Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
File: LoI9WUls-sc3j6gr-E3faE2TK50.mft (raw, json)
Hash identifier: hOyjCSsPhNP5zM326utbwoAXieKIS+XSyffpZIaRBdw=
Subject key identifier: B9:40:52:B5:23:FC:86:1E:D5:E9:05:CF:0D:13:CF:55:EE:22:3D:08
Authority key identifier: 2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D
Certificate issuer: /CN=A91E1A60/serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
Certificate serial: 0B0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
Manifest number: 0B08
Signing time: Tue 08 Apr 2025 19:09:12 +0000
Manifest this update: Tue 08 Apr 2025 19:09:12 +0000
Manifest next update: Tue 15 Apr 2025 19:09:12 +0000
Files and hashes: 1: LoI9WUls-sc3j6gr-E3faE2TK50.crl (hash: tXwpjlA7JUs562XG9lIC3VMfQGw68UAYA8yYBV6j/Y4=)
2: 33A8447E3D0111EA9B37B256C4F9AE02.roa (hash: dhmOvv7uMkUQoCzxXTfQXJHUTAQuNuYH/MTOVQ2M8Fw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl
rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 19:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2830 (0xb0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1A60
Validity
Not Before: Apr 8 19:09:12 2025 GMT
Not After : Apr 15 19:09:12 2025 GMT
Subject: CN=67f57458-0968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:8e:fd:53:15:31:82:95:5c:d7:63:4c:db:
5b:20:98:35:1f:df:b9:4b:94:05:24:89:06:2e:0b:
72:31:9d:f0:be:a9:55:55:eb:64:ba:c1:f0:d2:76:
5f:11:e2:b8:71:e8:0f:49:d7:54:0c:b5:66:83:56:
d7:77:5c:12:67:8f:10:2c:ae:02:03:42:b2:3e:2c:
a2:1d:98:ec:42:cf:1d:22:d0:b9:a0:43:55:18:c7:
b0:52:ad:95:1a:18:16:0a:6b:3e:bb:37:b9:09:3b:
eb:8d:08:d8:b0:43:4e:b7:f1:7c:2c:25:1a:19:a6:
26:8b:62:df:b5:15:1c:27:22:74:de:71:8e:a5:c1:
d2:af:40:72:5b:f2:87:fb:57:5b:ea:a1:ef:12:ed:
89:9f:80:f4:71:34:2b:a1:70:5a:c4:46:2c:02:0b:
98:09:60:76:5f:59:1e:4a:de:c7:a9:15:ff:a1:9b:
27:a8:fd:25:b5:94:a0:d0:44:50:00:fa:8e:0a:93:
28:fb:6d:37:3c:26:ca:de:1c:4a:f3:04:ee:e7:ab:
3a:bd:b7:3b:ea:8d:bd:f7:fc:af:9c:90:e7:fe:63:
5d:53:2c:80:84:09:df:4f:30:0b:02:58:95:81:31:
f0:f5:69:04:da:8a:5f:1f:e0:cb:bf:76:e9:ea:79:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:40:52:B5:23:FC:86:1E:D5:E9:05:CF:0D:13:CF:55:EE:22:3D:08
X509v3 Authority Key Identifier:
keyid:2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:dc:97:bf:73:17:37:a4:f4:ea:c5:d4:5f:b5:93:53:80:1f:
d4:e7:b3:5a:b3:44:81:19:ed:74:8f:8d:e9:0e:bc:ff:a3:d0:
a3:60:79:ce:c5:ce:99:96:c7:f6:95:2a:30:67:48:c7:e7:c7:
8f:c4:12:2f:58:cc:98:cd:45:87:02:a9:7d:04:55:c1:62:34:
f2:65:d6:e6:15:eb:09:8c:c2:2b:ec:12:75:65:3b:fb:1e:5f:
cb:75:a7:df:73:a7:95:7a:ae:03:d9:57:67:8e:11:a1:87:ab:
f4:03:8e:14:78:a2:ff:2b:15:60:fb:29:e6:9b:b8:ec:6d:78:
c6:d5:39:83:fd:f6:d0:6c:26:d0:11:22:e9:81:b6:47:9d:ce:
27:89:ac:92:b2:2b:64:d2:71:cc:c0:9b:00:e8:7f:16:43:b6:
b9:c0:d0:6d:68:08:9a:a0:0d:d2:99:3f:c9:36:26:01:59:70:
63:df:4c:e6:ee:1f:a5:6e:25:73:e8:89:ca:8b:1f:25:3c:30:
e1:56:27:49:27:79:ba:47:66:14:fe:03:e3:a2:bf:32:b5:b3:
bb:b0:ab:9e:46:d2:43:39:a3:27:81:45:a7:03:64:5d:9b:1f:
53:74:c1:c0:aa:6a:f3:e9:b6:03:b8:d5:0c:0b:ee:cf:5f:1f:
94:54:77:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:56:27 2025 by rpki-client