Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
File: QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json)
Hash identifier: eIZq5gvX+w9qsJMYvSDMMNl8BbJTr/MGH5+5csZ7gUE=
Subject key identifier: A3:96:77:5E:F5:F3:2D:69:B6:54:C2:1C:89:F5:54:4F:B3:97:99:EF
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0CB2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
Manifest number: 0BF1
Signing time: Tue 08 Apr 2025 19:04:45 +0000
Manifest this update: Tue 08 Apr 2025 19:04:44 +0000
Manifest next update: Tue 15 Apr 2025 19:04:44 +0000
Files and hashes: 1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: KF7CE5YDH9pSuRfxeMOlOdPgipvAOQTJitmjWNDr3Vs=)
2: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: bH9ZC4QgjmS/I58+FDGDPuH33W9RsPxq1Xz3UvWrsE8=)
3: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: MTAUWchwVeKxoXJgsd9CSOqi1gXkAXO05abtX//8zz0=)
4: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: Bbke0XmmIxWIWeMRBoj+nBwWgM3xQtB71wXvSJ5bc/c=)
5: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: onKAfoZCCQvGFRb8T+pywq7Otmi4UdU6B4vavVOep80=)
6: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: 08kq3N2T6u9VBQ7SP6eASP9Fa/uiNzMCtB0p+sr0X3w=)
7: DF2BFB64030911F09512BA5FC4F9AE02.roa (hash: XyTmdiA2D/Vgzkv/p9K0xImUltqy3DBdtf0fpQ8RrTs=)
8: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: kh4hhTCX8Fi9NA+V05arYqEhwsTNSKknNhiVN/VBtTs=)
9: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: 68PnU5mlOA06iDNZ5XmPFrp9fhXfwnla9MbcMx8d36I=)
10: 9C294BEEE9B111EF8FD3E36DC4F9AE02.roa (hash: JnGAM1wsHp5wW5YUc/+ZGIE9EUUS5JBbavsugytK8eo=)
11: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: zZr/wa0m1rFLaToJf+3XeU5H/f8ci0Eq6bfOYc73d3k=)
12: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: sNGI4IjSttFM+bJq5CDyljE79J+Q6/JoAjLErm5ZlOg=)
13: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: X9BJWqFkDoO3Z1AnX2rwWIVc/LG4OOcRfPspBGbkn40=)
14: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: ddZXmXMp+inqC1tu9O/Re3vjJXmPn1T/+0+8I6WAPIc=)
15: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Vs5JYwOpofezkqiiF2qwHaO1ji2DOr491xFoDKani80=)
16: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: bv2/9mHV5hvQUwYa7AUUUWrf3R41IAn85lkqotp1enw=)
17: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: ojzmtYL5oSSSDRNMHS4oBfQHwOO76KE3+ooyFQgsmPI=)
18: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: obVSxBoAnqffXMDTd+Z9+Lr3d6TSTuDzUuAxF1nefiI=)
19: D0B10316030C11EF89EB2145C4F9AE02.roa (hash: CspBhOEFyBSpqXIR5gDIV0gnJUJgNEe9W9/Imxarugc=)
20: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: qWKBqzVZNaIWfle8O0qZvhFMlwqBUkUBmN22bjyzZlw=)
21: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: arl4UC92qPVUXs/4JsFRSGmU8q2ljxGq2A9CpZD8w3Q=)
22: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: nX+JdTppyQxuLXZd5ew3GC3f/sbog2Yk6PdmM9yWumY=)
23: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: 4i6VJPAbegLRPG1TiRgqleRdlv3u9kO2DBkdXwrkMys=)
24: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: 6WaRYsNX6RMzPE3WdzfKlbLBu0LngwxXI10OdHloqKc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 19:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3250 (0xcb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78
Validity
Not Before: Apr 8 19:04:44 2025 GMT
Not After : Apr 15 19:04:44 2025 GMT
Subject: CN=67f5734c-c744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:fd:6d:c8:7f:f7:ef:fa:54:c6:83:c9:ef:
43:be:a2:93:22:ac:f8:3f:16:08:33:7a:47:1f:2c:
06:d0:7c:b3:33:4c:f4:b9:22:cd:a0:18:9f:a1:cb:
06:83:05:64:58:0f:25:16:75:b0:e3:76:b3:e4:3f:
d3:b0:43:38:bf:44:6b:10:fe:bb:08:6a:2d:32:f9:
f1:a0:92:bd:7e:e9:80:df:e9:89:f3:86:b8:94:7c:
44:b0:56:53:73:de:e6:df:d7:62:c6:db:81:1e:df:
45:bd:94:58:e3:cb:72:33:01:51:9f:4f:1d:3c:b5:
c1:df:eb:8d:6e:59:0e:44:a6:60:c4:39:1a:a9:75:
d6:7b:c0:aa:57:36:da:94:99:94:c0:29:e8:52:a2:
3d:e7:13:85:f5:c9:31:46:b7:e8:36:c9:8b:3d:d8:
73:6d:4a:81:21:40:b2:86:5f:f1:76:24:f2:3f:82:
44:2d:6a:2a:7d:4a:79:cb:7e:17:95:23:b5:01:3d:
21:44:af:57:e0:25:0f:ad:ba:b0:1f:8b:89:0a:bc:
31:b8:4a:2b:3f:7c:86:c7:b1:40:47:9a:9d:03:97:
81:4a:85:ef:84:2b:cc:a2:c5:28:e4:a5:7a:5a:95:
b6:f6:cf:ba:09:62:07:c8:3c:f9:73:70:22:0e:68:
c0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:96:77:5E:F5:F3:2D:69:B6:54:C2:1C:89:F5:54:4F:B3:97:99:EF
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:fb:10:cd:b4:0e:cd:89:5f:f8:3e:1c:20:7a:70:38:bc:1e:
7c:3c:54:77:27:70:09:fc:8b:a2:83:5f:4b:4f:56:8f:25:ca:
ab:9e:cd:08:f4:42:ad:e0:c6:41:8c:3a:4d:da:e1:2f:8e:50:
17:14:bb:5d:47:41:e8:68:00:f8:82:ee:d2:52:44:51:64:e1:
4a:09:42:8f:5e:71:95:3e:22:54:03:b5:f6:eb:0b:e0:4c:2b:
73:24:33:f9:19:d6:91:45:36:c7:e1:94:6e:79:87:7b:3b:50:
20:f7:91:10:f8:8a:30:a5:a1:03:d1:df:c6:d5:68:a6:15:46:
27:17:97:eb:57:e9:a6:32:e0:0a:69:f3:c7:5b:50:35:dd:f3:
a5:4a:dc:17:e7:43:ed:1b:aa:a3:8e:81:80:2b:1f:a6:f6:76:
5c:bc:41:de:82:17:e2:b8:10:30:40:20:b7:e0:ac:be:0d:d7:
6f:be:34:ab:40:e4:9f:dc:95:6e:7c:ab:41:49:21:13:2e:8c:
14:2b:c9:40:b0:0f:9c:c6:1d:cc:54:a0:d9:7e:f3:ce:7a:e4:
55:d9:65:3c:ca:63:92:9e:de:8c:2f:8c:88:cf:46:79:ba:4b:
48:34:01:30:3b:a6:ac:48:75:d8:8a:0c:92:d1:eb:98:75:bd:
11:f8:5c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:46:40 2025 by rpki-client