:b1:9f:e3:8a:25:8a:0b:60:f7:ae:
98:3f:fc:c3:45:63:11:d5:8e:b5:71:fa:27:5b:7f:
9c:0b:cc:c0:e0:c5:27:f0:92:92:73:a5:97:d9:f1:
7a:e2:8a:99:13:ee:26:be:16:8a:db:07:5b:91:bd:
14:13:a8:15:44:61:af:81:5a:16:b3:ec:ef:a7:d2:
7b:b2:41:32:1d:6c:17:fc:a5:5e:48:3c:e0:c3:2e:
d7:2c:92:ca:49:9a:17:66:4f:3f:b3:40:30:7e:59:
84:0b:09:cc:32:e5:a5:be:d2:19:ce:48:5a:fa:bd:
51:53:df:26:c6:52:60:a3:e4:bf:93:88:ab:28:c1:
89:33:e0:a0:81:64:7f:6a:56:03:7e:f0:46:6f:03:
4b:65:d1:f8:51:d2:29:6d:53:46:62:36:5a:a0:74:
a9:08:e4:85:28:f9:c1:37:7a:e3:ce:9b:8a:df:ac:
46:0c:58:a7:c4:78:e3:2c:42:7c:64:61:0d:f4:99:
7c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7D:21:BB:50:E4:4C:DD:FF:0C:D9:E6:E6:73:70:C9:56:4E:72:C8
X509v3 Authority Key Identifier:
keyid:6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:2c:a2:03:79:13:5e:28:42:27:1d:d5:c8:13:43:00:d3:87:
09:81:22:1a:2c:c8:e1:db:29:8d:40:6b:8e:48:ae:9b:47:44:
7b:67:e1:14:92:ae:d5:19:d7:b6:c8:f1:9b:6f:9f:03:93:32:
52:1d:06:09:71:b9:20:b6:e9:48:d3:d9:87:17:c4:0d:94:e7:
db:1c:94:88:1a:7e:64:6e:b6:be:e3:75:f1:ca:73:35:a6:3a:
63:ba:2c:d5:86:e3:32:c6:b5:0e:a1:da:a3:a8:3a:2d:22:e0:
9c:8c:a0:14:1b:6b:26:05:d7:cf:ef:3e:37:af:26:c9:15:02:
04:24:50:e3:c1:e7:27:7a:b5:cd:98:1a:aa:85:54:f5:37:2b:
f3:52:83:8d:87:eb:e3:0d:71:b1:40:b7:92:21:b4:d8:8a:83:
59:e5:a6:57:fc:56:b5:e7:89:92:36:b0:eb:06:f1:6e:2a:08:
74:d0:f0:70:2a:09:f5:3e:1b:16:15:fb:42:09:7e:43:70:c8:
49:bc:b8:3b:62:9b:a6:90:b5:84:21:8e:82:5b:fc:e8:66:52:
0e:06:e5:48:fe:25:32:a7:ff:e0:70:40:94:e0:cf:3c:a5:20:
ad:b3:6a:25:be:f4:d9:4d:5d:4c:2f:da:61:d4:1e:59:a3:75:
2e:6f:ed:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:14:16 2025 by rpki-client