Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json)
Hash identifier: hol2DIo5h5LYD3l34dKrHSApMKAtlSd8TijMz8grKFE=
Subject key identifier: 9A:AA:CE:55:69:6F:94:96:03:1E:D8:A4:48:27:C5:75:C3:46:CA:F1
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial: 03AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
Manifest number: 03A3
Signing time: Wed 09 Apr 2025 00:26:29 +0000
Manifest this update: Wed 09 Apr 2025 00:26:28 +0000
Manifest next update: Wed 16 Apr 2025 00:26:28 +0000
Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: jwkzJ5TmghKNQr0lhvKIz+dPfdgpdfNabzyQp0/Nlbc=)
2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: qOMt8gV+qKOqfr/cX53ygmFqRFWIxLXDn07p9oOee54=)
3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: vlEni3UTKg6N69bA/qO6bko6oc0V7Y603/5krA0YD5s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 00:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939 (0x3ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F96DB
Validity
Not Before: Apr 9 00:26:28 2025 GMT
Not After : Apr 16 00:26:28 2025 GMT
Subject: CN=67f5beb5-3f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:86:98:f5:2b:ce:7a:07:fa:b2:ca:c8:ee:
06:53:12:06:7b:95:fa:2f:ff:47:da:62:14:e0:71:
a9:aa:6f:31:96:7e:ec:ea:f7:4d:7e:1b:59:a6:77:
5a:8a:21:77:73:25:4d:6c:95:a7:82:00:99:1c:46:
7c:7f:51:27:b2:b6:3d:33:17:5f:e7:55:f8:99:af:
2d:a8:6a:8c:c4:28:b1:c2:21:21:b0:4e:ac:a0:e3:
00:c9:39:6b:1b:a9:20:b8:b5:1a:d2:65:70:d6:22:
aa:d6:1f:d6:75:2e:01:68:25:de:d1:83:12:f3:d0:
93:a5:a6:8e:f0:11:2a:90:9c:e0:fd:cd:58:3a:01:
16:56:3f:3e:8e:3f:04:af:94:c8:b5:90:53:be:b5:
a0:22:81:4c:cf:63:c1:d3:cc:c1:32:2a:76:22:53:
4a:4e:ed:35:9a:e2:d1:b8:d2:45:07:c4:2d:9d:5e:
5b:11:a6:fb:84:c7:6e:a6:ab:06:b8:9e:41:b1:fa:
45:79:4e:3d:a5:bf:42:15:d0:c6:65:ce:3a:ea:45:
2a:2d:7d:67:c3:88:1c:44:f0:20:9d:d7:17:8b:d8:
cd:01:cf:05:b2:58:c8:fb:fc:02:d9:91:ba:31:03:
55:3d:19:a3:79:c1:e4:7f:f3:91:11:d7:4e:ca:7a:
8b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AA:CE:55:69:6F:94:96:03:1E:D8:A4:48:27:C5:75:C3:46:CA:F1
X509v3 Authority Key Identifier:
keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:32:e8:2a:3e:6c:d1:6f:03:6a:fe:58:9c:bc:b2:53:fc:28:
3d:c7:b5:9d:fe:41:51:3e:96:02:65:6b:b6:11:1d:78:03:42:
bc:33:c9:34:d4:69:8e:87:67:44:dc:86:45:7b:29:cb:36:6b:
30:52:0e:3e:74:b6:39:dd:f7:62:f3:e3:e2:7e:cb:2f:ac:5b:
23:c3:0c:81:73:29:8b:a4:03:df:82:d8:fc:9f:67:4d:2b:7f:
52:fc:c2:ab:60:93:9e:d2:eb:8e:49:63:bf:d4:4b:0a:5f:73:
4d:c4:81:1a:7c:4d:8e:4b:70:48:f0:a3:50:9b:69:00:4a:e1:
5d:28:4c:84:aa:e0:ab:45:2d:49:39:a5:0f:0b:5f:18:52:97:
86:17:60:23:c9:6e:ec:b8:c2:10:b1:29:07:73:27:04:0f:31:
39:b8:a0:73:dc:e5:3c:62:74:38:5d:e4:26:51:ba:74:86:95:
9c:e2:84:78:c0:6b:10:1a:a2:d6:52:34:a4:dc:91:8d:ba:81:
15:96:d6:ac:4b:8d:8e:82:0b:41:31:d8:42:d9:d7:b7:6f:47:
41:24:7c:3b:fb:cd:91:9d:9d:8a:d7:5a:5a:bc:dd:98:cb:91:
b8:03:a2:86:64:2d:74:8d:27:20:8f:83:c7:83:e7:7f:bb:8e:
98:c7:44:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:52 2025 by rpki-client