Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft
File: 75XL1Zg1JkDUKwqsYABBBltNxEI.mft (raw, json)
Hash identifier: NjjWObzpZlPv9IbmBXbOwN8L4XyCAHdl/tJdIN2e3g8=
Subject key identifier: 86:8F:F5:5D:26:D7:FA:AE:9D:E4:52:8F:6D:DE:23:F1:DE:74:30:F4
Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42
Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442
Certificate serial: 0C4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft
Manifest number: 0C3E
Signing time: Sat 12 Apr 2025 18:14:18 +0000
Manifest this update: Sat 12 Apr 2025 18:14:17 +0000
Manifest next update: Sat 19 Apr 2025 18:14:17 +0000
Files and hashes: 1: 75XL1Zg1JkDUKwqsYABBBltNxEI.crl (hash: ndmN6V6NmrkKFKM8xyhLEipzESXmu+i6Dt4aDOwLg8I=)
2: 44B3B572011611EA972FFC57C4F9AE02.roa (hash: piFKgRXnTnbtckt4LeKFN1ZClSmPRiBrS7xYW+uNn8I=)
3: 452DDFB4011611EA972FFC57C4F9AE02.roa (hash: rZ1tio+6QezB4AheRQ3p4ioAeh5nGSWbvjYyZdr2msE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl
rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 18:14:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3147 (0xc4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE8C5, serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442
Validity
Not Before: Apr 12 18:14:17 2025 GMT
Not After : Apr 19 18:14:17 2025 GMT
Subject: CN=67faad79-d9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:77:1c:21:d3:10:2d:2b:dd:af:0d:e1:a0:
2b:bc:7b:56:d2:3e:3d:d9:8e:56:5f:be:b5:42:5b:
0b:67:e8:e5:02:be:d1:6d:de:f1:80:c5:69:41:23:
99:ae:75:32:f8:ad:51:5f:2e:b9:36:63:ee:7a:9c:
aa:e4:d6:f4:08:4c:d3:db:44:c2:cf:eb:bc:78:2f:
1b:11:9c:35:ad:8a:c3:58:b9:fb:4d:92:ec:21:39:
61:fb:39:f6:26:5e:a1:f6:74:04:5c:36:08:2c:55:
79:06:0d:ea:2c:b1:19:5e:73:c6:b3:f7:98:5c:da:
6b:59:99:80:20:0a:2f:a1:e8:c9:1a:9f:2f:fc:31:
85:37:4f:1b:c2:1c:63:c7:8e:ad:56:46:77:c1:c5:
22:4c:27:0c:3c:a3:0d:02:2d:a7:7b:ec:61:36:b4:
d8:66:37:a7:88:ea:d7:d4:4a:c3:26:4d:d8:02:ac:
de:02:c1:61:c9:f2:25:42:ae:5b:f9:9f:33:fc:97:
39:e8:0b:7e:62:8e:67:31:04:e4:90:02:b0:e1:44:
7f:36:ce:b0:9a:d8:c4:85:59:27:52:37:51:a2:f8:
ec:d3:e9:25:1b:6e:1d:9b:b1:b2:b0:8b:5e:91:44:
e1:49:9c:ea:bc:73:2f:d3:a2:f9:40:c7:22:4f:0f:
ba:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8F:F5:5D:26:D7:FA:AE:9D:E4:52:8F:6D:DE:23:F1:DE:74:30:F4
X509v3 Authority Key Identifier:
keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:08:94:6e:fe:da:2a:79:3f:0d:84:98:8e:64:fd:23:70:5a:
ff:3b:75:7e:69:34:f3:b2:03:66:8c:62:c1:e0:9c:0b:8a:99:
85:bc:4d:af:98:0d:0b:a9:41:7d:65:ac:73:22:73:d5:21:e3:
db:e0:db:80:a1:86:ae:c2:60:0c:9c:58:57:da:08:4f:1b:50:
0e:f0:95:ce:7d:28:af:03:2b:3c:9a:d4:2c:1f:86:2d:68:08:
d1:cb:a1:79:2a:bc:2f:79:40:c8:0c:43:ef:60:52:63:99:78:
15:d2:07:ce:7c:e4:03:dc:e8:78:3d:ce:dd:31:97:41:cd:7d:
74:f8:da:ea:ac:99:f2:dd:2e:44:b7:ae:d5:13:42:7b:c6:3b:
23:c2:b0:69:33:98:ca:bf:f2:dd:82:be:19:40:3c:08:38:d5:
72:85:3f:8d:31:9e:5c:5d:3c:32:6f:3d:61:7f:7f:2a:77:5e:
83:0f:20:34:6a:04:8b:23:0d:88:c6:c5:16:ec:61:a3:27:3a:
54:28:83:bb:83:1f:9c:87:82:97:06:f8:b1:12:4f:97:de:b5:
bf:4b:8c:92:de:a9:1f:1a:b2:da:7f:9c:cb:11:fb:39:1d:8c:
e8:a7:c8:6e:16:34:54:9e:66:b2:c4:9d:78:83:87:41:dd:7a:
33:2b:47:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:27:55 2025 by rpki-client