Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft
File: DBvOAktD_dqH85YV2ZS6NwYkbFA.mft (raw, json)
Hash identifier: 854Nbvq5CByxfDNGYJHC+G5qVabSuxU67f6EwjHMt90=
Subject key identifier: C0:94:FA:C5:87:92:94:47:68:27:F3:DD:F8:1E:DC:17:6F:58:6C:D1
Authority key identifier: 0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50
Certificate issuer: /CN=A911A739/serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft
Manifest number: 4B
Signing time: Sat 29 Mar 2025 06:39:40 +0000
Manifest this update: Sat 29 Mar 2025 06:39:40 +0000
Manifest next update: Sat 05 Apr 2025 06:39:40 +0000
Files and hashes: 1: DBvOAktD_dqH85YV2ZS6NwYkbFA.crl (hash: B7IKVu1/Vn3kRI98JBhhruYBIMRtPA/xddyHCcMm2Iw=)
2: 41121A8C9F5211EFA8F8A056C4F9AE02.roa (hash: gOxPsMK6qt78bQigJet/lS4chqy9h8TzqNHqZP/sKyk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A739
Validity
Not Before: Mar 29 06:39:40 2025 GMT
Not After : Apr 5 06:39:40 2025 GMT
Subject: CN=67e795ac-bc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:38:c0:a8:fb:36:9a:d0:c6:53:16:fa:03:
14:62:80:cb:0d:ea:d9:b7:5e:37:2c:55:f1:b4:4d:
c0:4d:34:b1:d0:c1:c5:68:af:93:84:93:48:1b:aa:
fa:0f:a7:99:77:39:a4:3b:02:f2:fd:75:0d:0a:7d:
ae:34:2e:d1:45:d3:2c:af:6e:f2:fb:bc:ec:75:64:
8c:9f:ef:3d:e4:d0:c8:f3:f6:ab:c4:d2:5d:d4:e6:
91:fd:25:d5:a3:ca:00:e6:3d:98:a8:fc:d8:31:a7:
72:d2:cd:0a:88:3f:50:ea:9e:78:14:32:6f:23:22:
94:b8:52:9f:da:86:14:c5:eb:b9:89:38:b7:63:aa:
f2:b7:4f:e2:29:3c:13:3d:ab:38:4c:3d:f2:12:01:
06:a9:b2:cc:bd:d4:17:ed:ae:6b:64:22:da:97:06:
6f:4e:8e:93:16:ec:3f:81:e8:84:0a:bd:50:76:8f:
3b:80:c6:54:67:4c:9e:5d:fe:f3:a0:cf:a5:5e:04:
af:b8:23:50:bd:a2:6e:01:34:8e:56:3c:b1:b6:98:
b7:17:ba:26:23:d8:e8:8e:3e:84:ec:1a:e0:22:f7:
7d:1a:1e:f3:7f:22:cf:b1:99:05:8f:7e:12:ea:1e:
85:98:21:22:09:e4:45:ff:7b:31:40:f9:39:5c:d8:
c2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:94:FA:C5:87:92:94:47:68:27:F3:DD:F8:1E:DC:17:6F:58:6C:D1
X509v3 Authority Key Identifier:
keyid:0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:c3:fe:49:27:eb:ff:2a:a6:38:fa:41:39:41:12:4c:2d:46:
28:20:14:8a:29:b6:e8:1f:2a:ff:10:f7:de:57:27:65:86:06:
b8:b5:8c:54:70:7c:1e:0a:e8:9c:52:56:a8:ee:8a:a3:ae:f9:
15:5d:23:32:16:68:ad:18:c5:99:b5:ce:bf:5a:05:62:3f:f2:
c2:6f:db:9f:94:40:12:50:cb:f9:90:89:ec:bc:9b:c2:59:d8:
c0:cd:1a:81:e6:c1:0e:e0:8e:b1:ba:73:4a:e4:62:7d:58:68:
dd:9a:df:7f:d3:22:4c:e4:6e:99:a4:ae:ba:38:eb:0c:9e:67:
c6:87:d0:09:ae:44:d8:9d:02:ed:09:9e:06:1e:a9:ac:6d:b0:
f2:4f:0d:75:5a:7e:92:9d:84:23:1d:82:48:f1:79:24:a2:24:
23:2c:38:40:9e:32:fc:a0:14:6a:c6:da:bb:be:4f:7e:71:52:
e4:f9:a8:13:99:59:b2:13:bf:41:cd:f2:fb:7b:9d:4b:18:c4:
ea:af:cb:af:d0:44:f9:d4:7b:29:17:30:0b:39:72:36:78:4a:
12:f9:87:be:87:ec:11:e3:4d:a1:58:02:68:9d:e6:27:a6:42:
4d:d5:4b:47:c4:f9:ee:7a:94:ec:ef:bf:f8:f6:ef:12:ac:3d:
7e:2f:b4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:34:11 2025 by rpki-client