Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft
File: lMnUO1O12FDZjg2i1e88ThwxIEU.mft (raw, json)
Hash identifier: hMpFZUZkdHbTv2mnPNvbsibatkqOvpOVA2RVjlmbLCg=
Subject key identifier: 04:72:06:7B:3D:62:9F:B1:68:72:D2:26:B1:96:A2:8A:5A:57:AB:85
Authority key identifier: 94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45
Certificate issuer: /CN=A9120E21/serialNumber=94C9D43B53B5D850D98E0DA2D5EF3C4E1C312045
Certificate serial: 0FFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft
Manifest number: 0FFE
Signing time: Fri 28 Mar 2025 17:33:44 +0000
Manifest this update: Fri 28 Mar 2025 17:33:44 +0000
Manifest next update: Fri 04 Apr 2025 17:33:44 +0000
Files and hashes: 1: lMnUO1O12FDZjg2i1e88ThwxIEU.crl (hash: fDKxj6mh8MO5C+ShWKlBHSoIgChqvbcPmUReYDLGLPg=)
2: 90FBBCBEB3F311EFA5A0C630C4F9AE02.roa (hash: fjbjZHBA/FnAxnWN8e7Z/ROBTRwA1nOrCoj5zv4PAPA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4095 (0xfff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120E21
Validity
Not Before: Mar 28 17:33:44 2025 GMT
Not After : Apr 4 17:33:44 2025 GMT
Subject: CN=67e6dd78-c672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e3:40:31:de:6e:23:fd:0a:d1:e0:90:9d:cd:
de:97:ce:9d:76:c5:3b:c7:e6:5c:03:01:1e:35:15:
f0:e6:28:40:b9:ef:a3:eb:a5:4f:27:b5:c4:1a:c5:
3e:a0:c0:41:6b:3b:83:b8:90:0d:5c:b2:3b:aa:89:
2f:7f:c2:01:72:e7:18:fd:46:8d:2b:ca:ee:a3:d5:
08:02:9b:83:f8:a2:61:0c:a2:78:7e:4d:48:f0:40:
c2:97:65:c8:5c:85:ee:b8:10:65:f7:84:04:f3:84:
60:a9:6f:b2:5c:28:c7:e2:22:f8:1c:7e:8b:c1:45:
70:2a:1b:ab:45:3f:6d:f5:d0:74:ce:e0:17:e6:0f:
8f:0b:0f:50:de:bf:81:81:b0:8a:7e:b4:c8:10:73:
b4:71:c1:18:8f:53:69:ce:ca:9e:94:e0:e9:58:3a:
9e:9f:f7:08:34:66:ab:53:54:75:0d:f4:d0:62:c5:
6a:53:7e:79:a0:24:71:bd:3f:46:5b:11:68:5e:24:
0f:4f:b1:e1:51:00:4f:32:c4:cc:3d:99:53:cc:f7:
b9:14:af:0f:52:e9:95:e4:54:99:4c:ed:28:29:bd:
5e:26:01:e3:45:17:cb:cc:2f:2d:ea:c8:84:6b:e9:
00:78:4b:3e:a1:56:da:33:83:e6:e0:9b:f0:12:bc:
f6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:72:06:7B:3D:62:9F:B1:68:72:D2:26:B1:96:A2:8A:5A:57:AB:85
X509v3 Authority Key Identifier:
keyid:94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:e9:6b:49:2a:6e:4a:a6:5b:3a:70:5a:2c:77:44:40:ff:cc:
bd:83:b6:8a:f6:0f:92:a2:68:13:58:97:9c:f8:84:c0:94:42:
72:4a:4b:da:d2:0d:15:98:f2:47:4f:c0:21:d4:5f:ac:7a:bb:
32:d7:d0:aa:a6:2b:90:0c:61:2e:65:84:4b:9e:70:1f:1b:82:
2e:5f:ac:c8:c7:c1:42:84:ba:9c:05:ea:6e:10:f0:dc:dd:61:
df:ee:10:d0:6e:74:94:f4:8f:74:0a:8a:45:72:82:79:7c:29:
06:f3:04:44:90:f3:d5:1a:5e:0c:66:6b:c7:00:ce:71:90:5d:
30:fb:40:40:73:91:38:ec:7f:ae:5f:94:ec:b6:c8:bc:85:d3:
50:cb:55:35:5b:ab:a9:8b:5d:32:b0:3a:05:b0:47:bb:ff:53:
1d:02:0e:6d:a4:70:4f:31:27:69:93:a5:ea:b3:cc:5b:79:89:
8d:ec:ea:57:73:0e:f1:59:f9:b2:24:86:19:71:d1:4b:ad:1b:
56:1e:5c:c3:73:c7:3c:3b:d5:5e:0c:6b:bd:81:e8:0a:df:6e:
df:8c:79:f1:3c:38:dd:27:da:36:2e:9e:da:46:9a:f6:fd:45:
b6:ef:6c:45:2b:07:ac:82:0d:18:6c:79:ee:57:f2:7d:6b:9c:
13:8d:b9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:47:31 2025 by rpki-client