Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
File: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json)
Hash identifier: riooUF024mg1J/NuVFD7+/bnHCQoAsyM3c5wsYcYm3c=
Subject key identifier: EB:03:BF:26:68:D9:48:F6:69:4C:24:47:A5:69:6A:4C:0E:65:AE:D5
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
Manifest number: D0
Signing time: Mon 07 Apr 2025 04:44:22 +0000
Manifest this update: Mon 07 Apr 2025 04:44:21 +0000
Manifest next update: Mon 14 Apr 2025 04:44:21 +0000
Files and hashes: 1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: g/jNooSGDM/sj+d5r1FMC/1u0pQcBRYTBu9aNo4Fs1k=)
2: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: K+apE7KDf5o39FxCOR6cLYMmMMs/J5i74Me/NwHSUTc=)
3: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: Vm/sPmIab/U9OiYVa9+A5YsRVFrpJm56x8WhE16vn+E=)
4: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: mcClfxKa9uWF/j7dnojdzff39MRT3F+Ocj/LoLSS9jw=)
5: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: 2lKk6v8L+otxkXH3Z6ztUescMpEPEHQiPb/n8LYQ7iQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 04:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A777
Validity
Not Before: Apr 7 04:44:21 2025 GMT
Not After : Apr 14 04:44:21 2025 GMT
Subject: CN=67f35826-187c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:59:1f:a8:c0:91:7d:8a:46:5b:df:66:85:
16:81:fe:62:ee:35:0a:9a:c3:25:ea:9a:dd:44:b5:
31:6c:b7:8e:1f:42:3f:15:69:5e:50:dc:9f:3f:d0:
82:50:3d:47:e2:4d:0d:d7:75:83:cc:29:32:80:68:
c3:ab:d1:1b:1c:e2:a6:3e:e4:73:1e:a2:fe:5d:c9:
2c:3b:88:33:db:04:f4:76:3a:9b:73:dc:42:7d:c8:
91:1a:1a:7e:ac:d6:d3:82:c3:d4:84:0e:9f:4b:c3:
16:c7:01:73:82:06:bf:e3:53:27:c4:6b:e8:a9:98:
fd:43:e9:18:8c:4f:32:72:ec:f5:58:63:7c:0c:59:
e5:cd:3f:ee:71:58:8d:cb:5f:23:c9:de:be:58:bb:
90:c4:f0:11:ed:7c:f6:ae:b0:bb:85:3a:56:74:74:
2c:a9:e1:be:55:3e:e8:99:29:29:49:af:6c:35:ce:
9d:55:de:d3:87:f7:93:a6:d2:4e:9e:f3:41:9c:88:
5b:e1:50:53:52:49:9e:c6:a7:c5:7f:9d:51:5a:73:
1d:03:51:40:6c:19:f2:d7:55:7c:bc:a9:d0:34:e8:
63:40:39:ea:d1:7b:d3:d4:97:3e:21:cf:ac:6f:b6:
32:ec:94:93:07:ed:51:e9:30:57:6a:7b:c2:7d:bd:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:03:BF:26:68:D9:48:F6:69:4C:24:47:A5:69:6A:4C:0E:65:AE:D5
X509v3 Authority Key Identifier:
keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:40:dc:e2:48:27:64:a4:63:45:bd:6a:20:a6:87:4c:32:a5:
17:45:b7:9c:86:68:0d:20:d0:93:9d:4f:45:59:57:ce:25:72:
fd:49:e3:a7:1a:d3:07:f0:44:3d:8c:5c:99:f9:84:ea:e4:3a:
da:0a:d4:bf:bd:ef:f2:84:6b:b7:a3:f3:b3:9c:e7:5b:25:99:
dc:3d:f1:39:2c:57:03:15:69:7d:0c:99:0c:82:da:29:40:37:
d0:14:c5:03:98:04:6f:e9:ff:27:ef:cf:20:4b:3c:3b:e8:7f:
16:28:c3:e2:a2:63:a3:b7:29:36:27:03:9a:5f:05:98:23:b4:
f9:e7:33:be:6b:9f:8f:8c:b1:86:46:fa:7f:2a:bd:97:dc:a7:
23:f1:ce:cc:89:77:1e:9b:b3:d5:e8:e8:5b:99:44:88:35:7b:
70:79:aa:15:21:a5:e3:33:22:9b:75:bd:24:e0:78:a5:31:de:
0b:b8:0a:00:cd:91:79:11:7c:ba:20:71:cf:16:73:88:39:fb:
13:7a:b5:df:8a:e9:01:81:a7:34:40:06:c7:7d:3a:2a:a6:95:
b9:ab:a0:2a:a0:f7:58:36:6c:c4:05:69:d1:b2:53:9c:eb:9b:
f4:8b:b7:bb:4f:cc:61:13:b7:2f:ef:31:32:83:8c:87:89:1b:
58:51:c4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:44:38 2025 by rpki-client