Manifest
$ rpki-client -vvf rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
File: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft (raw, json)
Hash identifier: 06qCi2hBaQUZiqJsDwEiqQ5vnGhhldROEdX0tpMajp4=
Subject key identifier: 32:35:B4:37:A3:D0:28:03:93:F5:60:86:FD:F3:A0:26:D9:96:52:79
Authority key identifier: 0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Certificate issuer: /CN=apnic-rpki-root-iana-origin
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Subject info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
Manifest number: C2
Signing time: Mon 14 Oct 2024 02:31:23 +0000
Manifest this update: Mon 14 Oct 2024 02:31:22 +0000
Manifest next update: Thu 21 Nov 2024 02:31:22 +0000
Files and hashes: 1: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl (hash: KlT6L8hAzxlljJXPMjBqpQO14TJuqajSMdq716fmTiM=)
2: mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer (hash: DERyYyYeyojAQFzl2zf0lI465bx/4Wz/Xvtdm6FqIQU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 Nov 2024 02:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-iana-origin
Validity
Not Before: Oct 14 02:31:22 2024 GMT
Not After : Nov 21 02:31:22 2024 GMT
Subject: CN=670c827a-b246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:1e:1d:24:5b:27:9a:78:52:91:44:82:0a:
c6:3f:ac:08:46:db:f0:0e:4d:b1:26:b0:b2:14:d6:
68:6c:d4:b4:82:0b:b8:02:88:c2:ca:56:9e:e7:3d:
03:c2:1b:1a:30:b5:6a:80:53:1e:7c:e1:b5:0d:91:
71:ae:6d:ca:61:d5:42:1d:51:0a:ab:18:94:69:b1:
a5:94:15:1b:c4:69:39:47:86:89:0d:32:a1:13:15:
3b:8c:22:f0:d6:e3:c3:5d:57:74:06:23:30:bf:72:
97:d7:0d:19:4e:05:2f:01:b7:19:5f:fb:a0:12:f8:
ca:6f:df:03:2a:c2:b7:48:60:9b:6d:71:c8:d5:cd:
90:49:c0:bc:8b:04:0c:a1:6f:a3:c7:3f:55:07:56:
c1:77:e1:1c:9e:ac:ce:9d:cf:e3:37:82:2f:ee:c8:
4a:e4:13:bd:d5:c3:e7:d6:86:46:cf:e8:47:41:27:
c9:ac:f4:96:7d:2a:a8:23:5d:4a:b4:ce:ad:f3:b6:
19:89:6d:24:19:b0:0d:fc:8a:0e:43:fd:26:51:37:
8d:65:50:95:3b:f0:de:3f:38:25:42:7e:02:c9:43:
21:06:02:ce:5d:ce:5d:db:64:e3:0e:34:90:51:d6:
19:fa:f1:c6:f9:61:34:bc:fd:82:6c:b3:de:82:ae:
5b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:35:B4:37:A3:D0:28:03:93:F5:60:86:FD:F3:A0:26:D9:96:52:79
X509v3 Authority Key Identifier:
keyid:0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:ee:e2:02:36:a1:25:4e:05:e3:04:90:ba:20:dc:b0:be:fd:
76:92:bd:ec:dc:45:be:8d:bf:05:47:eb:2e:d8:73:07:23:b9:
9e:69:2a:18:3e:02:5e:0c:fb:52:73:47:f6:ee:9c:93:8d:56:
