Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
File: mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json)
Hash identifier: PpDrjYibvviiXA8dob875ifKtG4YH4EGzsfx2qDu4sY=
Subject key identifier: 3E:4F:94:53:0A:EF:1C:F2:77:3E:94:1B:6F:AB:08:2D:88:C6:5A:74
Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
Manifest number: C2
Signing time: Wed 09 Apr 2025 04:43:27 +0000
Manifest this update: Wed 09 Apr 2025 04:43:26 +0000
Manifest next update: Wed 16 Apr 2025 04:43:26 +0000
Files and hashes: 1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: FAYQ3JIifDaHradXFMaws0RWwhivBLbBTYNFxbVCloE=)
2: A146F2C2ECD011EE8891034AC4F9AE02.roa (hash: 39u+3z7NTrOVqsJcMoLGpjbEQiERAqJS+HnJZxNpbpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 04:43:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3989
Validity
Not Before: Apr 9 04:43:26 2025 GMT
Not After : Apr 16 04:43:26 2025 GMT
Subject: CN=67f5faef-1028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bd:ad:ea:18:7e:58:52:15:42:5d:c9:eb:b2:
24:c7:01:ef:70:dd:07:7e:e0:a1:6d:a9:cc:d2:aa:
3f:54:00:97:35:90:2e:ef:7c:88:4d:b2:82:e6:79:
9f:f9:2f:0d:7b:e9:1a:75:7a:2e:e2:29:6b:67:58:
ab:75:bc:6d:ff:d9:73:55:46:4b:a2:af:ac:54:64:
8e:1a:a7:e5:df:c4:25:e0:4e:42:ba:ef:64:50:08:
e8:a9:1f:2e:81:7d:c4:12:79:e9:cf:7a:2c:b4:32:
35:f0:44:0a:94:f4:f8:24:87:ac:3f:41:9e:bd:a0:
ae:f7:7d:e0:97:52:31:47:e1:96:bb:21:ea:0f:0c:
10:c0:4b:af:e1:bc:ff:ce:e8:b5:15:3b:60:20:d0:
d5:d2:4d:74:87:07:6c:14:44:74:35:e3:52:b6:c0:
6c:57:c6:f1:88:87:45:88:59:32:6b:4c:b8:e2:06:
33:0a:87:fa:e6:a8:10:3d:15:ce:62:4a:6a:c9:77:
ac:87:c8:a0:98:a3:d7:5a:88:62:be:ab:05:de:6a:
c5:8c:66:2f:d4:9a:c8:26:11:8f:93:1f:a4:48:36:
57:f0:56:e2:bb:22:8f:dc:f2:ba:25:ff:18:df:d9:
fd:45:da:09:c7:6c:d4:4f:00:b7:5f:50:2a:ab:89:
23:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4F:94:53:0A:EF:1C:F2:77:3E:94:1B:6F:AB:08:2D:88:C6:5A:74
X509v3 Authority Key Identifier:
keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:69:96:39:53:87:45:c3:5b:eb:4a:be:41:1d:a6:00:bd:49:
67:9b:e0:08:75:c9:a5:74:8d:89:f6:5a:1a:05:5d:f0:16:2f:
65:18:5f:10:d3:f2:0d:56:9d:d9:36:db:b0:5b:dd:1a:bf:aa:
8a:06:f3:f2:40:cd:01:c7:75:db:5f:85:a7:11:46:ae:6c:5e:
44:cd:05:bd:d6:ba:7b:49:91:86:ea:e2:48:a2:e2:86:4a:06:
aa:fa:d4:2c:95:47:37:5b:57:d0:1e:1e:c7:47:c5:8f:9c:81:
91:f4:8a:87:3f:b1:53:98:3c:c4:98:3e:e4:c5:09:67:2e:b2:
01:0c:4b:ab:73:6e:7e:29:36:0d:f5:79:f3:46:f6:a9:1e:e9:
8f:cf:15:73:1a:35:69:93:d6:5b:34:29:36:22:b7:d0:f7:03:
2f:4d:51:cf:3f:ee:cb:95:49:96:e1:57:18:96:5e:d0:9c:48:
ea:c2:10:5e:1e:af:ba:f1:46:b9:18:ec:64:03:6a:a2:21:55:
9a:37:04:b7:a1:98:bc:ea:42:d7:b4:46:fe:c8:18:e1:f7:03:
a0:ba:45:cc:40:12:78:d0:c7:b1:9b:17:25:1c:78:89:43:81:
dd:f0:be:49:7b:95:6f:eb:44:e3:77:0d:ac:ae:bc:cd:17:ed:
cd:5b:b6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:00:58 2025 by rpki-client