Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
File: 4WPw_lTxea9MbAlwmP774tQ4Wxk.mft (raw, json)
Hash identifier: rt4KytIXZuIv6o5kDTvgoVdTrr6Dw1s7WEp7jOqEoNg=
Subject key identifier: 69:E7:35:07:22:0E:71:96:35:6E:BE:56:EA:E0:6D:35:86:91:F4:56
Authority key identifier: E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19
Certificate issuer: /CN=A91F54CD/serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
Manifest number: 14
Signing time: Wed 09 Apr 2025 06:51:50 +0000
Manifest this update: Wed 09 Apr 2025 06:51:50 +0000
Manifest next update: Wed 16 Apr 2025 06:51:50 +0000
Files and hashes: 1: 4WPw_lTxea9MbAlwmP774tQ4Wxk.crl (hash: GZ9gKSligIquNIRw9600HaIMJ+KfAo/HYsFW4x7KINA=)
2: 2CA96408FD8811EF9404CD48C4F9AE02.roa (hash: ijzYb1r/oyAKx1Hjreuyv8IcJPnhFB/m1NQeL+FUTHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl
rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 06:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F54CD
Validity
Not Before: Apr 9 06:51:50 2025 GMT
Not After : Apr 16 06:51:50 2025 GMT
Subject: CN=67f61906-f4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5c:a7:a4:5e:81:7b:62:d4:12:c0:9d:ce:31:
75:e6:5c:26:71:68:46:95:33:23:70:20:2b:f8:88:
3f:4d:62:3f:ee:c3:41:d7:33:86:c5:3b:09:31:bc:
e0:8d:75:84:5b:d9:a9:9f:d8:b2:7a:46:42:45:55:
f2:41:d2:a5:87:fe:75:1a:fa:30:68:65:30:3f:06:
67:8b:4e:af:3b:69:4d:05:1c:91:9a:43:30:1a:b8:
aa:99:bc:68:59:11:8d:0f:54:24:fb:d8:29:6a:06:
d9:78:11:cc:ff:f8:5b:5c:75:5f:87:11:ec:68:c5:
81:91:88:32:63:e0:db:64:c8:95:4b:19:09:62:1c:
a3:fc:fe:47:9c:3f:31:76:ac:fc:e8:a2:ca:1a:bb:
c8:06:3e:59:b1:a7:56:92:b3:7b:c0:9c:75:d5:d4:
ff:91:44:01:53:b6:06:57:e7:dd:a6:ab:1f:69:6c:
0f:e6:bf:14:ab:be:b2:c7:96:e4:78:10:88:ad:9d:
fe:f0:91:a8:0d:f0:dd:cf:af:0e:c9:99:e6:73:56:
14:5a:49:d3:d0:3e:d8:72:f5:79:db:ff:7c:00:55:
04:66:f1:35:64:11:01:b6:29:33:e9:45:87:ec:bb:
14:7f:3e:8d:ff:c9:14:c5:ed:d3:d5:a8:a6:80:49:
fc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E7:35:07:22:0E:71:96:35:6E:BE:56:EA:E0:6D:35:86:91:F4:56
X509v3 Authority Key Identifier:
keyid:E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:5c:e1:13:c4:2a:dc:57:79:2b:38:e0:3c:48:4a:e9:64:14:
10:4b:ef:bf:44:15:a0:04:3d:8d:14:9e:05:35:46:7d:fd:32:
35:64:b5:fb:c5:70:14:e7:92:06:77:b5:aa:1b:01:89:cc:f7:
b6:d7:72:bf:af:86:d8:01:a4:09:75:97:28:9f:6c:3d:41:69:
86:aa:c4:7e:83:56:93:05:f3:2a:fd:63:01:f0:30:45:18:91:
5a:a8:30:54:cc:06:fa:0d:8d:50:9a:d2:c3:20:d2:e8:8d:ea:
6c:d5:d6:89:35:ed:0a:c3:9f:97:56:46:79:e0:7a:11:9a:a4:
b6:45:29:c1:bc:1d:65:c9:42:ce:0f:07:dd:a2:bd:94:83:5b:
b3:a2:7e:f2:03:bb:56:64:6e:f3:4a:9d:db:4f:fc:97:a7:1e:
a1:7a:2a:99:1d:86:0c:e0:18:2a:93:55:c6:f3:5c:34:3f:c2:
bf:b1:67:c3:ba:dd:bd:22:98:df:d5:11:db:d7:ab:28:49:b7:
f8:ea:fd:55:a0:a2:65:d3:57:80:f1:c0:4d:bb:0d:9b:49:22:
70:8f:fe:41:97:78:e4:39:16:7f:a2:24:04:c3:73:3a:02:e1:
5e:48:66:3a:9a:74:81:f1:af:47:3e:aa:7c:8f:dd:f6:f4:6a:
63:90:35:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:39:26 2025 by rpki-client