Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
File: sboYaLp865TN1k8FdBOaAaULkNU.mft (raw, json)
Hash identifier: xiq58fSPkQm5hkPKH2iUMP3PLFkFKM8LBpGWtcOhQo8=
Subject key identifier: B4:31:3F:11:A2:1B:BD:D9:F9:6F:33:0A:30:89:5F:9C:59:4B:B1:1E
Authority key identifier: B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5
Certificate issuer: /CN=A91DF233/serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
Manifest number: 45
Signing time: Tue 15 Apr 2025 06:11:06 +0000
Manifest this update: Tue 15 Apr 2025 06:11:05 +0000
Manifest next update: Tue 22 Apr 2025 06:11:05 +0000
Files and hashes: 1: sboYaLp865TN1k8FdBOaAaULkNU.crl (hash: p7HIToRYwYr2EXAvpZ5stPy1NR233go9Z7M7yNQZG2s=)
2: 386FD4FCB37D11EF8D6EAF63C4F9AE02.roa (hash: aJEyHw65stDKmv/A9AlKIYdtN6qUu7eSq0Nk49wiYVM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl
rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Apr 2025 06:11:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF233, serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5
Validity
Not Before: Apr 15 06:11:05 2025 GMT
Not After : Apr 22 06:11:05 2025 GMT
Subject: CN=67fdf879-a0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:18:c9:05:a8:ba:9d:b2:88:d9:6d:91:c3:
fc:a2:88:a6:aa:08:12:3c:85:d4:a0:4d:5b:53:0e:
ed:49:06:31:3d:20:e2:0e:fa:cc:e0:4d:c1:a7:26:
46:99:ae:29:7f:a9:15:92:00:e5:76:51:2c:b0:c7:
fd:cf:f8:fc:db:29:ad:13:86:89:f7:66:46:06:ed:
4d:46:c4:6a:00:74:34:85:4b:4b:6d:40:b0:3f:c8:
c5:50:07:83:74:f4:d6:59:c4:25:83:3e:aa:ea:08:
cd:f4:23:0b:a2:ef:41:1a:bf:5c:cf:4b:62:92:73:
e6:03:df:87:7f:99:5a:10:7d:bb:9d:48:a1:30:3a:
2e:75:20:a7:37:d3:bd:5c:88:70:3e:8e:e3:d7:ba:
21:30:2c:6a:0e:21:70:3f:41:4e:5f:94:7e:e0:f1:
88:00:4f:42:68:02:86:23:3b:fe:c6:4c:38:a5:90:
50:0a:f3:c1:af:19:d1:83:52:35:2c:33:42:87:e1:
11:18:31:83:e4:23:ae:04:b4:9e:cf:1b:de:b4:b6:
a9:3e:cd:c7:e0:9c:e1:d0:f1:e0:d4:8d:d3:a2:3e:
66:88:61:35:98:b5:88:29:b3:db:db:4c:b2:ea:b5:
32:41:b6:4e:1b:10:03:03:c7:bf:18:67:03:9b:19:
09:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:31:3F:11:A2:1B:BD:D9:F9:6F:33:0A:30:89:5F:9C:59:4B:B1:1E
X509v3 Authority Key Identifier:
keyid:B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:af:e9:e1:9d:67:a9:07:33:de:c5:56:f3:82:f1:1d:ca:88:
55:6d:94:93:77:ab:68:53:84:2d:36:af:d9:f3:4e:79:f9:5d:
47:01:8c:6c:e2:b0:8a:47:0e:01:ec:16:71:62:4e:66:0d:dc:
0c:91:19:94:eb:8a:6a:8d:dd:b6:92:16:98:f7:7b:47:87:92:
72:c3:d0:25:b4:a0:38:8d:f8:b1:29:ae:63:b2:3c:2a:6f:7a:
b5:e4:dc:61:22:e0:1e:7a:c5:18:c5:13:31:b3:b0:91:0a:4d:
e6:42:24:0b:b8:d3:88:50:47:25:79:2c:a7:96:37:9c:22:cc:
08:43:94:73:31:f2:40:29:3d:eb:c3:97:69:b3:d7:2d:82:82:
e1:71:c0:cf:3c:6f:82:2f:28:61:9c:7c:42:2e:33:de:c3:14:
bf:87:66:60:21:8e:ce:79:60:41:97:59:ca:c0:b4:5e:de:77:
84:53:72:80:2d:36:28:b0:fd:85:b8:2c:43:d1:85:ac:7f:98:
38:17:b9:5b:35:61:59:53:62:bc:87:cc:8b:c9:b2:08:31:25:
be:ee:a2:79:00:a4:97:c9:7e:ae:7a:d9:79:16:e0:3f:78:c1:
df:9d:be:89:c3:8c:7f:f9:9e:31:31:71:45:9b:28:55:a3:b0:
2d:49:9c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:01:11 2025 by rpki-client