Manifest
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json)
Hash identifier: QBJWJiz2cIXd1fQzonjAEztHQviFQcA2sLHAkZ11TRA=
Subject key identifier: CD:B4:40:8D:9D:2B:8C:6F:B8:05:B2:9C:44:90:8D:A4:BD:9A:B9:72
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 457E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
Manifest number: 4576
Signing time: Sat 26 Apr 2025 14:50:29 +0000
Manifest this update: Sat 26 Apr 2025 14:50:29 +0000
Manifest next update: Sat 03 May 2025 14:50:29 +0000
Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: UxUWsZEPL9rEc01gD9aev+dlEbiKebwqc6q/tnbDYo4=)
2: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: AYWGFvwUByg/qqQVdaQIffRzOvV/lSsH6Y0ettSlDW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 May 2025 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17790 (0x457e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Apr 26 14:50:29 2025 GMT
Not After : May 3 14:50:29 2025 GMT
Subject: CN=680cf2b5-070e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:55:39:42:b2:7e:27:be:d4:ca:94:27:e3:b8:
a6:d3:0f:83:55:78:28:ac:74:07:79:ef:e6:a8:6e:
a9:83:13:b7:6b:19:4b:ac:e3:ad:54:7f:69:8c:f8:
c3:54:c7:8a:8e:f0:26:47:5b:b8:ff:16:77:f4:66:
9d:03:00:85:33:da:42:bd:e6:27:eb:49:11:b1:92:
df:70:1c:99:71:0d:68:9f:f8:86:47:17:14:cb:72:
68:68:e4:13:96:c8:5b:ee:28:c9:07:30:e9:bf:5d:
47:60:8c:b5:2d:40:a7:f1:fa:3f:0a:f6:87:5a:ee:
f6:e6:d7:92:ae:1f:0e:86:4c:39:e5:d7:28:e3:ba:
a7:19:04:fd:9f:31:1c:01:e8:8e:db:92:bf:69:4b:
64:3c:48:29:78:c4:e8:59:e6:c8:91:24:b7:a6:90:
a6:57:c2:64:59:ff:5f:8b:db:73:13:72:b8:64:ac:
e9:3d:5c:a1:bc:78:a0:f0:0f:db:eb:21:77:cb:76:
a6:03:8a:46:05:62:fd:4b:e6:da:8b:4d:bc:e1:df:
ae:65:70:89:fd:43:2d:5c:b2:be:d0:82:16:f1:7d:
92:fd:49:42:a3:5c:30:b4:fb:32:15:2b:7e:52:c9:
f4:1f:ce:9a:a9:09:6f:8e:22:38:12:e7:6d:04:0c:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:40:8D:9D:2B:8C:6F:B8:05:B2:9C:44:90:8D:A4:BD:9A:B9:72
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:69:ac:53:11:be:b0:c5:38:91:9c:09:7f:cf:9c:bd:49:ef:
52:8e:fc:f6:01:b1:07:42:85:81:f2:35:ec:fa:4a:f2:8b:39:
d5:18:20:54:d7:10:4a:cb:c3:ed:70:c8:2e:4f:dd:26:21:1f:
78:5b:87:ad:39:5a:64:ac:a0:26:89:ea:de:a0:30:58:65:d3:
e6:27:6a:a1:3b:3a:fc:3d:55:cc:8d:d3:6d:77:46:0e:9a:e7:
20:6f:92:2c:7e:9f:31:ea:eb:ae:1d:05:ba:8f:c0:b2:b9:c7:
3f:14:e5:85:6b:7d:18:bb:ac:cf:b3:c3:df:17:0a:6a:34:69:
d6:c9:93:9c:8f:e4:e7:54:a9:8c:7a:00:a8:ed:2e:b8:f9:a8:
7a:92:ca:b2:e2:06:9a:35:40:51:54:3d:d4:e3:49:62:fb:3e:
5d:3f:5f:2c:dc:b7:d8:19:20:73:ce:da:66:08:64:b5:61:e1:
27:08:e5:40:15:b0:9a:4f:92:22:d1:38:29:13:1e:2d:b8:c6:
c7:34:c2:22:7c:81:3f:eb:86:98:c4:f4:1a:65:e4:03:03:fb:
04:ca:c5:19:4c:b8:ed:a3:97:db:06:26:e9:f7:52:d3:6e:7e:
ad:85:b3:82:4f:32:91:e4:83:02:8d:df:ae:d7:2c:0d:96:51:
4e:88:39:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:14 2025 by rpki-client