Manifest
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json)
Hash identifier: s26SrKM5AnltZjAeDVHLikY0Sn+PWPxqGntGyP31wC4=
Subject key identifier: 01:E4:DC:02:F6:1C:92:1A:0C:FD:36:D0:60:8C:EA:24:0D:CD:E8:DD
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 4612
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
Manifest number: 460A
Signing time: Sun 15 Jun 2025 14:50:31 +0000
Manifest this update: Sun 15 Jun 2025 14:50:30 +0000
Manifest next update: Sun 22 Jun 2025 14:50:30 +0000
Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: DXX+3teX4fFt4OwZoJI+wZtVsHzvclDjIrIIIb1E8Es=)
2: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: AYWGFvwUByg/qqQVdaQIffRzOvV/lSsH6Y0ettSlDW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Jun 2025 14:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17938 (0x4612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Jun 15 14:50:30 2025 GMT
Not After : Jun 22 14:50:30 2025 GMT
Subject: CN=684eddb7-5db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:cb:7e:07:c1:97:51:da:49:6e:f4:c9:7a:
d5:27:96:06:07:4f:ad:c3:58:64:ae:88:0f:ea:e6:
f4:f3:57:6e:81:2f:26:94:8b:8a:f5:fb:91:15:4b:
02:4e:69:be:05:a8:e0:6a:75:65:8d:97:48:43:99:
63:d2:bc:2f:8b:59:84:93:b0:6d:d7:b0:6b:0b:dd:
fb:cb:47:4d:cf:d5:57:e4:3a:27:38:12:7f:ca:94:
16:0d:be:cf:c4:cc:0e:a6:43:8a:8b:74:03:5b:ee:
e7:2f:05:9b:2e:2b:40:34:1b:a3:65:37:ba:76:b6:
c5:df:79:4b:70:f4:f8:57:e0:de:9e:5d:f6:0e:0d:
4a:e6:2b:44:68:1e:7c:78:5c:72:1f:88:ae:61:c3:
c8:e9:eb:f7:f2:4e:c6:39:fb:02:fc:58:f8:14:3b:
04:0c:51:ab:c7:19:7e:10:ee:23:56:26:cd:fd:d7:
68:46:69:5e:99:80:f3:d8:bf:be:04:7a:a4:3e:cf:
b3:c1:24:38:40:a6:dd:a5:a9:05:46:29:55:64:15:
4c:e1:1f:f2:39:b0:64:a1:af:ee:8f:49:dc:3e:81:
4f:4b:9b:50:14:f8:c1:75:f8:18:42:01:6f:80:1d:
7c:56:56:73:c7:98:13:10:51:29:1d:a3:44:40:2d:
2f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E4:DC:02:F6:1C:92:1A:0C:FD:36:D0:60:8C:EA:24:0D:CD:E8:DD
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:ac:aa:1a:bb:2b:be:c2:22:88:e1:ff:d7:61:8c:43:a9:96:
0d:bf:20:c1:d3:5c:83:f6:48:96:8b:fd:d2:51:b4:93:25:0e:
cf:9d:5c:ec:c0:e1:c3:db:27:9c:b8:ea:6b:af:13:62:2b:87:
eb:18:1b:76:81:40:1b:80:f3:f9:49:ff:a5:1f:0f:eb:41:95:
90:d1:0e:d4:10:06:81:a1:11:c7:50:5b:ea:d0:c0:45:8b:7e:
3e:36:f4:23:ce:85:b9:d6:17:92:0d:62:b0:f8:9f:8e:dc:ab:
29:3e:90:da:b1:7f:0a:b7:20:b0:08:bf:a3:bb:11:2f:35:10:
28:e3:f4:4e:1d:af:17:3c:8c:ff:e8:28:84:36:2e:40:25:e5:
bf:1d:79:6b:f9:7d:57:a7:3c:55:a5:3a:12:84:73:af:a9:0f:
9a:75:d2:e6:31:54:ca:61:97:66:ee:54:51:f9:7a:64:0b:24:
fb:24:3e:92:71:7c:31:f5:69:a1:df:ed:58:c0:5f:7f:55:74:
26:46:ce:4a:e2:63:63:59:e7:21:31:89:30:96:3d:97:14:b8:
89:de:1e:67:4f:0d:61:00:f4:3c:a5:82:f9:59:7d:0d:05:6e:
6a:d9:02:53:6d:d8:97:ac:43:ed:93:2b:07:47:1c:53:a1:65:
1e:af:c6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:00:29 2025 by rpki-client