Manifest
$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
File: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json)
Hash identifier: MkqjWo46jmI/U8vHAJNTQM8hrO6qu3W/20yB36TGC2g=
Subject key identifier: 2E:CC:D4:CC:B2:6A:47:02:26:5F:66:3E:47:5F:E4:0E:87:05:FC:71
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer: /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial: 46E0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Subject info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
Manifest number: 46D7
Signing time: Sat 23 Aug 2025 02:50:30 +0000
Manifest this update: Sat 23 Aug 2025 02:50:30 +0000
Manifest next update: Sat 30 Aug 2025 02:50:30 +0000
Files and hashes: 1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: 7nbYsQWgOG4cSDhkBmLj4hwwn7kIX8BXhViXU6Ex66Q=)
2: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: fxyUaruAjaaco/fzq2Q5nRs7XM9NtVdLWIcLFflk+gY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 02:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18144 (0x46e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Validity
Not Before: Aug 23 02:50:30 2025 GMT
Not After : Aug 30 02:50:30 2025 GMT
Subject: CN=68a92c76-df5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:28:4a:87:33:8e:b9:a0:73:78:e5:e1:d1:97:
c5:44:c0:c7:e7:d1:c3:91:63:ef:80:5a:81:d5:d4:
54:5f:4c:0d:24:40:79:5b:50:bd:70:db:05:91:e0:
09:93:0e:47:67:ac:85:6e:d8:b1:35:82:1e:2c:da:
b0:57:4b:da:96:bf:d8:1a:65:30:8b:1b:0d:8f:5d:
89:bf:20:71:15:fe:08:68:3f:bb:ad:6c:89:92:83:
b3:ab:68:ce:c7:fa:99:11:09:9c:40:fe:84:65:e9:
5f:10:7b:7a:04:27:ad:2d:53:2f:1e:ad:67:04:4b:
2c:05:e9:a1:8a:2e:c0:2f:4d:f1:58:78:f2:01:e9:
e2:37:af:36:e8:03:f8:80:4c:9f:9f:5f:bd:e0:f8:
42:38:a6:27:7b:75:f7:9f:1d:b1:d2:be:e5:6b:ca:
61:5d:72:75:23:5a:a6:0f:8e:9b:be:66:8b:f1:af:
25:36:6c:9d:3d:cd:f4:14:94:b6:0a:19:64:11:c9:
5c:8e:26:6f:de:86:72:8c:c2:7e:57:54:2c:6f:cf:
4e:0c:c8:d1:c5:ae:3d:f4:1b:d6:ba:6e:8a:7a:c0:
af:65:c8:a5:db:5c:14:1a:fd:98:4a:62:a8:19:14:
e9:e1:c6:17:15:7e:ee:71:ff:cc:8e:d4:0c:cc:b8:
93:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CC:D4:CC:B2:6A:47:02:26:5F:66:3E:47:5F:E4:0E:87:05:FC:71
X509v3 Authority Key Identifier:
keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:8f:cc:af:6a:18:db:73:d7:28:4f:69:6c:8d:44:1a:51:f3:
b1:1b:0f:32:1a:d5:15:87:28:c7:67:9d:2b:3e:5a:24:96:97:
40:2d:44:d4:28:4a:b8:25:e6:f0:42:5d:b8:d8:ca:2c:64:00:
21:b5:2f:cf:66:9c:a8:03:5f:71:92:81:b7:1d:54:d8:4f:ca:
4d:dc:7f:a4:ad:1c:e1:fe:fd:9a:7f:90:50:ca:6b:18:6b:2f:
b2:61:66:b4:0e:80:5f:a8:50:f2:f3:7f:07:4d:28:f2:05:eb:
0e:25:be:2c:34:95:70:a5:d3:a0:97:b1:dc:ec:fd:3e:ff:8f:
9c:28:a2:65:c2:46:d5:0e:82:6c:67:aa:ac:1b:72:ba:5c:4d:
41:8b:7b:af:3c:52:7f:cf:15:5f:34:07:bc:e2:1e:4e:bb:a0:
91:f2:d4:1c:ca:ae:44:52:77:5b:01:b7:d8:f7:1b:e6:8e:26:
a0:2a:f1:a7:92:ca:54:8d:d2:d4:d7:7f:d4:5c:5d:08:59:69:
c1:13:71:a2:15:76:0b:37:79:6c:ce:33:e5:ba:a9:8f:0e:94:
05:13:85:e2:fa:8a:75:10:c2:13:89:24:b7:98:38:9e:c0:f3:
f2:4c:2c:61:ee:c4:d0:c9:38:4e:bf:19:49:e0:7b:18:0b:bd:
46:b0:54:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:36:20 2025 by rpki-client