Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json)
Hash identifier: J3bWuhgQdc3npOUBxRwpeOUsVVzaDGdiHUDY3df/DGA=
Subject key identifier: AE:93:78:F5:78:1F:47:48:C5:C6:DB:08:B5:20:A4:12:89:10:6A:6E
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial: 34C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
Manifest number: 34A1
Signing time: Thu 10 Apr 2025 14:24:06 +0000
Manifest this update: Thu 10 Apr 2025 14:24:05 +0000
Manifest next update: Thu 17 Apr 2025 14:24:05 +0000
Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: 4nU6HPc+veMotM8TagO/HX3TRNhplFu6k9pV5dbFGgo=)
2: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: jwyDhO2AKzS24hZPtz7MMlmo1w5QqA8KZe3aiJpN8lw=)
3: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: 7hb8peyViLHs7pUvHbdg5I6QacKj8JDlnsxAKAU1Zc0=)
4: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: N+3adJFbEo0riTp5e2KIvLZDqSsoREj9ZabeHIbeUYU=)
5: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: rL42c7NaJK9wVJaWnoYtY42z+plXzLKrOFuOd8KULJk=)
6: 30941278EF2011EF9264077FC4F9AE02.roa (hash: 7cnuMrD52u33lf3m5CrnVGkp55WZekOCTta1eN0iR8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13513 (0x34c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E
Validity
Not Before: Apr 10 14:24:05 2025 GMT
Not After : Apr 17 14:24:05 2025 GMT
Subject: CN=67f7d485-f9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:45:6b:f7:fa:14:e6:b0:5f:1e:95:d1:84:5f:
27:a8:b9:2b:2f:3d:4a:49:3d:14:cc:e7:f7:5a:f2:
a9:fd:40:4a:58:ee:b4:2a:fc:e3:e1:38:f0:1d:dd:
bc:dd:eb:9e:79:d3:21:f8:8b:b1:38:b7:4b:60:2c:
e7:3c:f7:03:96:88:ee:7e:d5:6e:a7:9c:7e:4d:05:
13:d9:6b:40:ae:c7:8d:cd:aa:8f:e1:02:e4:26:b7:
c5:ed:6f:d3:8e:61:02:78:f2:73:79:c4:ac:b6:e8:
e6:08:49:7e:44:ec:16:d9:39:c7:eb:56:89:77:8b:
45:42:37:a7:a4:07:ae:28:8e:4a:14:9f:41:cd:ba:
dc:82:39:82:85:38:cc:6c:17:50:0a:78:05:54:ad:
97:c6:ab:e3:c3:42:29:42:58:54:5a:72:59:8e:41:
e5:54:38:9f:26:6c:b1:e7:bf:71:11:5c:91:cd:f7:
eb:4a:e8:bc:d2:fe:b4:cb:6b:7c:7b:49:a7:95:03:
e6:fe:ba:46:43:d0:a8:a7:a6:60:f8:d2:a4:7e:4a:
77:5a:35:4a:cd:3d:c5:b1:43:4f:ac:4b:bd:e0:33:
ed:02:9b:f8:dc:00:c3:58:ae:58:69:77:73:0d:96:
ea:20:9d:10:65:e8:0c:75:82:53:3c:c3:6f:f3:a9:
e0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:93:78:F5:78:1F:47:48:C5:C6:DB:08:B5:20:A4:12:89:10:6A:6E
X509v3 Authority Key Identifier:
keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2a:7e:29:b8:e5:8b:84:3e:43:7c:b4:7a:2a:be:63:d0:be:
d2:51:d2:32:a3:24:3c:9d:69:b5:05:5a:5e:a4:9c:d3:e4:0c:
66:d6:aa:18:2e:a5:3f:1f:31:00:60:2c:5a:03:dc:64:2c:23:
fb:c4:e6:d1:24:e8:c9:48:2e:5e:5a:e3:1c:cb:d4:f6:42:62:
70:c2:9b:b6:88:91:55:d0:47:a5:fc:e6:92:2b:7f:4e:08:ba:
fe:4b:68:12:5a:42:97:a3:a8:68:8d:3b:de:b0:ac:0c:28:ed:
07:95:77:a5:2f:d3:c6:cc:80:c4:89:cf:e1:6d:7a:46:a0:dc:
20:74:3d:32:7b:36:43:cf:f2:aa:f3:87:94:60:a4:f2:aa:a1:
66:a7:f6:48:5d:79:d5:2a:23:33:82:af:f5:0f:52:ab:66:68:
07:7d:15:f7:6c:ae:9f:a8:46:57:c0:50:cd:8f:73:37:8a:39:
cb:28:7e:56:41:c3:7f:74:1d:23:dd:08:bc:3c:a3:45:f6:0a:
85:d2:49:10:6e:69:57:74:1e:9e:d1:30:23:16:96:a7:31:97:
f6:6a:a7:fc:0e:49:2c:a0:a9:80:7a:b1:da:14:ec:f5:81:3f:
d0:7c:56:9e:d0:24:12:68:3c:62:23:8f:e3:84:21:1e:d6:24:
89:27:83:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:00:38 2025 by rpki-client