Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
File: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft (raw, json)
Hash identifier: g0jzoOJCtyrVHBPNFHW9gXMI89LXK72k46lRgctM9WE=
Subject key identifier: 88:90:54:52:09:52:C3:C7:B4:53:56:41:03:E5:89:FD:C7:E5:18:7B
Authority key identifier: B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
Certificate issuer: /CN=A91FD64D/serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
Manifest number: 01A1
Signing time: Wed 09 Apr 2025 02:21:55 +0000
Manifest this update: Wed 09 Apr 2025 02:21:55 +0000
Manifest next update: Wed 16 Apr 2025 02:21:55 +0000
Files and hashes: 1: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl (hash: ExLuhXT3BK4B0V0JdPzlj8vQFDxxj9wzMu9BfH7YxoQ=)
2: 34BB892E449C11EEB60E1441C4F9AE02.roa (hash: XQvlP4Z6PPDTvpFje+rE615QVj8K/dlNzggLZwnPCHY=)
3: 66D00EB2449C11EE86105C41C4F9AE02.roa (hash: sFUlSAs686BHpBPHFZ6jJXEM4AvroBrl/QL/VRc6YMo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl
rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 02:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD64D
Validity
Not Before: Apr 9 02:21:55 2025 GMT
Not After : Apr 16 02:21:55 2025 GMT
Subject: CN=67f5d9c3-b2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:4a:c2:7c:f1:71:b7:26:14:84:2f:0c:51:
d0:a0:34:b8:d3:ef:98:e1:af:2e:79:9c:df:2c:c5:
d8:1d:52:f8:e1:5d:d7:6e:3f:47:6b:9a:c0:99:56:
4c:0c:12:6a:82:87:b7:3e:c5:42:18:26:0b:93:46:
1d:8b:ec:49:df:fc:a9:79:29:ba:73:a3:f4:13:32:
aa:36:0c:af:be:e8:3e:fc:41:be:46:fb:cf:b0:98:
5c:39:d8:3b:52:ae:3a:a1:83:ff:5b:51:88:68:73:
b6:50:2d:e1:34:9a:13:62:cf:57:e6:6b:56:d5:7b:
5a:20:3e:f5:85:cd:1b:c0:ee:c6:e6:cb:d4:d7:34:
d0:50:1e:0e:7a:50:ce:cf:87:bb:9b:43:bd:5b:fa:
80:ca:55:44:1a:61:0c:b9:50:b4:39:9e:e3:c9:de:
56:88:d0:df:cb:1f:3d:04:ba:59:ba:61:86:de:a1:
23:29:17:31:51:d9:cf:44:16:56:16:41:0c:d1:e9:
8b:cb:50:00:e4:f3:86:d6:a7:3a:c3:24:bf:b6:fe:
1d:19:f4:04:d8:3a:5d:ea:4b:56:9d:e9:93:78:65:
c6:48:81:da:97:10:c5:28:f7:b5:5d:b7:92:23:fe:
81:c4:00:cb:7c:f9:ac:77:17:1a:21:4b:f7:dd:0c:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:90:54:52:09:52:C3:C7:B4:53:56:41:03:E5:89:FD:C7:E5:18:7B
X509v3 Authority Key Identifier:
keyid:B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:c7:30:d8:88:f9:64:3c:39:18:98:b6:be:88:c1:a4:cb:a3:
3c:a8:cc:03:24:01:1a:df:f4:00:52:12:9f:63:ee:45:86:a5:
c5:84:d0:10:97:a1:40:39:61:43:34:71:a9:cd:f1:e0:9a:af:
e1:9d:3e:73:3f:21:eb:fb:18:c1:7a:a5:36:72:86:7f:51:ed:
46:40:e9:21:68:eb:a6:b5:95:58:b5:9b:f8:5f:e5:34:f7:fa:
da:41:60:7f:98:cf:58:3d:e8:06:8b:9d:3a:8f:ad:c8:a9:a4:
6f:12:db:a8:b5:7c:1f:ef:b4:eb:8b:e3:95:47:19:2a:d6:a5:
55:a0:a1:85:bf:68:65:cf:28:b3:3d:ea:95:d7:3c:74:33:bc:
e5:57:95:d1:fe:0b:b8:60:43:41:ed:88:96:2c:ff:84:9f:f0:
62:fc:63:af:bc:51:fb:79:85:6f:a4:ca:d2:8f:97:ec:3d:8d:
52:58:76:9a:7c:2a:d0:08:bf:78:6d:01:69:35:4c:d9:09:c4:
a3:e3:a2:90:a4:1a:c3:19:dc:6b:95:93:19:cb:83:fa:2f:86:
25:8b:0e:08:9d:5d:1d:7d:75:df:03:dc:4d:3b:bc:8e:8c:df:
cc:ca:e1:f3:47:80:d9:20:3b:b9:3c:00:15:b5:8e:db:97:5a:
21:5a:59:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:37:11 2025 by rpki-client