Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
File: RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json)
Hash identifier: lJsstlzCaZhY3BYY8oEMQN4SlnsjmSXi0iMhLmckgsM=
Subject key identifier: 08:67:30:3E:EA:22:7E:CA:B8:A0:5E:80:CC:B2:A1:64:A3:1E:BE:6D
Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
Certificate issuer: /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Certificate serial: 0757
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
Manifest number: 0EA0
Signing time: Thu 10 Apr 2025 21:33:07 +0000
Manifest this update: Thu 10 Apr 2025 21:33:06 +0000
Manifest next update: Thu 17 Apr 2025 21:33:06 +0000
Files and hashes: 1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: zI7gbcprfP1Kz/lqRGpntP8RX86CXX/Jpce+jsGWNiQ=)
2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: hkxmNGokisQG0mbBKypviapB/RNUZ9nsMjdRwBRak9A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl
rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 21:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1879 (0x757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Validity
Not Before: Apr 10 21:33:06 2025 GMT
Not After : Apr 17 21:33:06 2025 GMT
Subject: CN=67f83913-bf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:1d:9b:a2:f4:92:58:8b:24:5c:0e:f5:33:
23:ad:3f:59:fe:b8:c2:a5:2d:12:26:d0:a9:8c:76:
61:0c:4e:8d:f7:e0:af:71:1b:a5:61:a8:fe:42:e3:
f8:e8:6b:58:3c:e0:81:ac:29:11:fc:88:6a:2f:73:
cf:4f:7a:00:1a:53:a0:c2:1b:99:2d:75:e2:e9:35:
c6:8e:1f:08:2a:65:a9:75:2f:3c:d0:11:25:95:0f:
e9:2f:4c:48:d9:bd:5e:f7:9d:f3:8c:fb:c3:8b:73:
7a:8d:88:4a:b1:72:d0:af:c6:b3:3c:c4:b4:18:e4:
52:fa:a5:85:42:bc:1a:d5:3b:d2:db:87:fe:0e:3a:
f9:29:9f:03:fc:5b:11:4d:2b:77:72:ba:bb:72:75:
56:ae:4b:64:5f:e2:e0:c4:8d:0f:a8:69:d3:ec:5e:
dc:d3:10:8d:19:61:f8:f0:1e:7c:eb:26:44:8d:d2:
8a:e8:80:1a:72:d8:f0:51:24:83:68:f5:da:8a:84:
f7:31:c6:d9:5d:1f:71:cc:fe:b8:a9:06:cc:f7:9d:
fb:dc:32:e4:17:37:4f:90:b2:1a:fc:bf:ad:e3:91:
6e:08:44:06:69:eb:51:2f:24:df:b4:2e:ba:28:96:
d6:57:29:39:b3:95:8e:38:1d:97:41:7f:38:fb:07:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:67:30:3E:EA:22:7E:CA:B8:A0:5E:80:CC:B2:A1:64:A3:1E:BE:6D
X509v3 Authority Key Identifier:
keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ff:bc:a6:79:b6:46:4a:c5:32:ea:89:6e:2b:21:ec:97:51:
5f:4f:01:58:83:c1:65:2e:22:5a:ec:ed:ac:88:03:d0:b9:50:
db:e9:0c:51:74:d7:55:6a:b4:3c:20:4f:a0:de:d3:a6:60:3b:
4b:26:e8:a8:b4:5a:c2:57:7a:a4:49:aa:5d:6e:80:2e:92:ac:
82:fd:09:03:64:94:9e:f5:7a:fc:ce:5d:ed:54:c6:cf:9e:ac:
27:39:f7:88:68:1b:10:aa:07:15:ae:e2:bb:d3:bf:77:76:f6:
57:7b:62:4d:1c:43:58:1f:a4:9a:3c:56:ca:8c:f1:17:48:c2:
f3:44:54:a4:9a:a0:49:8f:4f:80:06:02:94:c6:7c:2a:7c:ab:
84:dd:f5:71:15:5d:5d:14:91:98:eb:4f:d4:16:e5:48:f0:1d:
83:af:ce:b2:ae:c1:3b:86:37:20:91:3d:1b:b4:58:66:c7:4c:
34:27:dd:f7:8c:b1:59:5f:9c:84:c7:6f:31:8f:5f:a4:4e:85:
e9:41:d5:32:26:c9:21:79:63:5e:1e:20:6b:e2:4e:7e:4f:d1:
f1:12:b2:de:7b:84:a7:d9:03:6c:bc:31:2c:06:9b:22:0c:92:
a0:73:0e:cd:7f:bb:f2:fe:53:fb:fd:91:81:92:e6:d9:f0:82:
ef:c1:2e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:40:38 2025 by rpki-client