Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
File: rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json)
Hash identifier: UpdZto3jgQPVYffSEAfF4DkJgY9CflcSYrMP5A6KDZ4=
Subject key identifier: B7:7C:C7:45:29:22:DA:73:17:9F:7C:5C:73:C6:07:DC:A6:99:00:BD
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
Manifest number: 0BB9
Signing time: Sat 12 Apr 2025 19:13:46 +0000
Manifest this update: Sat 12 Apr 2025 19:13:46 +0000
Manifest next update: Sat 19 Apr 2025 19:13:46 +0000
Files and hashes: 1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: OlekmC4+4f0pqVRSzPtQe1qhZcMPO2PdMZXfyuwNSNs=)
2: 6360524E03D311F0A6C64177C4F9AE02.roa (hash: aDdJ1zHHJM2Pp/llY4+TjUByw8VD+3beZi6B31AyTJ8=)
3: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (hash: fNb48r4M+gfLXajaKFGp8VWXxugH32v0si+d8iboCho=)
4: FF5213E8A81D11EFA74FFD31C4F9AE02.roa (hash: EO+r4YCRXrWQGjZoJ/CD1KsxdVzlBHVNlbdYh39PLSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 19:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Validity
Not Before: Apr 12 19:13:46 2025 GMT
Not After : Apr 19 19:13:46 2025 GMT
Subject: CN=67fabb6a-b51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:2b:9f:1f:8b:16:2d:28:60:c1:33:02:c5:
73:0b:5c:fb:7f:89:a5:e1:31:12:57:7b:32:4d:a2:
20:1e:43:61:97:d6:e6:47:a4:03:9f:93:b1:a5:22:
ac:74:21:00:28:b4:90:7a:b2:f5:74:1b:e2:4a:dc:
f8:f9:21:d2:7f:1d:64:df:26:02:94:99:ce:a2:14:
6d:57:b3:97:f8:f1:a5:08:6a:16:be:b8:00:78:10:
a9:fa:7e:11:81:07:6e:e4:c7:7b:9f:65:63:21:97:
f8:80:52:bf:00:8e:c6:88:ca:db:7b:06:23:80:d9:
bb:df:56:30:dd:7e:f1:9d:c2:83:e3:5d:51:e9:4b:
46:9f:04:11:77:03:6b:ae:11:92:61:23:71:2e:d4:
98:45:46:98:37:8f:1a:71:30:9e:84:ff:9a:a9:db:
a1:bc:a1:9c:2d:b9:69:c6:ef:b8:af:e7:71:4b:0f:
d2:d9:21:8f:bd:cf:6b:fc:6f:78:73:15:55:6b:fa:
7e:d0:c0:7c:bf:b3:57:b7:c8:7a:68:b8:ff:c2:13:
76:c6:0c:d9:72:8c:0e:ac:b7:dd:d4:b7:7c:3f:e1:
a4:7b:f0:d7:a6:4a:79:aa:dc:f9:a4:a8:67:2c:0e:
0f:b2:66:7b:80:c8:93:eb:36:2c:81:29:62:21:ae:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7C:C7:45:29:22:DA:73:17:9F:7C:5C:73:C6:07:DC:A6:99:00:BD
X509v3 Authority Key Identifier:
keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:47:f6:8a:2d:f3:61:72:2d:67:c5:bc:e9:be:61:72:5d:f2:
1e:73:32:7f:fe:c4:d9:51:9b:58:b9:ad:3d:95:75:9b:66:55:
3a:07:ee:fb:4a:04:86:50:80:d0:e3:1b:5b:14:28:4f:54:f8:
4d:cb:88:59:4c:94:bc:4e:54:62:8a:50:4e:e0:b9:71:69:05:
fd:ed:3e:85:b0:d5:1a:1c:85:bf:0c:2a:8f:ff:ac:2e:cb:4c:
54:9c:b2:80:63:1b:5f:7d:f3:23:70:96:de:0c:81:cc:6f:72:
4f:4e:0a:c0:5e:b7:3b:df:a5:f8:19:f5:20:86:64:5d:dd:3c:
f2:a7:32:15:fc:7f:27:1f:ba:2f:00:23:b5:98:d9:f4:2a:31:
72:e4:be:ce:e7:47:51:7b:2a:04:37:ef:da:d9:0b:49:58:2c:
0e:6c:86:81:23:34:c5:f2:dd:aa:b3:e0:ac:51:dd:f7:89:34:
77:e5:e5:05:3c:38:60:63:70:9a:b2:cb:f1:be:9d:04:33:a1:
62:5f:ac:70:6c:98:8b:2d:38:85:02:73:de:40:a9:cb:c8:ea:
c1:63:0b:90:37:6f:05:2a:27:ee:2f:9d:6a:ad:bc:e1:5f:c0:
db:8b:d6:cf:74:bf:ba:4f:40:3d:bb:80:31:d2:49:a9:bd:c6:
e2:34:a3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 17:50:01 2025 by rpki-client