Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
File: 9UFCkkKfU9qxhrQuVkFJWagL6gg.mft (raw, json)
Hash identifier: rZZqVxhawh9QdyJLqtOLSkCIDqrk52rghOV5XIjKiSE=
Subject key identifier: D5:30:2B:CB:F6:B4:7C:30:E2:35:89:24:14:1F:EF:D6:CC:FD:70:85
Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08
Certificate issuer: /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08
Certificate serial: 012C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
Manifest number: 0129
Signing time: Tue 15 Apr 2025 03:31:35 +0000
Manifest this update: Tue 15 Apr 2025 03:31:35 +0000
Manifest next update: Tue 22 Apr 2025 03:31:35 +0000
Files and hashes: 1: 9UFCkkKfU9qxhrQuVkFJWagL6gg.crl (hash: jc5Q76ICDuW+IcHjqW2OR+hNF3Mw1jD90oSTDPntzAI=)
2: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (hash: hIM8hUCuLsy66X6ZYsJbgYBhw69MQCF4aThPHyxIGMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl
rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Apr 2025 03:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB92B, serialNumber=F5414292429F53DAB186B42E56414959A80BEA08
Validity
Not Before: Apr 15 03:31:35 2025 GMT
Not After : Apr 22 03:31:35 2025 GMT
Subject: CN=67fdd317-87a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:95:ec:84:e9:bd:2d:01:81:6c:00:8d:3d:
91:61:be:e3:d7:04:9b:a0:75:12:eb:b8:80:e0:df:
71:d1:81:9f:7f:93:82:39:79:db:77:bf:79:19:0a:
92:c0:2c:68:15:99:77:77:ff:aa:5e:1c:e6:16:e2:
d1:b3:84:c2:b2:73:51:a0:a2:bd:b0:22:ae:b3:da:
d3:02:b4:85:9f:b3:1c:80:f0:eb:c2:0e:43:2c:c3:
3b:06:c9:3b:eb:8e:6e:9b:86:84:3f:a7:21:69:c4:
ad:6e:7a:f4:ef:08:02:bd:f3:46:a3:6a:cc:3f:1a:
3c:25:df:b4:c0:ff:91:ac:11:22:c9:1d:8b:63:e1:
b0:70:a8:cf:c3:6e:49:c7:d3:6c:6a:94:ba:bc:56:
d5:29:79:9c:f3:2f:99:0c:3d:f4:51:91:ff:10:8a:
7a:5d:fb:77:59:08:fb:d7:5d:e4:6c:7f:e2:e1:1c:
59:b9:55:64:ea:90:8c:fc:5c:4d:28:1a:c1:aa:e0:
93:0d:91:7a:91:ca:f1:e4:3d:1d:c0:69:f3:11:b4:
6e:a1:62:f6:62:b6:d8:c6:99:8e:69:c0:c2:57:76:
e6:93:6a:fd:6e:2d:d7:68:3a:3a:5f:27:70:bb:5c:
58:3d:6d:a9:6b:25:da:e8:c0:dc:9f:9e:f2:42:a2:
ac:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:30:2B:CB:F6:B4:7C:30:E2:35:89:24:14:1F:EF:D6:CC:FD:70:85
X509v3 Authority Key Identifier:
keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:8f:54:f2:04:f8:c9:22:57:ff:14:b2:12:90:e0:f7:47:cf:
b0:d5:e7:12:52:ae:38:45:a9:4e:e8:2b:3e:a7:64:7a:81:4a:
bf:80:c5:80:c8:c2:8d:52:e1:cf:9d:75:5a:59:c4:bc:9b:40:
2d:0c:4b:7c:28:89:ef:f8:08:9c:c9:24:65:85:2b:e2:80:64:
25:aa:a3:64:92:9f:03:1c:2c:88:c6:41:9b:81:4c:34:7d:34:
9a:6d:34:22:c2:90:2a:00:1d:9e:b0:86:63:ff:f7:44:d8:9f:
47:55:3d:7a:96:ff:ff:46:e9:c0:27:40:08:ec:99:73:da:2d:
ca:bd:6d:4c:f8:cb:d6:a9:42:e1:f3:b6:a9:05:22:64:22:5b:
51:e7:08:2f:00:cf:da:9f:57:d6:d7:a1:96:e7:07:77:a1:07:
a2:9f:38:dd:5d:d1:c5:43:e8:31:10:a9:4e:3b:9e:57:2b:f9:
fb:e5:1a:c7:51:07:43:6b:86:99:64:d6:79:d0:43:36:09:1f:
b2:26:54:32:5b:9e:53:f3:10:4a:df:d6:d3:9e:19:11:e4:5b:
41:ff:63:72:de:e2:29:cb:b7:e5:28:2e:2f:15:82:f7:f2:f3:
4e:a6:99:4e:1f:a2:0e:85:65:3a:1c:4f:22:00:2c:28:df:b2:
a8:4f:30:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkI5MkIxMTAvBgNVBAUTKEY1NDE0MjkyNDI5RjUzREFCMTg2QjQyRTU2NDE0OTU5
QTgwQkVBMDgwHhcNMjUwNDE1MDMzMTM1WhcNMjUwNDIyMDMzMTM1WjAYMRYwFAYD
VQQDEw02N2ZkZDMxNy04N2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvU+V7ITpvS0BgWwAjT2RYb7j1wSboHUS67iA4N9x0YGff5OCOXnbd795GQqS
wCxoFZl3d/+qXhzmFuLRs4TCsnNRoKK9sCKus9rTArSFn7McgPDrwg5DLMM7Bsk7
645um4aEP6chacStbnr07wgCvfNGo2rMPxo8Jd+0wP+RrBEiyR2LY+GwcKjPw25J
x9NsapS6vFbVKXmc8y+ZDD30UZH/EIp6Xft3WQj7113kbH/i4RxZuVVk6pCM/FxN
KBrBquCTDZF6kcrx5D0dwGnzEbRuoWL2YrbYxpmOacDCV3bmk2r9bi3XaDo6Xydw
u1xYPW2payXa6MDcn57yQqKs3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUwK8v2
tHww4jWJJBQf79bM/XCFMB8GA1UdIwQYMBaAFPVBQpJCn1PasYa0LlZBSVmoC+oI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyQi9DNDYwODFGMjU0
QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5cXhoclF1VmtGSldhZ0w2
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlVRkNra0tmVTlxeGhyUXVWa0ZKV2FnTDZnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjkyQi9DNDYwODFGMjU0QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5
cXhoclF1VmtGSldhZ0w2Z2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpj1TyBPjJIlf/FLISkOD3R8+w1ecSUq44RalO6Cs+p2R6gUq/gMWA
yMKNUuHPnXVaWcS8m0AtDEt8KInv+AicySRlhSvigGQlqqNkkp8DHCyIxkGbgUw0
fTSabTQiwpAqAB2esIZj//dE2J9HVT16lv//RunAJ0AI7Jlz2i3KvW1M+MvWqULh
87apBSJkIltR5wgvAM/an1fW16GW5wd3oQeinzjdXdHFQ+gxEKlOO55XK/n75RrH
UQdDa4aZZNZ50EM2CR+yJlQyW55T8xBK39bTnhkR5FtB/2Ny3uIpy7flKC4vFYL3
8vNOpplOH6IOhWU6HE8iACwo37KoTzA8
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:17:23 2025 by rpki-client