Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
File: p0l4jLT0H9heesJjyHW36vLA540.mft (raw, json)
Hash identifier: 99i8ZIL/FOlGJcVZhXy37VyN/hODK3pEleyuALBg498=
Subject key identifier: 3D:33:14:3A:E2:62:89:C3:4C:A6:64:6B:FC:8F:47:17:4B:52:C4:21
Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D
Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
Manifest number: B7
Signing time: Sat 29 Mar 2025 05:26:59 +0000
Manifest this update: Sat 29 Mar 2025 05:26:58 +0000
Manifest next update: Sat 05 Apr 2025 05:26:58 +0000
Files and hashes: 1: p0l4jLT0H9heesJjyHW36vLA540.crl (hash: ne56bcYCcjiJ/hB8ylcJbHdSz3hYKuIsqcXIwX/tQa4=)
2: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (hash: VFGpYkVQUYPgthphq1FI7HtfcdckVL6PZeOiO03NNQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C20D
Validity
Not Before: Mar 29 05:26:58 2025 GMT
Not After : Apr 5 05:26:58 2025 GMT
Subject: CN=67e784a3-4e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ec:98:22:52:55:25:bb:2e:da:1d:70:c4:4c:
2f:b2:00:12:83:c0:72:aa:f3:eb:0c:fa:db:7c:3b:
76:f3:af:36:ea:3b:8d:e2:a6:a8:5a:3a:e5:06:81:
b0:ca:86:79:97:9e:bb:3e:d9:cb:75:46:73:9d:c9:
c7:4b:28:7e:cb:22:95:1f:2e:b4:9a:8d:b8:9b:d1:
02:15:ea:b4:b1:83:5d:69:3e:53:06:10:71:b4:24:
08:e1:13:9c:02:3b:64:26:18:f5:ab:fd:75:28:a0:
54:d8:4d:d2:c3:83:f1:b4:4a:1c:ba:1a:a3:48:54:
28:16:da:bf:93:34:43:2c:81:b7:40:f9:b2:b7:01:
30:2d:8a:57:38:84:99:c6:48:42:1e:24:68:42:eb:
49:66:68:a4:f4:a0:01:1b:0e:63:03:f0:22:17:45:
27:0e:71:0c:2e:c6:5b:42:cb:5e:b5:c8:83:0a:38:
4e:69:40:de:0e:df:ca:28:5e:ec:f3:de:d7:1b:61:
1e:97:c9:57:d2:2b:31:cd:98:a6:8a:eb:2c:2c:8f:
3f:37:58:8f:a5:88:fb:ed:6f:ea:f3:35:93:4b:e3:
0b:91:77:65:67:6e:80:8c:7e:3e:a0:c0:ce:c8:3f:
97:a5:1a:10:93:45:14:08:f4:1b:39:bb:f6:5c:9a:
c2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:33:14:3A:E2:62:89:C3:4C:A6:64:6B:FC:8F:47:17:4B:52:C4:21
X509v3 Authority Key Identifier:
keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d3:eb:95:d7:65:67:ec:93:ca:ec:fa:10:c1:79:72:5c:53:
22:17:7b:12:b6:95:ef:a0:15:4f:e3:db:b1:fd:a5:00:8e:50:
3c:79:77:a3:67:66:9d:b1:61:36:5b:33:a1:ee:5c:07:c0:38:
9a:89:7e:69:50:bb:24:79:56:4d:c5:79:2a:dd:d2:dd:ac:68:
70:a3:3b:77:9d:86:14:ad:7e:f3:35:51:4c:f0:03:25:80:57:
fe:5c:00:89:82:82:e0:af:69:39:e2:16:7a:23:d1:bf:9e:7c:
d2:a7:6f:dd:2d:35:55:e3:78:ab:f1:7f:5c:c1:3b:7c:a6:bf:
f8:f9:55:4f:70:f1:58:ea:eb:77:42:ff:0b:a5:96:fe:2d:68:
37:b8:bd:b3:09:a8:43:b6:69:33:9c:e4:95:42:cb:98:27:03:
77:49:e7:35:cb:06:3c:0b:1c:63:7d:e1:fa:b4:f7:22:bc:6d:
1f:34:d9:a6:33:ea:82:df:ef:a3:56:a2:66:d0:e0:68:f8:17:
a9:6d:d8:4e:b4:ea:de:dc:84:20:31:70:58:00:35:a5:96:f3:
55:fa:2e:68:93:69:1f:69:6e:c1:c9:e3:e2:00:2d:c3:0c:66:
19:a8:0b:80:eb:56:2c:d3:bb:2b:d3:99:ae:c0:b9:a9:ea:f7:
5f:96:0b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:27:36 2025 by rpki-client