Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft
File: h88dAWBFUehsJECeSB2vnGZZS_Q.mft (raw, json)
Hash identifier: hlvR1R4VbLYetQd95nZ9h/pi3BuWNxjRKX+cMRD3Myg=
Subject key identifier: 33:55:C1:30:C5:92:81:79:91:0F:44:9E:30:B2:B8:9C:AC:BB:1A:EE
Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4
Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft
Manifest number: 0125
Signing time: Thu 17 Apr 2025 03:38:14 +0000
Manifest this update: Thu 17 Apr 2025 03:38:13 +0000
Manifest next update: Thu 24 Apr 2025 03:38:13 +0000
Files and hashes: 1: h88dAWBFUehsJECeSB2vnGZZS_Q.crl (hash: SS31fvPfuxJFIBWA7+Irg8Uj5kKRNWGICMIXCieYlFA=)
2: A4E0754863B411EEAADB3A7CC4F9AE02.roa (hash: Lj0YroS2X8LOR4hY25qUmswSSH1A4SRoLTfz7csDQJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl
rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Apr 2025 03:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2042, serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4
Validity
Not Before: Apr 17 03:38:13 2025 GMT
Not After : Apr 24 03:38:13 2025 GMT
Subject: CN=680077a6-ed32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:55:90:af:e7:af:73:0c:11:1b:5a:7e:02:
08:f9:99:85:d3:72:ed:f1:92:9f:2f:be:ab:4b:4b:
bf:4a:5e:ea:4d:ce:12:2c:4b:20:b9:90:5d:03:40:
d3:fe:ba:30:de:dc:f7:c2:56:52:86:1c:4a:7b:f6:
ec:4a:2c:ef:22:f6:98:03:db:2b:0f:33:94:26:cd:
ed:ca:fe:bc:3f:72:9f:6e:77:c0:8b:56:b9:28:99:
28:c2:f0:40:28:68:67:74:87:d0:f3:5f:60:be:f3:
88:b8:b6:29:88:5a:90:ed:97:5b:3d:10:00:d6:e6:
48:95:9a:db:0f:03:16:92:fe:63:16:3e:b2:c9:9f:
6a:34:8d:49:f1:32:7d:0c:35:1e:d6:5d:78:44:79:
f8:0e:1c:e8:ac:3c:bc:12:d4:29:26:38:e1:76:4a:
0c:26:b4:9f:a4:58:27:66:a8:02:df:e8:84:ee:b0:
8c:11:5c:b0:9c:b2:66:b2:bd:e1:ac:cf:04:0b:a6:
67:5f:0a:3a:24:9c:7f:1b:a2:6a:41:f3:72:ea:6f:
e4:53:a9:49:b4:43:3f:85:b6:e8:a9:f0:a6:86:2c:
d3:21:33:17:4d:4a:7e:b9:98:17:aa:aa:9e:d5:09:
8a:0a:58:52:de:94:42:08:91:8f:7c:cd:ef:d9:c0:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:55:C1:30:C5:92:81:79:91:0F:44:9E:30:B2:B8:9C:AC:BB:1A:EE
X509v3 Authority Key Identifier:
keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:4f:92:7a:63:b7:9c:2d:4e:db:20:8d:b1:49:34:cc:22:29:
61:6e:e7:b0:bf:f0:81:23:cb:18:e3:dc:a6:7e:6c:db:d7:51:
2f:c9:7f:05:12:92:37:57:e8:f6:e0:61:00:42:d0:05:aa:a9:
08:25:e2:90:23:84:e7:c6:73:6d:33:e3:14:37:dd:2b:25:24:
c5:eb:ae:8c:9b:17:ce:99:64:26:a5:85:f3:5b:79:00:62:9b:
04:d0:aa:4a:28:b5:66:5f:81:77:52:21:98:88:3d:f5:8d:78:
a0:d6:bd:9c:b5:05:a8:f0:3a:82:2c:e0:95:f6:93:53:95:72:
bc:56:48:40:20:3a:6d:2f:d5:cf:4d:14:92:11:2f:8b:6e:2d:
25:35:5e:ee:8a:82:ee:80:07:83:65:fc:6f:a8:e1:04:97:c4:
cd:2f:d5:0d:0e:0d:59:c1:27:cd:cb:d4:83:1a:9f:49:d0:71:
9d:f3:6f:0d:b4:da:d9:58:c4:3d:29:cb:99:ac:1f:1a:45:0f:
dc:50:ce:e4:a9:7d:35:6d:a8:68:99:31:a6:a8:79:12:52:cd:
09:7c:ce:7b:ee:6c:0e:6e:d8:af:fb:e7:e4:f8:9a:5f:2b:12:
cf:90:5e:62:d3:e2:b7:69:6d:92:53:82:da:c7:c9:e4:a4:ab:
d6:bc:95:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:40:53 2025 by rpki-client