Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
File: rea1d9VLWrCQBc5hO7E2SGUuams.mft (raw, json)
Hash identifier: k0If/Iir2Rg4s5km10OLatP2aZ8LrOuHs9CdkHSWf/o=
Subject key identifier: E2:DE:B9:97:E7:B1:74:FC:8D:60:86:AE:0B:30:77:5F:1A:D8:E3:0F
Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B
Certificate issuer: /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
Certificate serial: 053E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
Manifest number: 053A
Signing time: Tue 08 Apr 2025 23:12:15 +0000
Manifest this update: Tue 08 Apr 2025 23:12:15 +0000
Manifest next update: Tue 15 Apr 2025 23:12:14 +0000
Files and hashes: 1: rea1d9VLWrCQBc5hO7E2SGUuams.crl (hash: 3zFbCL++R30S1b/CldFbEZv60lg4SXEefk7HDAmFvWk=)
2: A1491F7CEB7811EB9134133BC4F9AE02.roa (hash: yAlIecRARh3umrfcsK/yx6rBFPCYyzog9iWJaTHp1QU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl
rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 23:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1342 (0x53e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4553
Validity
Not Before: Apr 8 23:12:15 2025 GMT
Not After : Apr 15 23:12:14 2025 GMT
Subject: CN=67f5ad4f-5990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:a9:55:2a:cd:37:40:64:0a:a6:c7:9d:89:
c4:bc:d4:fc:71:2b:17:4c:93:3a:f9:53:f7:3a:ea:
b1:ef:06:ce:fb:35:2e:a0:cb:aa:53:d6:dd:03:53:
1b:9e:d7:7a:f4:b6:a0:5f:48:f5:6e:20:20:65:bd:
e4:cc:ad:09:13:5e:86:23:95:4d:d4:25:9e:20:4d:
ca:2f:cb:07:f5:35:99:7a:b3:be:7e:33:fe:4e:75:
4a:3e:c6:7c:77:f6:69:93:a2:e7:26:24:80:ee:dc:
b7:9a:dd:7f:38:aa:39:93:87:ba:7d:83:5a:d9:28:
8f:39:d5:c7:da:22:53:4a:fe:a0:7c:1e:3b:51:a7:
8a:d4:28:35:05:7c:37:ac:f3:f5:e2:fd:bc:08:3a:
e3:38:3a:11:d4:db:7f:18:43:9f:b4:d8:9d:77:c0:
d0:00:52:b1:5c:9b:88:5c:7a:81:f9:4c:f8:52:68:
58:a4:3e:a8:83:a1:12:94:cc:58:10:29:61:3d:66:
23:61:fe:cb:bd:10:0d:a5:88:49:1b:32:3e:fa:72:
4b:45:90:ac:6a:8c:3f:86:f1:30:5c:65:16:2c:a0:
0e:11:6c:e8:9e:e7:de:d5:02:9d:e1:cb:f8:d1:b8:
97:51:b0:d1:15:59:6d:c8:dc:5b:b9:14:c1:1e:c0:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DE:B9:97:E7:B1:74:FC:8D:60:86:AE:0B:30:77:5F:1A:D8:E3:0F
X509v3 Authority Key Identifier:
keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a5:76:16:23:47:58:ec:16:e5:5a:e0:0d:c1:88:93:6c:c2:
bc:c0:d5:ac:58:d6:9d:ec:dd:3c:54:f9:b2:26:af:6b:9a:30:
34:89:f5:99:df:ce:10:7e:0e:8e:50:28:09:25:a7:9a:c9:0f:
89:e6:c4:23:2f:01:29:80:52:87:56:5e:c5:71:e5:28:ef:0d:
88:fa:16:11:cd:c5:07:37:ef:be:c2:b9:8d:81:b9:0b:fb:31:
5c:eb:4d:84:c2:c2:cc:6d:af:71:42:a3:47:71:24:cd:77:18:
81:0b:43:28:ee:ed:05:2e:ba:bf:4b:6c:5e:86:52:8a:53:b0:
98:45:a6:24:07:ba:11:0a:c5:65:22:db:88:cf:76:f5:ad:e3:
57:fc:64:d8:1c:3f:06:6e:6d:80:ed:29:3c:9a:d4:f7:ba:be:
1e:90:63:6c:1b:81:fb:74:be:31:f7:8f:57:4a:34:6c:61:2c:
ef:a7:55:fe:93:89:94:d9:28:f5:aa:ee:5f:84:e6:87:28:ab:
28:fc:c6:35:91:b8:2a:2e:78:4a:8e:ac:da:ca:ef:04:7e:68:
dc:77:79:d1:cc:36:36:87:7c:7f:79:8e:51:a5:08:23:b8:0f:
65:f9:45:19:29:0e:4f:a6:c9:44:6a:43:bc:b5:97:ae:5f:81:
74:c9:a0:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQ1NTMxMTAvBgNVBAUTKEFERTZCNTc3RDU0QjVBQjA5MDA1Q0U2MTNCQjEzNjQ4
NjUyRTZBNkIwHhcNMjUwNDA4MjMxMjE1WhcNMjUwNDE1MjMxMjE0WjAYMRYwFAYD
VQQDEw02N2Y1YWQ0Zi01OTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnmSpVSrNN0BkCqbHnYnEvNT8cSsXTJM6+VP3Ouqx7wbO+zUuoMuqU9bdA1Mb
ntd69LagX0j1biAgZb3kzK0JE16GI5VN1CWeIE3KL8sH9TWZerO+fjP+TnVKPsZ8
d/Zpk6LnJiSA7ty3mt1/OKo5k4e6fYNa2SiPOdXH2iJTSv6gfB47UaeK1Cg1BXw3
rPP14v28CDrjODoR1Nt/GEOftNidd8DQAFKxXJuIXHqB+Uz4UmhYpD6og6ESlMxY
EClhPWYjYf7LvRANpYhJGzI++nJLRZCsaow/hvEwXGUWLKAOEWzonufe1QKd4cv4
0biXUbDRFVltyNxbuRTBHsAYTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLeuZfn
sXT8jWCGrgswd18a2OMPMB8GA1UdIwQYMBaAFK3mtXfVS1qwkAXOYTuxNkhlLmpr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDU1My80RDIzQkIwRUVC
NzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdyQ1FCYzVoTzdFMlNHVXVh
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JlYTFkOVZMV3JDUUJjNWhPN0UyU0dVdWFtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDU1My80RDIzQkIwRUVCNzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdy
Q1FCYzVoTzdFMlNHVXVhbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBapXYWI0dY7BblWuANwYiTbMK8wNWsWNad7N08VPmyJq9rmjA0ifWZ
384Qfg6OUCgJJaeayQ+J5sQjLwEpgFKHVl7FceUo7w2I+hYRzcUHN+++wrmNgbkL
+zFc602EwsLMba9xQqNHcSTNdxiBC0Mo7u0FLrq/S2xehlKKU7CYRaYkB7oRCsVl
ItuIz3b1reNX/GTYHD8Gbm2A7Sk8mtT3ur4ekGNsG4H7dL4x949XSjRsYSzvp1X+
k4mU2Sj1qu5fhOaHKKso/MY1kbgqLnhKjqzayu8Efmjcd3nRzDY2h3x/eY5RpQgj
uA9l+UUZKQ5PpslEakO8tZeuX4F0yaDO
-----END CERTIFICATE-----
Generated at Thu Apr 10 13:33:05 2025 by rpki-client