Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
File: xUK94Lg0fDed4d4dgkOpLLlMh00.mft (raw, json)
Hash identifier: Potj7I6oChxmTv2TwzmqHMFuVMw5ANGRgjSDx6gdBWQ=
Subject key identifier: F9:AD:51:F7:15:73:E6:A2:32:65:8C:42:D2:1E:26:56:A7:F7:C6:77
Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
Manifest number: E8
Signing time: Wed 09 Apr 2025 04:18:58 +0000
Manifest this update: Wed 09 Apr 2025 04:18:58 +0000
Manifest next update: Wed 16 Apr 2025 04:18:58 +0000
Files and hashes: 1: xUK94Lg0fDed4d4dgkOpLLlMh00.crl (hash: s5tz6wMlgbNooHq6YgiXedWKQLQdU/2e8aYaaf2q6k0=)
2: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (hash: +xX3fyh3F9druR4nFxovnFPsJhxpAOsF0rFF0c+Rr5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl
rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 04:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB297
Validity
Not Before: Apr 9 04:18:58 2025 GMT
Not After : Apr 16 04:18:58 2025 GMT
Subject: CN=67f5f532-03b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:2d:44:1f:a8:45:c2:b6:df:0f:ed:a8:b4:
c0:0d:52:1d:43:29:fa:b7:30:05:fe:89:72:c6:29:
1b:ff:41:89:52:4e:cd:da:8f:25:35:2a:8a:ab:bf:
85:d0:73:d2:47:3e:f0:c9:54:5c:f7:06:2f:59:75:
5b:fa:04:19:81:8a:cb:3d:17:4c:6b:79:e3:b6:16:
5c:60:f5:c8:e4:66:a3:f4:13:a7:23:56:74:36:b7:
03:7e:09:5b:7f:14:7f:8b:4d:03:03:8d:cf:97:01:
f3:8e:18:d0:05:00:09:23:64:23:91:9d:28:35:70:
92:ed:c4:ea:91:3d:8a:32:41:8f:94:2c:16:0c:28:
48:e3:b5:75:d3:84:98:62:5f:94:f3:c7:db:4d:41:
55:98:d1:72:84:d0:c1:aa:a7:a1:1c:dc:94:a2:a0:
60:94:2f:4f:08:bc:69:ee:c9:d6:e8:63:3a:f1:2e:
20:d8:79:20:b0:44:ae:56:4f:06:cf:5e:40:7c:10:
ff:7a:54:ae:53:54:06:86:1e:70:ca:4b:4d:52:81:
26:9a:8b:8d:8a:14:4c:e4:5b:37:7c:08:8e:80:83:
19:3a:5a:78:94:0a:19:3c:41:32:53:43:38:a5:a7:
e9:3b:90:49:4e:0f:aa:9a:00:85:7d:0a:a0:97:d9:
2d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AD:51:F7:15:73:E6:A2:32:65:8C:42:D2:1E:26:56:A7:F7:C6:77
X509v3 Authority Key Identifier:
keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:36:b9:bd:26:07:b9:76:6d:36:67:20:1c:9d:a9:98:2a:82:
0a:d0:9a:4e:86:28:15:9a:0e:1c:ba:98:27:1a:8d:bc:de:b0:
fb:0a:a3:44:5b:ca:8e:b8:ae:97:b8:69:ed:d4:6b:ff:02:2d:
b0:bd:a6:a8:3d:cf:5a:c8:aa:a3:69:94:ff:1c:e1:a8:bc:ca:
17:72:ee:3f:be:be:f5:6b:55:3e:58:85:70:68:07:a0:eb:15:
78:7e:ef:d6:c2:fd:76:a1:5c:c3:8d:42:b5:67:ee:a0:4d:f9:
15:0f:61:a7:41:66:6a:07:d1:4b:82:32:ad:78:8b:57:7b:a5:
f0:50:ef:37:e1:cb:0c:dc:f0:05:7e:18:8a:1a:f8:ac:dd:41:
0c:19:f3:f5:e3:2f:f1:5c:f5:47:b0:07:f6:08:ed:57:70:f0:
51:4b:7c:06:82:6d:24:3b:8c:a5:4f:0c:52:f6:ff:ec:12:21:
31:3d:b2:1d:77:6d:99:25:1d:4b:cf:0f:00:aa:8b:2a:ca:fd:
7c:6b:98:f7:cd:6f:ed:3a:10:25:cd:08:ff:e4:da:4e:27:e5:
d4:f8:f0:43:a1:21:1c:cf:99:9f:5c:21:61:95:2d:a2:cc:76:
db:cf:83:4e:8b:5a:d4:02:50:e1:3c:14:ac:b4:7b:66:85:e8:
51:9d:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:16:14 2025 by rpki-client