Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
File: ovb2YTEslb8FoLUjCxNx1GIv1ic.mft (raw, json)
Hash identifier: Im/m8jc0kjLHAWllMEqrXSFjBWngP7xPcuALo+FrI78=
Subject key identifier: 03:22:FA:BF:10:96:81:BA:50:C2:34:B8:57:B0:89:0F:25:96:58:EC
Authority key identifier: A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
Certificate issuer: /CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Certificate serial: 0D28
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
Manifest number: 0D20
Signing time: Tue 08 Apr 2025 18:01:20 +0000
Manifest this update: Tue 08 Apr 2025 18:01:19 +0000
Manifest next update: Tue 15 Apr 2025 18:01:19 +0000
Files and hashes: 1: ovb2YTEslb8FoLUjCxNx1GIv1ic.crl (hash: rNbIYKdNiJVahUMBXU+b0Vr0JlSCNcGrx7kTXy/6v+0=)
2: 05054224D8E411E9BEB7986DC4F9AE02.roa (hash: C8YUnzVpdG1ic9MCuW7celmXkhXkYeCvagfWnZShYbQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3368 (0xd28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7BC4
Validity
Not Before: Apr 8 18:01:19 2025 GMT
Not After : Apr 15 18:01:19 2025 GMT
Subject: CN=67f5646f-4989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:da:ab:cf:0b:0c:89:f1:1e:7f:2d:32:ec:
93:55:33:64:82:15:d9:d6:2a:05:20:21:a9:87:33:
38:47:41:83:79:20:08:09:13:36:54:d2:80:a3:55:
a9:34:1d:9b:4f:15:85:a9:f1:e0:33:bb:36:5b:f0:
ec:56:ab:c7:49:91:b5:40:49:4b:41:80:09:0f:f9:
cf:1d:ba:f1:67:ac:37:f5:83:98:82:37:b9:fe:03:
d5:b4:36:d5:12:24:09:f0:e2:e7:94:62:04:22:91:
79:55:01:bf:e0:00:43:c0:d9:cc:60:36:b7:49:b5:
ec:b7:96:0c:c8:94:ab:b0:51:e5:24:0f:0d:ff:8e:
4c:aa:bf:84:66:80:fe:51:6e:4f:af:68:b8:8c:de:
9e:f5:05:b5:66:53:dd:72:0b:19:63:68:83:a7:e5:
1c:20:88:97:82:0b:15:0d:b2:f7:ce:bb:cd:f0:34:
57:17:eb:c1:50:20:fb:e6:a5:31:12:00:b9:97:59:
81:7a:11:5b:65:f0:a9:4c:77:0e:7e:5a:17:ca:d2:
25:5b:29:2b:9f:56:f4:21:9e:a0:8e:b1:3a:98:d2:
cb:ca:80:a8:7a:96:74:2d:f8:12:63:2b:15:ff:c5:
a5:47:f4:32:4e:fc:a2:c4:e1:e5:b0:bf:44:38:19:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:22:FA:BF:10:96:81:BA:50:C2:34:B8:57:B0:89:0F:25:96:58:EC
X509v3 Authority Key Identifier:
keyid:A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a1:84:74:04:26:a2:64:e7:df:4e:48:56:3a:83:ed:92:ac:
c6:c6:0c:3d:85:f5:e2:32:25:e1:18:41:63:68:8f:86:24:ca:
6d:78:04:0b:ed:40:0b:ba:9b:ab:96:2d:da:55:7a:95:4c:9e:
eb:9c:dc:55:a3:a4:f5:00:e8:47:6f:7c:aa:6b:ba:1b:25:9a:
6d:d8:f5:1b:61:6b:3f:60:64:57:ac:0f:22:ce:54:e3:a3:0f:
c8:b1:0e:34:8f:2a:90:58:e6:31:cc:d9:02:55:65:57:de:48:
10:cd:07:af:08:b1:4a:d3:f4:84:3a:c1:ab:80:b1:53:e6:0a:
ee:35:a7:e1:c7:ba:04:7f:1d:fd:8f:4e:5e:45:33:8d:b6:f5:
51:df:bb:a1:ce:44:a1:a2:f4:8e:b4:6b:e5:70:58:0e:06:3b:
51:b3:18:87:d3:bc:06:fd:95:0e:f7:f6:e1:1f:c3:2c:2b:33:
ad:21:e0:ec:51:86:5f:3e:fd:e8:73:da:1f:10:93:d6:cc:b8:
9c:b7:89:ca:33:17:85:7d:31:56:15:fb:27:02:70:a8:68:ac:
81:16:65:18:a4:07:97:d1:11:1c:a6:11:dc:d9:c3:56:e1:bf:
6e:ba:89:8e:b2:5a:20:63:48:85:7e:12:77:63:83:a5:44:45:
b1:39:d8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:59:10 2025 by rpki-client