Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json)
Hash identifier: rvL4k7iM/eOdL6Jj38maEX+yCshTufaIWmpQQ5NWhVI=
Subject key identifier: 64:E4:4D:F8:F7:79:87:68:55:EF:FF:2D:C6:14:28:84:CC:03:74:82
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial: 0565
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
Manifest number: 0556
Signing time: Wed 16 Apr 2025 19:31:29 +0000
Manifest this update: Wed 16 Apr 2025 19:31:28 +0000
Manifest next update: Wed 23 Apr 2025 19:31:28 +0000
Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: 3yCrVMJ9dwO7RRVs0JOJSJZ8lqKisZ3iMjyOkEKq1Ko=)
2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: 0y1umhcXrzwIQDnq4Cka+2E+MR7Gy+fTGy43hos8bno=)
3: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: +5HXeZzaqL8Fd/KKvyuXF2mNME+6yWjEsjlZ9TCANS8=)
4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: k1c7GSyH3WoRbwuja3aZP/eqPGFzjIJTKfDzkLI42LM=)
5: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: WDAtZkvVBWCh4sdS393tb7mD2RpYvoRQQWQo7es9q/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Apr 2025 19:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1381 (0x565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Validity
Not Before: Apr 16 19:31:28 2025 GMT
Not After : Apr 23 19:31:28 2025 GMT
Subject: CN=68000591-0087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:46:68:85:10:ec:a1:14:2e:e7:8b:cb:22:
2c:67:74:a5:73:41:94:a6:d9:2d:78:b5:2f:3d:d6:
de:91:09:25:14:76:39:25:85:14:8d:b7:b7:75:26:
2b:f4:1f:61:74:d5:d8:45:97:2c:25:ca:b0:11:5f:
68:01:9b:f1:a3:da:f6:08:b3:6a:05:bd:c5:f7:8c:
78:ba:3f:e4:b6:a0:de:72:16:a5:a9:5f:e9:8b:57:
d4:7d:c4:57:83:06:01:3b:72:fb:ec:98:40:2f:39:
e9:64:fa:0f:69:00:c4:c5:78:22:68:4e:0e:84:1b:
4f:1b:b9:b1:10:60:e1:6e:13:43:15:43:99:03:75:
74:bb:d0:3c:20:4b:12:65:28:fd:86:ce:dc:ea:55:
e8:ee:f3:18:ca:15:0a:7c:14:c1:3a:c9:57:4b:66:
7a:cb:16:43:75:4a:de:5e:8c:d1:c6:03:01:59:d6:
07:15:f6:3d:9c:c7:9f:45:d5:28:52:02:92:63:28:
3e:39:d7:b6:8e:08:ce:ab:52:54:71:8b:38:a6:0b:
35:0d:70:02:be:ea:fd:25:97:fa:db:83:14:b5:d3:
ae:aa:f8:d1:da:8a:91:a0:ea:bc:78:a5:21:0f:69:
56:dc:f7:10:67:bd:f7:b1:38:a4:75:c9:8c:0d:9a:
3f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:4D:F8:F7:79:87:68:55:EF:FF:2D:C6:14:28:84:CC:03:74:82
X509v3 Authority Key Identifier:
keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:08:b4:40:20:97:40:41:d3:7c:84:a3:cd:f0:e7:86:0b:49:
56:92:64:a4:19:50:6c:9c:51:84:f5:88:89:0b:72:1d:2f:b1:
4f:ae:00:bd:b7:62:25:4e:6e:67:40:fb:a4:73:12:0c:3f:76:
3e:66:d3:71:ab:21:b2:59:dc:e2:04:91:72:02:83:67:ad:0e:
d5:d8:ad:b6:c5:c6:ae:83:4c:59:92:09:98:2a:5e:00:3c:0c:
e7:10:1d:f9:00:18:65:26:3a:9f:b6:54:71:0b:27:24:bf:d5:
06:41:8b:9d:4a:c3:0d:48:c9:ac:e9:e1:ea:58:65:0b:7e:0a:
56:80:73:32:ed:34:84:a8:e9:e3:aa:ec:09:f2:32:56:09:ff:
18:dc:46:e2:95:40:0b:4c:41:4c:e6:16:18:76:a8:e7:cd:91:
e3:1f:6d:5e:b6:da:12:87:60:25:91:87:92:df:87:7b:cd:ce:
11:0d:70:32:dd:b7:b5:fe:74:bc:86:17:f8:27:49:ea:98:91:
ab:df:f2:12:96:d6:d5:cd:d6:9f:7e:48:f7:38:1a:76:8f:87:
b0:28:54:bf:07:95:13:e7:8c:0c:7c:cb:ad:ad:49:ae:9b:37:
eb:bc:e1:d7:14:69:4d:f9:59:fe:e7:14:68:05:4c:de:9f:22:
b6:4e:97:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:40:33 2025 by rpki-client