Manifest
$ rpki-client -vvf rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
File: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft (raw, json)
Hash identifier: SFszR4RjI/Wh1SlJd4EZSPPQK8WGUsf7zeLFaCWMHDU=
Subject key identifier: BC:AE:BC:0D:CD:9D:D7:C1:71:09:1C:C1:E0:CE:E6:4C:F9:CE:D5:C2
Authority key identifier: 0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Certificate issuer: /CN=apnic-rpki-root-iana-origin
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Subject info access: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
Manifest number: CA
Signing time: Sun 06 Apr 2025 23:16:47 +0000
Manifest this update: Sun 06 Apr 2025 23:16:47 +0000
Manifest next update: Tue 13 May 2025 23:16:47 +0000
Files and hashes: 1: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl (hash: RBwKM0vgYdLQ6wLAas6ENFDcCYnu9cvhUfe6Oa1DmAk=)
2: mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer (hash: RvLioQUJYOx3lSLbpD/vdlVYJnUihm1q0DARHdn3xcs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 May 2025 23:16:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=apnic-rpki-root-iana-origin
Validity
Not Before: Apr 6 23:16:47 2025 GMT
Not After : May 13 23:16:47 2025 GMT
Subject: CN=67f30b5f-73b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dc:41:17:30:b7:e4:06:e5:bd:13:a2:7f:55:
da:0b:de:26:ad:c6:ae:a9:7a:92:1a:24:70:bf:53:
5c:98:bb:01:1e:14:96:e9:a1:12:4c:d2:59:2d:de:
93:de:a0:6c:54:83:86:e2:46:8b:c1:30:a3:23:19:
02:de:52:95:c5:c6:82:d2:88:56:f8:8f:a2:3b:9b:
77:b2:0d:c8:9a:05:8e:04:6b:60:0c:47:90:5e:53:
d5:db:1c:70:af:5d:f3:7c:eb:6f:23:e9:8f:03:20:
97:dc:40:bc:f7:24:c0:b6:39:ee:af:fe:fd:78:ed:
4d:91:04:43:a0:ac:cf:bb:e8:21:fe:3a:84:7a:cb:
a1:db:c7:8b:ef:d4:9f:3d:7e:b7:0d:79:b9:09:0d:
96:f4:53:53:74:50:0a:89:7e:01:b8:f2:ac:7a:94:
89:3c:2c:85:ad:8a:cb:df:48:af:f9:5c:ff:e7:b0:
f0:ef:6d:a8:00:14:e3:25:97:f9:f9:b7:28:32:88:
29:2e:48:5c:c3:01:2f:80:36:8b:0c:ef:9f:fd:7f:
36:f8:c6:d3:07:4c:22:e9:c1:86:cb:72:6d:bc:4e:
72:e9:01:36:08:92:a7:28:0c:c9:16:6f:dd:50:61:
cc:aa:49:73:f0:81:8f:38:22:cb:9b:e2:c0:b8:f2:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AE:BC:0D:CD:9D:D7:C1:71:09:1C:C1:E0:CE:E6:4C:F9:CE:D5:C2
X509v3 Authority Key Identifier:
keyid:0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:b4:ec:ad:00:e8:7b:b6:d4:4e:83:9b:06:28:3c:4e:90:32:
00:a4:0c:f8:ff:8f:08:f1:cf:b1:b6:17:e3:4e:1c:0d:cd:58:
a3:94:37:c6:22:f0:09:21:d7:ec:09:ed:d4:29:4e:16:32:44:
d3:3d:11:d7:10:e1:2c:75:0a:dc:2b:8b:c0:b2:b2:93:fe:73:
53:da:a0:d3:14:c8:17:6f:e3:bb:03:a9:6e:c2:b1:ef:75:4c:
f8:2f:88:93:61:15:d1:bb:ef:1f:8a:34:f0:29:38:04:a1:26:
9c:1f:5d:b9:55:37:af:ba:57:a0:17:b9:97:dd:5a:22:4d:49:
32:e7:b5:74:76:06:51:15:ab:f9:20:58:75:af:db:81:87:8f:
f1:63:5c:d7:5a:96:03:0b:cb:08:ad:8e:65:a6:d3:8a:ca:dd:
3e:63:a0:28:0d:30:b3:c8:ab:d0:c4:93:38:ed:2e:8a:59:5b:
53:9c:c8:03:18:02:c3:1a:be:16:58:23:55:56:cf:41:52:97:
06:68:95:f3:29:71:2e:72:8d:38:4d:1e:2c:40:e5:18:fb:93:
8b:bb:d7:93:1f:76:76:94:7b:22:fc:8d:e1:39:7f:1c:d2:04:
35:0b:3d:89:5e:ff:04:0e:b6:94:74:48:34:ab:cf:7e:1f:21:
35:f4:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:52:16 2025 by rpki-client on console.sobornost.net