10:89:eb:25:06:0d:93:9b:3a:be:67:09:7b:f4:af:9e:e3:e5:
1d:14:77:70:8a:4f:64:aa:11:9c:61:a6:f1:4f:68:0f:6c:fb:
57:46:cd:0f:b8:c8:21:48:27:a2:b7:6a:3c:29:98:d2:e5:24:
29:28:76:e7:99:1d:a7:73:1d:a4:db:71:70:cc:3a:78:ae:18:
f8:78:9f:1c:d2:05:2b:9c:77:35:42:01:51:b5:15:29:ad:84:
c8:e1:7d:ae:67:91:ce:18:b3:46:3a:28:b9:ab:0e:ce:b6:a9:
9b:52:58:03:63:6b:81:cb:e0:53:0a:55:e7:5d:98:dd:67:f2:
3f:c1:c6:d2:f1:d5:60:c3:f4:09:79:fc:e3:90:b5:03:85:42:
77:41:2b:5a:17:27:ad:bb:ad:53:60:0a:79:1c:d9:89:1e:4c:
05:bb:4b:01:ed:bc:2e:3c:72:74:b8:a0:cf:ed:7b:5b:0e:30:
8d:1a:6d:f8:a5:1a:a0:93:1d:d2:b6:37:80:03:55:00:3f:e6:
a2:a3:05:f7
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwJjEkMCIGA1UEAxMbYXBu
aWMtcnBraS1yb290LWlhbmEtb3JpZ2luMB4XDTI0MTAxNDAyMzEyMloXDTI0MTEy
MTAyMzEyMlowGDEWMBQGA1UEAxMNNjcwYzgyN2EtYjI0NjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMQnHh0kWyeaeFKRRIIKxj+sCEbb8A5NsSawshTW
aGzUtIILuAKIwspWnuc9A8IbGjC1aoBTHnzhtQ2Rca5tymHVQh1RCqsYlGmxpZQV
G8RpOUeGiQ0yoRMVO4wi8Nbjw11XdAYjML9yl9cNGU4FLwG3GV/7oBL4ym/fAyrC
t0hgm21xyNXNkEnAvIsEDKFvo8c/VQdWwXfhHJ6szp3P4zeCL+7ISuQTvdXD59aG
Rs/oR0Enyaz0ln0qqCNdSrTOrfO2GYltJBmwDfyKDkP9JlE3jWVQlTvw3j84JUJ+
AslDIQYCzl3OXdtk4w40kFHWGfrxxvlhNLz9gmyz3oKuWyUCAwEAAaOCAi4wggIq
MB0GA1UdDgQWBBQyNbQ3o9AoA5P1YIb986Am2ZZSeTAfBgNVHSMEGDAWgBQLnMqQ
3Q16ijdmaxkhf+DYQDe3ojAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5LzgzOERCMjE0MTY2
NTExRTJCM0JDMjg2MTcyRkQxRkYyL0M1ektrTjBOZW9vM1ptc1pJWF9nMkVBM3Q2
SS5jcmwwXQYIKwYBBQUHAQEEUTBPME0GCCsGAQUFBzAChkFyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvYXBuaWMtcnBraS1yb290LWlhbmEtb3JpZ2lu
LmNlcjBKBgNVHSABAf8EQDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0
dHBzOi8vd3d3LmFwbmljLm5ldC9SUEtJL0NQUy5wZGYwfgYIKwYBBQUHAQsEcjBw
MG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv
ODM4REIyMTQxNjY1MTFFMkIzQkMyODYxNzJGRDFGRjIvQzV6S2tOME5lb28zWm1z
WklYX2cyRUEzdDZJLm1mdDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUF
BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAGfu
4gI2oSVOBeMEkLog3LC+/XaSvezcRb6NvwVH6y7YcwcjuZ5pKhg+Al4M+1JzR/bu
nJONVhCJ6yUGDZObOr5nCXv0r57j5R0Ud3CKT2SqEZxhpvFPaA9s+1dGzQ+4yCFI
J6K3ajwpmNLlJCkodueZHadzHaTbcXDMOniuGPh4nxzSBSucdzVCAVG1FSmthMjh
fa5nkc4Ys0Y6KLmrDs62qZtSWANja4HL4FMKVeddmN1n8j/BxtLx1WDD9Al5/OOQ
tQOFQndBK1oXJ627rVNgCnkc2YkeTAW7SwHtvC48cnS4oM/te1sOMI0abfilGqCT
HdK2N4ADVQA/5qKjBfc=
-----END CERTIFICATE-----
Generated at Mon Oct 14 05:12:07 2024 by rpki-client on console.sobornost.net