Manifest
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: NvB7pIk3/YvIWAv+jYYy83qLn7Wv11Qcv4tHA9IoKNI=
Subject key identifier: 54:44:E2:1B:F5:11:83:01:F4:9D:3B:56:D6:3C:43:96:F3:31:B5:83
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 46A1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 45F8
Signing time: Mon 28 Apr 2025 14:50:09 +0000
Manifest this update: Mon 28 Apr 2025 14:50:09 +0000
Manifest next update: Mon 05 May 2025 14:50:09 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: LJ6msQqCvw+GImtrR1Odxyc1UEf83lQ/KWU7ztTPq5A=)
2: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: dIUmjSrIjTBexv9/ceLPC3WswXZRCQ+E7X3cPIrgsiw=)
3: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: N0F8HE1OKVKKKHAEjBQrKcxyApq01oZoxtlct6NIs44=)
4: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: vp1tRoe4NsXHyQT0OHKIj2r+bs3aEldVk7YOXioMzPc=)
5: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: EBPO+j383ZTZL3W25SBCuUDnWsryeNl/oCk3sCJDyPg=)
6: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: lK432uTKMzI/MWDWDCT/5eSJfdDwnCex4YbKV+8mZxI=)
7: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: okjzU3E4UBevhxAwJ+/GBUGWv9CrjBdiXIkVX/kNLUw=)
8: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: wPpie+ThAR/1TthkCM7hgEd/wJa4M0QWrfReez52vcc=)
9: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: yeZNkJNHC+qtIscVm8AAik64XQjEl1j01cQ1Y6MWxhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 May 2025 14:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18081 (0x46a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Apr 28 14:50:09 2025 GMT
Not After : May 5 14:50:09 2025 GMT
Subject: CN=680f95a1-582b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:cf:d5:ac:7d:7c:95:ef:df:fc:0c:d7:01:
d2:6d:cd:a4:c4:54:91:0f:dc:b6:56:c6:b3:29:01:
79:80:e3:06:fe:08:21:96:e2:b7:1f:b1:f0:e5:d2:
f1:10:6a:1c:81:5b:76:ac:4d:9f:35:1d:81:f4:a4:
be:b3:6a:36:0d:9b:2c:d4:4a:76:b4:ea:32:b0:9d:
84:0d:d8:29:f1:14:77:54:f3:74:21:f2:16:27:46:
9e:2f:ec:aa:b4:86:c1:1d:d8:88:3f:b9:b0:47:66:
8d:26:62:e1:8a:70:de:3f:c6:70:78:f3:76:3a:57:
b1:a3:b7:f1:00:6c:f0:4a:dd:2c:65:ad:93:85:40:
18:22:de:94:db:a2:27:0f:11:3e:61:2b:d4:8a:a9:
76:1a:af:bf:33:f1:e0:9e:06:7b:80:57:61:79:4f:
98:be:35:3e:0d:67:ce:27:98:d1:9a:4f:ef:66:eb:
9d:bc:09:dd:27:e0:ca:7d:a4:ea:83:e7:3e:bf:65:
8e:a5:01:84:10:00:b6:9b:83:b2:71:54:85:08:46:
c6:c0:c3:3b:7a:85:ce:c7:d2:12:c2:39:47:51:68:
33:5d:7e:35:5c:a5:28:19:93:f9:df:11:a2:98:b8:
0c:8c:bc:a1:f0:cb:a6:d0:0f:82:c9:e9:bc:08:e6:
11:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:44:E2:1B:F5:11:83:01:F4:9D:3B:56:D6:3C:43:96:F3:31:B5:83
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:9b:bb:30:3d:6d:c2:ad:50:0c:5f:10:1d:85:d4:9c:e6:fc:
0f:24:6e:b8:cf:98:39:7c:97:be:68:fd:5c:12:36:e0:55:d7:
f7:88:d3:63:98:16:4b:08:32:74:b4:e5:df:2a:1d:4a:a2:60:
97:17:db:17:7b:ed:94:7f:85:b6:e5:a2:9a:b1:d2:7b:ae:04:
8a:09:25:e6:ce:8f:44:ab:b7:b6:d1:bf:9c:3c:9d:7a:82:b8:
41:46:23:ca:12:52:6a:fe:cf:eb:57:29:96:04:4d:68:43:01:
01:90:53:fe:35:a0:90:13:47:3e:1d:60:fc:8f:97:6e:1f:86:
45:05:0d:1d:f1:b4:ff:74:41:b5:b6:9e:e5:13:c4:e4:2b:5b:
ca:4e:22:1c:2b:60:c9:bb:d7:e9:76:0d:b4:50:79:83:24:bc:
7b:81:98:a2:d9:c8:16:36:4d:81:0c:87:04:32:e9:b4:07:07:
be:ad:7d:f8:24:0b:fa:d4:9e:1c:bb:ba:14:22:f1:49:20:95:
0f:76:b6:3d:4e:19:9c:a7:3c:15:fb:65:f0:de:ef:4b:2a:ba:
97:df:e5:18:cf:00:ae:be:de:6a:5a:73:df:1a:66:7f:49:f1:
eb:64:5d:97:5f:d7:c6:74:ea:ba:cf:57:4d:0e:8d:1b:04:1a:
e1:75:10:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:46:09 2025 by rpki-client on console.sobornost.net