Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
File: FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json)
Hash identifier: U4Jh18adwoDZwGiIvs5OE+/t+6Hh8+mKk1n5uYHE27k=
Subject key identifier: DF:2F:D9:4F:7F:2D:8B:96:AB:2A:C0:74:AB:1A:A1:F0:43:79:C1:B4
Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63
Certificate issuer: /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
Certificate serial: 0137
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
Manifest number: 0134
Signing time: Wed 09 Apr 2025 03:26:22 +0000
Manifest this update: Wed 09 Apr 2025 03:26:21 +0000
Manifest next update: Wed 16 Apr 2025 03:26:21 +0000
Files and hashes: 1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: REYLvC4O6eY1DYRHgqc1bU13rCCH2clBF/aBd+uWLS8=)
2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: 33dDDxYoddtq/jzJQjTw8XcFhN7Z/rBiMlfoEOF+M10=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl
rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 03:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFC92
Validity
Not Before: Apr 9 03:26:21 2025 GMT
Not After : Apr 16 03:26:21 2025 GMT
Subject: CN=67f5e8dd-f2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5f:b8:eb:96:98:40:c6:33:cd:73:b6:47:d8:
00:55:d0:d7:bb:d8:68:63:7e:d8:b3:0f:13:bc:b7:
a4:c0:75:e2:30:88:71:c4:c4:9b:b3:be:77:69:f1:
bf:0b:57:a4:05:5c:8f:92:93:b5:44:cf:a5:5b:c6:
7f:c0:aa:7b:aa:73:68:e5:bd:61:e6:31:4f:2d:4e:
1b:f4:57:76:68:56:7a:05:65:17:49:83:cd:62:0d:
7a:e8:8c:78:59:d8:cf:13:56:cf:cf:eb:ea:ce:68:
c3:32:cb:b0:e2:2c:15:6e:fa:09:fd:9b:e1:8b:7c:
a4:0f:74:35:d8:72:44:4d:ac:88:ed:b6:13:86:08:
b5:e4:e4:94:ea:b6:7f:77:a1:5b:0d:64:9b:a5:6e:
e9:36:e6:5e:44:47:e6:0f:53:38:a1:fe:cb:f8:2f:
0b:5e:87:b3:f5:20:a0:20:00:21:9b:51:47:c0:63:
20:c5:ff:ed:e6:a3:8c:84:32:38:c5:dc:e8:53:09:
1f:de:ef:e5:0b:c3:52:81:1e:50:1a:79:b2:57:2d:
44:89:8d:3e:d1:55:59:7b:da:51:df:73:2b:18:2b:
a5:62:c0:81:f9:3c:6b:32:86:d9:7e:f9:fe:60:13:
13:49:83:c3:e3:70:77:e4:7a:e7:6b:b9:8a:7a:cf:
a0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2F:D9:4F:7F:2D:8B:96:AB:2A:C0:74:AB:1A:A1:F0:43:79:C1:B4
X509v3 Authority Key Identifier:
keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c8:71:b9:db:79:bf:c3:aa:ec:2e:f1:06:11:7c:6c:75:99:
1c:38:0c:e2:87:53:96:5d:41:eb:16:54:63:61:90:cc:6e:4d:
ec:62:ad:e9:2d:0e:6d:d9:ba:af:f6:b4:2b:db:15:ea:fc:80:
8f:d0:0e:fc:ac:c0:de:b8:d7:5c:e9:2a:36:f1:66:77:10:1b:
4d:7d:95:b1:2d:db:e6:9a:ff:b4:44:ce:93:ab:b4:e5:dc:f5:
2a:0e:9c:df:de:1c:92:b9:1c:9d:58:88:bd:74:63:07:2b:b3:
58:d6:55:59:3c:90:65:89:ef:5e:52:42:ee:1b:61:f9:de:38:
b4:f6:74:1f:98:44:d0:4f:81:e6:85:38:25:45:69:40:d5:b6:
50:5a:ea:6e:9a:b0:be:61:60:b7:e2:ae:0e:b1:54:2b:f6:dc:
47:24:6b:6e:2a:a7:bc:9d:f2:4d:f7:dc:6a:d3:48:ae:89:16:
df:3c:e4:fd:0a:e9:f9:12:5e:a9:6f:6c:49:a1:30:40:97:8d:
5e:96:f2:82:56:0e:cc:73:95:b4:9f:60:c7:6d:fd:cf:d0:f3:
29:62:b9:e1:34:18:57:16:7e:f2:8c:a5:e0:a9:a7:d8:ba:7c:
16:e0:ec:30:4e:d9:d7:4f:ce:73:65:66:75:24:ed:47:e6:9a:
52:f3:8e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:09:10 2025 by rpki-client