Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft
File: MPLcABvWWM0WPiN3H0FHaXLg0U8.mft (raw, json)
Hash identifier: USWG3JW6jgH+H0zzX8ErJed9IjJcSiHdxqo0jwkCEJs=
Subject key identifier: CC:68:40:56:D4:21:9E:1F:45:42:85:47:2A:4B:F4:D3:B0:33:FC:55
Authority key identifier: 30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F
Certificate issuer: /CN=A91283E7/serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F
Certificate serial: 04C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft
Manifest number: 04BF
Signing time: Sat 29 Mar 2025 00:06:33 +0000
Manifest this update: Sat 29 Mar 2025 00:06:32 +0000
Manifest next update: Sat 05 Apr 2025 00:06:32 +0000
Files and hashes: 1: MPLcABvWWM0WPiN3H0FHaXLg0U8.crl (hash: L/QgCx7yi6YBOItNUtCiI+8ZPEuXF+EMJ6PdAVYzywA=)
2: 9F7C20921ADD11EC80226B61C4F9AE02.roa (hash: 76Aj2e1/zvO+ptuFoEi5Uq+Ik3Pi+kbiWoL+xAlC1Eg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1219 (0x4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91283E7
Validity
Not Before: Mar 29 00:06:32 2025 GMT
Not After : Apr 5 00:06:32 2025 GMT
Subject: CN=67e73988-6238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ac:85:aa:2d:ab:b4:f8:ba:1a:25:28:65:00:
38:22:69:6b:e5:c2:81:cd:2a:3c:e0:47:f7:40:33:
91:63:59:4a:10:7f:df:c5:12:ca:79:63:72:af:3a:
6c:b3:e3:c6:0e:59:d8:6a:61:3c:ad:1b:0d:37:78:
9a:c4:c7:70:bd:91:b4:e2:8b:d9:e6:ce:ff:33:19:
3a:5b:88:21:15:2f:d0:b1:87:fe:7a:43:83:63:a8:
08:80:11:4b:55:76:c5:90:f6:66:89:80:0a:fd:a2:
60:96:44:d3:2d:10:78:f2:a6:3f:47:bf:79:07:73:
79:ce:c9:41:78:76:3d:f4:68:cf:03:4e:b1:49:b9:
b8:d4:59:1a:71:01:d6:ef:a9:eb:a1:9f:ae:40:7f:
f7:3f:51:3c:30:a1:a6:4b:26:1e:a9:b9:99:60:7f:
8a:d0:56:37:3c:83:19:fb:0c:a6:88:2d:ce:96:60:
a9:e1:fa:35:a6:78:0d:12:ca:0d:3b:b8:57:48:1a:
84:95:4d:eb:0b:08:5f:ea:de:ba:be:c1:0c:f3:aa:
25:28:86:cc:7c:5a:c3:f7:2b:ef:8d:db:da:21:55:
ab:e8:58:f5:a6:f9:c5:e4:4c:ad:3c:de:60:6d:8a:
52:cf:23:31:83:0f:59:00:35:05:d1:c8:25:77:37:
06:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:68:40:56:D4:21:9E:1F:45:42:85:47:2A:4B:F4:D3:B0:33:FC:55
X509v3 Authority Key Identifier:
keyid:30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ee:a5:89:e7:e8:8a:51:4c:df:6c:87:ea:d3:94:eb:7c:5c:
b1:e7:e8:b0:d5:ad:5f:91:a4:05:56:70:a7:d2:69:fd:e6:05:
8c:3b:36:97:55:87:e8:2f:46:66:4a:fb:c0:b3:7b:d4:cd:da:
aa:5e:2c:db:96:cb:aa:6c:74:84:a2:eb:fb:57:88:0d:08:c2:
4e:e1:69:76:bc:e4:4b:5f:67:cd:fe:1b:83:1b:23:a5:90:33:
f8:29:30:1a:bb:8f:38:a3:78:2d:5d:90:cc:3d:7c:fa:11:af:
21:35:f4:4b:5d:c8:9c:fe:15:8a:db:4e:8d:ed:e0:cf:e9:10:
8d:99:bc:27:41:ba:18:2a:5f:de:7a:81:2f:44:dc:f1:25:c3:
26:19:10:46:1a:2c:d4:00:88:49:1f:30:b2:e8:3c:8f:c0:b4:
49:c5:1f:74:d5:33:13:fa:10:f5:96:73:b9:19:16:b6:7b:f9:
f5:a5:3b:fa:3f:31:8b:d7:02:ba:b8:11:4f:c4:1b:68:fd:c5:
2d:0e:bc:71:b1:49:7f:f5:4b:9a:54:92:eb:68:6e:0f:bf:c0:
0d:50:f7:b6:7f:b5:42:89:91:99:94:23:5f:1d:a1:c0:0a:65:
78:9f:2b:ce:5f:33:4a:64:0c:9d:93:05:3f:06:e2:f7:a2:c3:
e5:6f:6c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:23:55 2025 by rpki-client