Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
File: T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json)
Hash identifier: Jccx61IFXIehxACMPw8EAswdoWfVa+0sPi4t663ofIQ=
Subject key identifier: 6C:4B:04:3F:11:DA:AF:C8:D3:5B:B0:78:39:BD:FC:45:A4:89:E3:87
Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38
Certificate issuer: /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
Certificate serial: 0C80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
Manifest number: 0C79
Signing time: Tue 08 Apr 2025 18:12:35 +0000
Manifest this update: Tue 08 Apr 2025 18:12:35 +0000
Manifest next update: Tue 15 Apr 2025 18:12:35 +0000
Files and hashes: 1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: QQ4NUqf21qi6GK6Pwkw5qOM4YmlkIW1UVBrUSU//eo8=)
2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: oJosadtw5w9tpArhAwGt/EEeiGusbxI8nMtN4HfNB7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl
rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 18:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3200 (0xc80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3C42
Validity
Not Before: Apr 8 18:12:35 2025 GMT
Not After : Apr 15 18:12:35 2025 GMT
Subject: CN=67f56713-2ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:90:f3:b7:1f:5b:a2:0b:86:85:41:7a:b9:
ca:32:eb:0a:53:f9:30:b0:0a:b4:99:78:52:9d:30:
c7:70:ab:71:9e:c0:be:f1:db:0b:32:45:c3:e9:e6:
cc:99:1b:88:21:71:6e:52:3a:6f:f5:93:72:d3:36:
80:ef:43:a0:3d:a5:56:ed:5a:85:26:b0:af:b8:80:
ba:81:ad:ec:d0:0e:12:2f:bb:a7:f6:87:6e:72:18:
e9:97:9b:56:6f:e3:55:4b:b8:04:65:67:80:3d:dc:
4e:f6:29:b9:03:12:a1:49:f7:6b:91:78:ed:53:d9:
12:68:55:f3:e4:8a:fc:92:ea:1e:8d:d1:e4:76:f2:
28:57:1e:34:24:cb:2e:f5:09:db:88:78:77:43:49:
32:00:3b:80:1b:74:7a:41:44:53:25:8a:31:35:73:
b5:05:bd:43:a7:35:69:9b:34:f6:f9:3e:58:11:44:
09:a6:e3:af:6e:a4:13:ab:ce:21:57:c6:46:e4:01:
f3:61:cc:a4:d4:6f:74:6d:8d:fd:96:56:3d:55:03:
12:e2:06:62:24:9f:99:5f:bd:6f:77:75:34:25:d2:
6a:8f:70:10:45:11:d2:f5:c4:30:7e:40:61:9f:81:
86:74:c3:ee:8a:e7:b5:bd:94:54:de:59:88:50:7f:
15:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4B:04:3F:11:DA:AF:C8:D3:5B:B0:78:39:BD:FC:45:A4:89:E3:87
X509v3 Authority Key Identifier:
keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:c5:f5:5f:e0:26:72:fa:74:0f:16:3b:04:e7:66:f9:c6:a5:
fb:2a:db:7a:ee:2e:90:99:09:44:b1:3c:f9:79:98:e3:86:82:
3e:53:70:7b:f7:62:cd:6c:ed:76:f4:ae:c7:14:4a:1b:a8:90:
b9:26:9a:3c:c7:ab:bc:f5:0e:c4:41:ae:a5:d5:21:fc:32:80:
c0:be:cf:94:6f:33:d4:82:6e:17:d3:9e:2a:c9:02:7e:b4:94:
21:df:9c:87:c9:6c:72:4e:ef:c3:c6:d5:d7:df:4b:fd:4f:dd:
ee:88:d5:06:ef:4c:b7:dc:67:f1:d3:3d:ac:bb:3a:05:81:74:
d8:a9:41:c8:bc:8b:5a:70:9b:42:b3:12:2c:5e:d6:67:29:d7:
ad:ab:01:31:d0:6f:06:04:fa:d1:df:50:d8:6d:5e:af:f9:17:
36:fb:4a:4b:ff:05:54:36:7e:1f:9b:63:e1:9e:59:85:ac:b0:
d3:01:38:95:b1:c6:9d:fe:22:3b:08:f6:25:be:72:c8:95:ee:
40:d8:44:35:e1:3b:65:75:81:66:48:b2:9f:d3:cb:dd:f8:45:
13:ed:ef:69:61:05:da:72:66:92:30:7f:73:ff:f5:17:21:34:
5c:ad:7d:29:5b:ba:cd:97:23:d9:ff:d9:67:b2:99:d3:51:1d:
eb:84:5d:0a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNDNDIxMTAvBgNVBAUTKDRGRUY2NTA3QjI1NUQ4MDY2QTBEQTNGRjI3RDM5NTQ2
OEIxNTJEMzgwHhcNMjUwNDA4MTgxMjM1WhcNMjUwNDE1MTgxMjM1WjAYMRYwFAYD
VQQDEw02N2Y1NjcxMy0yZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvB2Q87cfW6ILhoVBernKMusKU/kwsAq0mXhSnTDHcKtxnsC+8dsLMkXD6ebM
mRuIIXFuUjpv9ZNy0zaA70OgPaVW7VqFJrCvuIC6ga3s0A4SL7un9oduchjpl5tW
b+NVS7gEZWeAPdxO9im5AxKhSfdrkXjtU9kSaFXz5Ir8kuoejdHkdvIoVx40JMsu
9QnbiHh3Q0kyADuAG3R6QURTJYoxNXO1Bb1DpzVpmzT2+T5YEUQJpuOvbqQTq84h
V8ZG5AHzYcyk1G90bY39llY9VQMS4gZiJJ+ZX71vd3U0JdJqj3AQRRHS9cQwfkBh
n4GGdMPuiue1vZRU3lmIUH8VewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxLBD8R
2q/I01uweDm9/EWkieOHMB8GA1UdIwQYMBaAFE/vZQeyVdgGag2j/yfTlUaLFS04
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M0Mi8zRkIzQjhEOEY1
NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJBWnFEYVBfSjlPVlJvc1ZM
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1QtOWxCN0pWMkFacURhUF9KOU9WUm9zVkxUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
M0M0Mi8zRkIzQjhEOEY1NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJB
WnFEYVBfSjlPVlJvc1ZMVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBJxfVf4CZy+nQPFjsE52b5xqX7Ktt67i6QmQlEsTz5eZjjhoI+U3B7
92LNbO129K7HFEobqJC5Jpo8x6u89Q7EQa6l1SH8MoDAvs+UbzPUgm4X054qyQJ+
tJQh35yHyWxyTu/DxtXX30v9T93uiNUG70y33Gfx0z2suzoFgXTYqUHIvItacJtC
sxIsXtZnKdetqwEx0G8GBPrR31DYbV6v+Rc2+0pL/wVUNn4fm2PhnlmFrLDTATiV
scad/iI7CPYlvnLIle5A2EQ14TtldYFmSLKf08vd+EUT7e9pYQXacmaSMH9z//UX
ITRcrX0pW7rNlyPZ/9lnspnTUR3rhF0K
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:09:09 2025 by rpki-client