Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
File: 6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json)
Hash identifier: 3H5wKs/jQr+ZFvzQ2/wep+mSQRV2i0Hlvbhm3m22TFA=
Subject key identifier: 8F:B9:FB:A0:B5:27:7F:E0:BE:F3:B5:E7:FD:1A:1F:15:5F:A1:40:80
Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E
Certificate issuer: /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
Manifest number: 67
Signing time: Thu 17 Apr 2025 05:46:31 +0000
Manifest this update: Thu 17 Apr 2025 05:46:30 +0000
Manifest next update: Thu 24 Apr 2025 05:46:30 +0000
Files and hashes: 1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: ID6vrGdRrhYnrxWYeKdxsWbC37J+BVmRqG7SzAWyTYs=)
2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: lpawVFjrLTQaiIY8ph0aOBiFjAIuxDOp5nWen5zsXsU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl
rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Apr 2025 04:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFCFF, serialNumber=E8D6D421282B9019000097761A2563223CA7815E
Validity
Not Before: Apr 17 05:46:30 2025 GMT
Not After : Apr 24 05:46:30 2025 GMT
Subject: CN=680095b7-2724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:b7:df:ca:9e:f9:67:f0:67:97:64:12:97:
8f:7f:c8:25:7a:48:02:75:ff:65:95:af:d7:9b:0d:
2a:c2:ac:f6:ed:25:c3:dd:78:63:06:f5:30:0f:69:
1e:fb:e0:c3:33:e0:ea:e2:39:c0:91:5b:ea:44:ac:
27:79:a6:35:19:d7:57:2a:63:a9:37:a1:c6:a8:9e:
0c:ab:dc:e6:61:2d:17:41:aa:3f:4d:7c:ad:bf:7c:
83:79:47:35:53:38:3a:6e:c0:b6:30:32:d5:8d:68:
cf:f1:14:f1:11:6e:a4:02:de:01:00:f8:bf:41:5f:
ac:8f:96:ee:a6:57:0c:47:8b:7d:a7:25:66:25:ff:
15:11:0d:78:3a:69:84:2c:64:46:4c:76:a0:e4:4c:
41:49:b4:c9:91:82:2a:08:7a:68:98:cd:11:04:3b:
83:9b:b7:40:3c:bb:9b:8a:f0:dd:3f:78:a3:8f:3d:
ea:a2:78:5e:92:d9:cc:db:7a:52:f9:3d:71:b0:20:
9a:e5:10:1e:ba:99:2f:23:5c:a2:a4:2e:48:32:8c:
b1:c8:08:e6:3a:ae:6a:aa:d4:43:80:9c:3e:ba:bb:
9c:06:ab:be:32:ca:50:d6:04:44:82:ae:4d:f4:2b:
ab:c0:2a:6a:00:63:3f:04:17:cc:2b:bd:02:c4:0b:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B9:FB:A0:B5:27:7F:E0:BE:F3:B5:E7:FD:1A:1F:15:5F:A1:40:80
X509v3 Authority Key Identifier:
keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:20:9e:c6:a9:97:c5:e6:88:75:9a:63:fb:c5:a8:35:a2:9a:
89:37:08:f2:8c:a0:52:f5:bb:1a:0f:d3:1f:49:1a:2c:f7:ea:
86:9c:f1:6e:d9:33:e9:a3:f5:8c:a5:29:0f:9d:95:79:e1:a8:
87:f0:77:29:92:d1:fb:4e:b9:bc:e2:1a:bd:85:f6:09:20:8d:
b9:1a:4a:71:e5:4e:67:fe:86:39:3b:7a:01:63:20:32:80:41:
75:9a:24:f7:99:d6:77:7a:e6:33:67:c1:8a:db:71:66:8e:1c:
cf:54:32:42:50:94:ee:1a:6c:5f:65:f9:bf:48:fd:0c:3f:da:
46:23:87:f1:37:47:d6:d8:29:04:71:bc:54:c8:4e:cb:d4:64:
5f:fa:57:7b:18:b5:f5:2d:f9:ed:57:26:8b:97:69:0e:9c:21:
7d:34:86:48:58:6e:f4:5c:1c:d7:f2:97:d1:71:6f:92:4b:c5:
2c:46:22:19:a6:29:1d:21:93:76:96:bc:8a:4d:14:f2:c3:57:
9e:b6:94:c7:37:e3:8a:43:a9:e0:cf:5d:6b:26:48:7a:b1:48:
47:30:92:1f:13:5f:e1:8c:0d:91:43:8b:7b:69:0c:32:ed:65:
bc:75:eb:af:25:d1:6a:2a:67:ac:24:5b:9d:89:14:2b:26:a3:
1f:18:09:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:04:56 2025 by rpki-client