Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
File: -6D4tMTQWqlqqvV6OUQDcbyNBDc.mft (raw, json)
Hash identifier: hBSDblsDgY6Kg3jYXv84ifgEQFHQcXEzePDvnVZCxT0=
Subject key identifier: 05:F4:A1:2C:6E:09:B3:BC:55:24:C1:2B:F9:4E:41:67:EA:3E:DB:5D
Authority key identifier: FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37
Certificate issuer: /CN=A91F9ECA/serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437
Certificate serial: 0520
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
Manifest number: 051B
Signing time: Tue 08 Apr 2025 23:17:32 +0000
Manifest this update: Tue 08 Apr 2025 23:17:31 +0000
Manifest next update: Tue 15 Apr 2025 23:17:31 +0000
Files and hashes: 1: -6D4tMTQWqlqqvV6OUQDcbyNBDc.crl (hash: VRLPG57o7S7hMEorEuzfdRxkmrSksumXCxMAS6G0T00=)
2: 9F2BA98AF90611EBB8E0C27FC4F9AE02.roa (hash: H5HzvqvaFcgyJmUGVWINJTj96jgcqceA7VesKwIUnvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl
rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 23:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1312 (0x520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9ECA
Validity
Not Before: Apr 8 23:17:31 2025 GMT
Not After : Apr 15 23:17:31 2025 GMT
Subject: CN=67f5ae8c-fb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:7b:a2:a9:e2:84:22:e8:df:62:6c:57:f6:
9b:2c:27:c2:66:1e:10:71:8d:16:1f:d5:5f:2b:c1:
2e:b4:f2:09:28:c2:d7:0a:b8:c5:87:cf:e0:90:36:
6d:8f:a1:0d:37:14:4b:ed:65:46:4d:e9:38:df:6f:
13:e1:c5:35:63:74:7c:63:55:94:a1:d4:b9:e3:a0:
44:55:e8:49:b0:67:41:53:70:8c:45:fe:4e:cc:eb:
fa:49:b2:6c:ca:2b:f8:94:8e:f9:e6:db:e8:fb:a4:
03:26:6c:ba:45:1e:85:f9:71:7d:0e:44:e4:f8:15:
f0:97:c2:00:9d:5d:e2:da:a1:52:fc:32:55:37:83:
a7:f9:da:ea:65:8d:3b:f2:82:e4:cb:7b:72:2e:c4:
28:72:1c:84:70:7d:6b:0c:94:3b:df:6e:8b:86:ae:
41:93:ae:22:1c:e5:d9:1a:d3:8f:b8:bd:63:35:24:
80:72:16:b1:c6:e9:e9:dc:a6:6b:78:5d:10:54:85:
55:f1:47:f7:31:a5:38:07:54:96:c7:53:f7:da:c4:
9b:71:ac:62:22:53:b6:a4:ee:21:41:5c:2a:ec:e4:
2e:e5:9e:d0:85:ff:55:1f:2e:a6:32:65:ae:30:8c:
03:66:fa:6c:cd:0e:4f:36:28:8a:17:6f:3e:9d:33:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F4:A1:2C:6E:09:B3:BC:55:24:C1:2B:F9:4E:41:67:EA:3E:DB:5D
X509v3 Authority Key Identifier:
keyid:FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:6d:6e:19:c2:1d:28:ee:92:2a:98:96:18:f6:81:99:7d:db:
f5:cb:32:31:b5:92:97:ec:c0:cf:f4:e4:2b:d1:2c:51:66:48:
55:b0:49:26:65:38:81:6b:76:05:15:ea:86:d6:4b:ef:8b:83:
f2:8f:39:89:d3:ce:f0:21:5a:8b:c4:57:1e:e3:0e:d0:26:6c:
0e:50:22:15:77:2f:bb:75:6f:68:8c:e9:f8:0a:fe:85:6d:3e:
08:2f:d7:b7:e8:13:df:ef:ea:a1:ec:58:84:0f:fd:52:e2:4d:
ca:86:7a:aa:e0:ee:c4:a9:55:3e:7a:31:5b:4e:84:87:4f:5b:
09:76:98:1c:17:ef:2f:90:33:6a:bf:8f:f2:85:e8:e3:b3:3a:
7e:43:09:e7:54:e7:8b:e0:a0:35:ff:b3:45:8b:06:a8:24:4e:
a4:b2:ed:3f:20:21:fa:94:2e:2b:a1:76:7c:10:85:89:dd:ec:
c1:9f:e6:6d:6d:e7:2f:5e:fb:49:3b:7a:a5:ed:f8:1a:15:fc:
31:8f:4f:d6:c8:f8:76:a4:42:77:66:f2:1d:df:9a:e1:32:7c:
0e:c4:4d:bc:47:df:0f:22:3b:f8:5a:10:e4:b8:75:6c:a8:ec:
95:48:04:1d:99:6d:72:d9:96:21:b1:67:c7:4c:78:af:2e:0e:
c1:fb:96:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:47:22 2025 by rpki-client