Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
File: vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json)
Hash identifier: 6E9k0+v/+US3IvuPJ0OAJC8hKUXwAn+uYlvuapjw6kQ=
Subject key identifier: 8E:D5:36:3F:D7:B4:A0:8A:67:DD:27:D2:3A:2F:79:A7:15:3C:A0:41
Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
Manifest number: 1F
Signing time: Sat 29 Mar 2025 07:11:54 +0000
Manifest this update: Sat 29 Mar 2025 07:11:54 +0000
Manifest next update: Sat 05 Apr 2025 07:11:54 +0000
Files and hashes: 1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: WE5e+Nr1EpiBsAsZZjnZY3AmTf1/TH6UNpZysuEB4vs=)
2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: u93MIpjxF46V825wNe89adLBqBtdyI8rJgiDXDAPRbk=)
3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: Ditm9jS3Zsy5UK/tSQ4fwIyFAaD9ya5NTIds4DVaHEo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DB66
Validity
Not Before: Mar 29 07:11:54 2025 GMT
Not After : Apr 5 07:11:54 2025 GMT
Subject: CN=67e79d3a-91bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:db:11:73:30:3a:cd:72:a5:99:6c:79:c7:ff:
7a:e5:b2:af:4d:a5:9e:98:45:11:81:3e:13:93:e2:
28:78:db:3f:66:67:9e:95:e8:65:6f:3d:1f:ff:d4:
9f:e4:65:08:b6:c6:44:68:18:aa:4e:74:f5:03:03:
87:9d:11:ea:77:10:28:8b:cd:ce:33:bb:e6:82:22:
12:e4:b2:e9:28:28:c3:6a:56:7a:3d:99:37:5c:e0:
a5:cd:c7:a7:74:7c:e1:ca:fc:a3:20:7f:0a:d8:a9:
18:eb:ea:62:b1:43:a7:44:8d:cd:19:45:9e:e3:1e:
27:04:cf:37:88:10:2f:c3:bb:4a:30:7f:33:54:60:
be:5d:1d:27:06:2b:04:73:f2:a9:4e:3f:75:fc:0a:
ac:bd:d6:57:06:8e:3e:38:c0:b9:ff:ad:ae:f6:ea:
6e:3b:d2:6e:81:60:cf:27:f1:fb:33:b3:b7:d6:c7:
22:59:1b:d4:4e:d3:c1:24:d5:f0:67:7e:ff:a7:ca:
ea:9e:79:cd:44:a0:99:f7:1f:1a:b4:e1:6b:78:0a:
e6:0b:f0:4e:bf:ab:0b:db:b0:b8:a9:f8:c5:a1:c0:
39:aa:3c:38:e1:73:03:51:5e:5a:07:43:78:89:23:
e0:ae:76:43:58:ca:c0:19:4a:1c:93:2f:d1:c0:ad:
ea:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D5:36:3F:D7:B4:A0:8A:67:DD:27:D2:3A:2F:79:A7:15:3C:A0:41
X509v3 Authority Key Identifier:
keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4b:fb:00:64:be:a1:ad:78:73:7a:e2:cd:9b:01:83:7c:6a:
20:22:2f:55:c9:0a:8b:23:e4:1b:5f:b2:f6:6d:1e:08:3e:2b:
42:fe:af:8f:44:b1:16:06:00:b8:b1:e4:52:7a:ec:4e:fc:b7:
9f:cb:20:1c:82:71:4e:66:5e:b7:58:2f:14:92:c5:53:4c:f1:
b8:d4:48:b8:11:fa:10:86:e9:52:91:9c:dc:4b:af:b0:84:3d:
ab:09:15:b3:24:63:fc:cb:d2:60:36:df:df:98:20:fd:e4:f7:
91:b2:f3:6c:2e:74:26:5d:b8:db:39:0e:a9:23:d4:3f:b1:fb:
89:c4:51:93:33:ce:02:8d:7e:16:e7:36:6f:6a:91:33:74:28:
b1:07:77:74:a7:7e:75:81:be:df:39:99:1e:a9:0a:63:e7:68:
35:53:75:85:13:92:11:ff:32:83:04:ca:cc:18:3c:5e:a0:3b:
1e:fa:de:9d:4e:d1:db:d8:16:76:43:3b:f3:0d:f4:53:f1:25:
86:23:e9:2d:a8:9b:9c:76:33:6c:8b:e7:00:70:72:55:32:00:
2f:84:09:4c:19:77:80:ea:7b:7f:56:2a:ed:5f:04:09:06:35:
3b:bf:df:95:44:b5:50:73:38:35:87:f9:4b:84:01:53:31:76:
c0:87:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:53:57 2025 by rpki-client