Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
File: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft (raw, json)
Hash identifier: WwBOZauaiVoQGDEejtKCl6/2iDi15lN2OVY/xixUWAU=
Subject key identifier: F7:86:9D:B5:B9:37:53:AC:6E:A8:02:DA:0F:D6:4C:46:AB:A5:F9:F0
Authority key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF
Certificate issuer: /CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF
Certificate serial: 02F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
Manifest number: 02F3
Signing time: Sat 29 Mar 2025 01:35:00 +0000
Manifest this update: Sat 29 Mar 2025 01:35:00 +0000
Manifest next update: Sat 05 Apr 2025 01:35:00 +0000
Files and hashes: 1: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl (hash: J+m/69PACrfad3KgMovY0QCB3lnrDlsKxUQ9abgwIps=)
2: 4AC993D8D34A11EC8796812AC4F9AE02.roa (hash: IGdzlLmujAALpavxxSo45P0YFLMJKzqyXolkwQqyBjo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 761 (0x2f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911923C
Validity
Not Before: Mar 29 01:35:00 2025 GMT
Not After : Apr 5 01:35:00 2025 GMT
Subject: CN=67e74e44-d149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:7f:bf:ed:7d:4a:8c:04:68:40:13:6b:83:
8b:91:34:37:e6:86:7b:1b:18:6c:4a:ec:07:4e:59:
bc:3b:5d:50:c4:56:4f:4b:94:30:f7:ad:a3:05:38:
70:01:c0:14:82:64:4b:4f:b3:a5:69:84:32:dd:41:
12:87:9b:da:6d:b8:98:02:b9:9e:b5:5a:27:f9:74:
e8:29:f7:cc:68:85:e6:5f:b6:d8:14:26:88:e4:5a:
7c:ed:e5:df:1d:c8:72:5e:9e:5a:64:2c:b7:a6:b6:
c1:67:4e:07:9f:e9:71:f4:7d:e3:99:c7:7a:20:d5:
c6:50:24:3c:d7:2c:1a:45:0a:6d:72:b8:b9:0a:74:
e5:13:c9:da:7e:f7:41:de:7b:39:d1:58:d3:02:11:
49:43:58:fe:a4:92:05:57:06:3d:e1:d3:ef:fc:c6:
99:dc:e8:40:11:31:18:a7:3d:69:48:a3:9b:47:ca:
68:ef:37:e5:6c:ee:33:10:12:79:52:00:32:da:53:
2c:a6:3a:32:4c:bf:15:ce:ef:29:33:4c:de:c6:cd:
0a:1c:76:6f:29:ea:30:d7:45:79:ee:21:05:81:e2:
ed:8c:0b:6d:52:4c:47:a2:39:77:8e:83:b5:4c:4d:
89:15:30:3f:e8:14:35:5f:60:fa:c9:25:db:62:b8:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:86:9D:B5:B9:37:53:AC:6E:A8:02:DA:0F:D6:4C:46:AB:A5:F9:F0
X509v3 Authority Key Identifier:
keyid:72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:ed:6c:3d:0b:80:36:69:af:6b:e6:08:ab:4e:eb:54:55:e5:
18:37:3c:c1:9f:1c:cd:f8:c8:70:d7:7e:14:c7:1a:ab:dc:c9:
22:1a:a7:1d:34:24:87:e2:20:fa:52:e2:6d:e7:c5:4d:90:34:
31:64:08:4c:f6:b1:bc:a6:67:84:a1:7c:d3:b2:e6:05:42:d9:
50:cf:26:1b:8c:a6:20:f5:1d:23:2f:c9:4d:c6:32:10:f6:17:
b9:7d:b5:49:83:44:14:64:ef:f3:ef:e0:70:e6:a2:37:c0:5b:
ce:b6:7b:2d:88:69:04:dc:96:82:9b:98:7c:2f:46:92:3b:00:
f7:4c:6f:a1:e7:ce:ed:26:b3:19:bb:d9:0b:15:05:41:f0:3c:
f0:b7:b5:28:37:29:2e:fc:f0:36:ca:ed:db:f2:16:2c:97:fb:
6b:cf:59:9e:c8:0a:be:d9:fd:6f:4a:85:50:f5:ab:6c:12:ed:
90:8d:22:da:2a:a3:9e:61:90:12:90:1c:52:a2:36:03:2e:e5:
17:cd:64:38:e7:16:5c:79:68:c2:24:58:57:0a:ca:72:e1:e8:
a7:8e:38:7b:45:78:72:4a:21:1a:86:3d:c9:45:41:ba:b1:d5:
10:b0:8c:60:28:a6:3f:54:30:9a:cd:c1:ce:d5:1f:31:fc:e5:
46:1c:f1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:21:11 2025 by rpki-client