Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
File: 49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json)
Hash identifier: refstoJgmhTsGqYoRVY6rH3QkDlyRJvzmS0HHTUsrbU=
Subject key identifier: 8D:8E:8C:DA:CC:32:42:4C:3D:A7:A8:71:72:82:A5:AE:A4:54:8B:5C
Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
Certificate issuer: /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Certificate serial: 1114
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
Manifest number: 10FD
Signing time: Sat 12 Apr 2025 17:14:07 +0000
Manifest this update: Sat 12 Apr 2025 17:14:06 +0000
Manifest next update: Sat 19 Apr 2025 17:14:06 +0000
Files and hashes: 1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: uZ5oteQf9RYY0Q9UZkYI42jzm6hvLC8fzrI9MPJu6wQ=)
2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: YvhnTG1A1W5kz0Vch4cPsIzgbILMaDioP1ySIyj5aeE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 17:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4372 (0x1114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF634, serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Validity
Not Before: Apr 12 17:14:06 2025 GMT
Not After : Apr 19 17:14:06 2025 GMT
Subject: CN=67fa9f5f-74a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:9c:f3:49:26:68:d4:66:ab:eb:1e:03:ee:
dc:06:92:5b:8a:a5:87:37:68:37:28:2e:a2:e4:13:
28:b6:3b:d3:69:b7:c7:ab:5a:25:46:00:8f:68:e1:
e1:1f:9f:a6:b4:fd:9d:4d:52:d1:16:14:46:12:6c:
88:fc:c4:a0:dc:2a:41:cb:41:95:88:de:06:61:0e:
78:81:4a:73:6c:00:7e:83:d9:e4:53:60:5c:54:6a:
57:d3:2a:27:fa:b9:d6:64:8b:eb:ce:00:18:06:b3:
7c:98:0b:07:e1:ba:96:3b:93:a3:c9:ab:9f:54:f7:
63:8f:03:d5:56:ad:16:27:73:9a:2a:e6:3b:7b:dc:
8c:58:bb:06:c1:71:3b:6f:22:79:1e:76:0a:75:e4:
71:ce:ec:fa:ae:b6:5d:4f:ad:4b:7c:b1:46:0d:35:
ff:f5:f0:20:db:e4:eb:fc:f8:ad:21:55:e3:95:aa:
4f:b3:04:22:97:a4:88:83:3c:aa:50:88:fa:3c:df:
b3:d0:e8:fa:4e:1e:69:7a:7e:5b:2d:a2:eb:54:de:
6f:0b:b4:0e:98:d8:b6:8a:a8:4f:b5:ca:8f:57:c0:
78:98:a4:e6:af:fb:f6:89:87:71:e4:b7:78:c4:9d:
d0:52:0a:ba:38:bd:67:97:3f:9a:af:69:cd:6f:3a:
5c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8E:8C:DA:CC:32:42:4C:3D:A7:A8:71:72:82:A5:AE:A4:54:8B:5C
X509v3 Authority Key Identifier:
keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:48:1c:d1:d0:ee:65:6b:3d:04:86:c0:79:43:c7:42:ce:75:
a2:a3:95:6f:0a:4c:a0:0f:09:02:15:fd:3a:c7:e6:fd:48:fe:
9a:1f:b9:f4:39:23:0a:90:44:c9:16:92:a4:80:d2:32:db:ea:
05:b7:46:ea:c8:ca:b6:80:6e:f1:cf:4d:60:58:53:a8:95:47:
a8:da:5a:ce:27:ce:ca:84:be:f6:30:6b:c9:11:d4:2e:94:a8:
d6:42:2d:26:8d:a0:a5:77:8f:02:37:64:25:3a:48:6a:d7:3d:
99:09:06:15:74:c7:0a:4c:60:a3:99:1c:69:f0:e5:b5:7e:60:
4a:74:c1:2c:6d:17:09:ed:e6:ad:b6:68:68:e4:5a:96:ae:49:
43:b6:bf:c9:8b:10:66:67:6a:61:82:97:05:2b:52:23:83:8d:
06:46:08:b4:38:d3:c5:8f:3a:47:aa:c2:22:31:8f:6c:26:13:
67:5c:d6:01:06:88:f2:09:9c:7d:8b:31:db:47:ba:94:49:db:
5b:81:fa:50:79:d0:8c:e4:63:2e:e1:5c:1c:b4:00:17:e5:37:
05:81:f2:fb:b0:01:a6:8e:08:4a:68:f9:cf:ae:39:5b:aa:08:
1d:7a:5b:65:27:50:62:b8:22:31:98:b7:19:1e:c0:85:23:7d:
9a:a1:11:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:46:03 2025 by rpki-client