Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
File: mom7N8VDhtqah6ZP8AlEKKMXGkc.mft (raw, json)
Hash identifier: nn8gIcik4s4JjjuXd4hA/NOsMMiG5BhdrFBJLOpGy1w=
Subject key identifier: 18:38:78:64:3D:9D:97:E6:68:38:3C:78:EC:5B:98:85:D8:28:D2:B1
Authority key identifier: 9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47
Certificate issuer: /CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
Manifest number: E8
Signing time: Mon 07 Apr 2025 04:30:45 +0000
Manifest this update: Mon 07 Apr 2025 04:30:44 +0000
Manifest next update: Mon 14 Apr 2025 04:30:44 +0000
Files and hashes: 1: mom7N8VDhtqah6ZP8AlEKKMXGkc.crl (hash: eqGOfwMKNVCekRkm1tMrcm/z5G1TfEeVKxWJcUzYV3Q=)
2: 00E1AC30FBAA11EE9C7F3921C4F9AE02.roa (hash: 29v8ayhOME61rr4geagSM3a8sHvyVhtwUdXNMoV9ZDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl
rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 04:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF73D
Validity
Not Before: Apr 7 04:30:44 2025 GMT
Not After : Apr 14 04:30:44 2025 GMT
Subject: CN=67f354f5-d7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2b:ec:b1:c8:70:c5:0a:b6:91:21:df:8d:cf:
e9:bb:92:4d:21:2f:dc:f4:21:71:e3:55:e6:69:54:
0f:58:ee:c7:89:dd:d1:b2:3d:3f:17:1d:da:f7:3d:
cd:b4:71:f9:f6:ba:4a:fe:38:99:c4:5c:ba:27:5c:
9c:ba:bf:47:92:8c:f7:9c:54:8c:a4:de:e5:c5:62:
57:a2:e7:c0:31:8a:7a:1f:a3:a9:0a:e1:1a:c4:d5:
18:c4:bf:19:ae:d2:79:ea:71:01:10:3f:f1:32:32:
ce:86:db:c7:27:a4:8b:6c:1c:f4:79:9e:ee:dc:51:
95:fd:5d:e1:6a:6b:f3:3d:18:9d:a9:1f:63:4b:84:
93:51:de:d5:ca:ab:0a:d0:0f:1f:7f:fa:7d:e0:7c:
8f:b8:5a:6c:64:70:7d:3c:5e:e1:7d:28:1a:f3:f4:
1e:7b:a0:56:b2:26:43:65:b6:c9:d7:f9:0b:1b:74:
a1:fe:2d:69:ac:be:5d:50:91:00:53:e9:f5:22:87:
cf:d4:3d:2c:12:92:35:65:54:0d:69:a3:fd:13:a7:
1a:de:6d:30:97:21:a2:31:8c:e0:45:46:00:02:6b:
87:27:9e:b0:4c:9d:81:96:b2:dc:9a:79:20:37:33:
96:b6:19:a9:c0:05:b8:46:bd:45:a1:0f:ae:7f:58:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:38:78:64:3D:9D:97:E6:68:38:3C:78:EC:5B:98:85:D8:28:D2:B1
X509v3 Authority Key Identifier:
keyid:9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ee:56:59:40:85:87:27:98:d9:97:1a:63:71:98:a2:38:f8:
ba:46:70:d1:bd:0f:29:68:6d:25:ed:e4:71:29:54:c1:1b:23:
fc:aa:f2:4c:2f:ce:c8:e0:93:70:64:71:0e:2b:78:0f:d9:c8:
77:95:aa:09:3d:58:e9:17:e3:75:dd:4a:e1:49:85:a0:de:a5:
41:bd:3d:64:26:41:de:ff:50:4e:39:2c:8a:20:a6:f9:17:2f:
a2:89:19:90:46:df:57:95:c6:86:88:63:75:e5:e4:37:af:5b:
d5:c0:1e:41:72:30:d4:9c:dd:84:0f:ee:ac:35:cd:e5:4e:d4:
b8:c4:13:26:a3:67:cc:5c:6e:c9:1b:b7:64:c0:60:c9:d2:9e:
78:2e:23:ac:19:f7:11:ea:78:0e:58:9d:d2:47:95:b7:8a:c6:
61:76:43:2e:02:4e:9f:ee:ff:be:71:5c:8a:49:2a:fb:4f:cf:
24:58:c3:e0:35:7a:a6:d5:19:53:4d:77:df:f5:cf:a1:62:b3:
d9:eb:2c:b0:e2:90:71:32:4e:1d:9e:7e:07:ff:c1:ff:f8:41:
14:b5:48:69:2c:51:07:11:31:6c:70:ad:ae:9f:12:f0:d1:3b:
88:98:51:bc:af:93:20:8e:4f:80:09:89:b2:7f:09:a5:b8:2e:
2b:27:4a:70
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY3M0QxMTAvBgNVBAUTKDlBODlCQjM3QzU0Mzg2REE5QTg3QTY0RkYwMDk0NDI4
QTMxNzFBNDcwHhcNMjUwNDA3MDQzMDQ0WhcNMjUwNDE0MDQzMDQ0WjAYMRYwFAYD
VQQDEw02N2YzNTRmNS1kN2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0yvsschwxQq2kSHfjc/pu5JNIS/c9CFx41XmaVQPWO7Hid3Rsj0/Fx3a9z3N
tHH59rpK/jiZxFy6J1ycur9Hkoz3nFSMpN7lxWJXoufAMYp6H6OpCuEaxNUYxL8Z
rtJ56nEBED/xMjLOhtvHJ6SLbBz0eZ7u3FGV/V3hamvzPRidqR9jS4STUd7VyqsK
0A8ff/p94HyPuFpsZHB9PF7hfSga8/Qee6BWsiZDZbbJ1/kLG3Sh/i1prL5dUJEA
U+n1IofP1D0sEpI1ZVQNaaP9E6ca3m0wlyGiMYzgRUYAAmuHJ56wTJ2BlrLcmnkg
NzOWthmpwAW4Rr1FoQ+uf1i2iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBg4eGQ9
nZfmaDg8eOxbmIXYKNKxMB8GA1UdIwQYMBaAFJqJuzfFQ4bamoemT/AJRCijFxpH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczRC9DOTJCMzIzMkNF
MUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9tb203TjhWRGh0cWFoNlpQOEFsRUtLTVhH
a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21vbTdOOFZEaHRxYWg2WlA4QWxFS0tNWEdrYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjczRC9DOTJCMzIzMkNFMUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9tb203TjhWRGh0
cWFoNlpQOEFsRUtLTVhHa2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBv7lZZQIWHJ5jZlxpjcZiiOPi6RnDRvQ8paG0l7eRxKVTBGyP8qvJM
L87I4JNwZHEOK3gP2ch3laoJPVjpF+N13UrhSYWg3qVBvT1kJkHe/1BOOSyKIKb5
Fy+iiRmQRt9XlcaGiGN15eQ3r1vVwB5BcjDUnN2ED+6sNc3lTtS4xBMmo2fMXG7J
G7dkwGDJ0p54LiOsGfcR6ngOWJ3SR5W3isZhdkMuAk6f7v++cVyKSSr7T88kWMPg
NXqm1RlTTXff9c+hYrPZ6yyw4pBxMk4dnn4H/8H/+EEUtUhpLFEHETFscK2unxLw
0TuImFG8r5Mgjk+ACYmyfwmluC4rJ0pw
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:47:19 2025 by rpki-client