Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
File: aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft (raw, json)
Hash identifier: K90UKsMHJDSrdhsGP4P/s+ACFnChsEVdFnnCEMCt7Vc=
Subject key identifier: 15:C5:95:E3:A7:B6:83:58:22:E2:11:62:C5:0B:01:A6:6B:AD:A1:8E
Authority key identifier: 68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A
Certificate issuer: /CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A
Certificate serial: 03AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
Manifest number: 03A4
Signing time: Sat 29 Mar 2025 01:00:38 +0000
Manifest this update: Sat 29 Mar 2025 01:00:38 +0000
Manifest next update: Sat 05 Apr 2025 01:00:38 +0000
Files and hashes: 1: aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl (hash: GmethvVS2xoP5WScNNU0DC4dDcODK8s0nU69/fgGKNk=)
2: 97E8ACD68E6611EC9EBE626FC4F9AE02.roa (hash: tLChoqAT+qMzYdiOem/hyADnIcDAlpuqVUc6loXrSu8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938 (0x3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91289A2
Validity
Not Before: Mar 29 01:00:38 2025 GMT
Not After : Apr 5 01:00:38 2025 GMT
Subject: CN=67e74636-d98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:ea:c0:bf:68:5a:af:54:c5:71:e9:1c:d7:
e2:cc:f6:75:8a:90:b3:f3:2b:fc:be:b5:61:4a:5d:
69:73:64:da:de:23:16:13:c7:f8:f5:13:16:a3:8e:
5d:a2:0a:71:b9:22:db:b8:94:26:ad:4f:fa:9c:73:
73:44:92:6a:09:f9:a3:0d:52:51:cc:d8:d8:02:48:
d2:3c:46:e6:3a:e8:48:f0:14:39:b1:17:24:d9:db:
e3:3d:c4:a6:f9:80:10:14:93:cc:79:c3:c1:e4:af:
d8:84:b0:02:b2:6f:35:4d:31:8a:75:15:7e:eb:5b:
81:f6:39:21:35:9e:03:6d:0c:6d:f3:f2:2a:a4:23:
e7:ac:bc:8b:f3:8e:94:f5:2e:6a:43:89:9c:21:c2:
b5:8b:e4:27:e7:d0:11:6a:a7:f0:51:cb:ca:02:39:
a5:9a:8f:41:06:f2:12:22:c9:04:d4:0b:62:af:46:
de:a7:0b:3f:91:1c:da:85:9e:e9:37:72:5a:f8:75:
45:99:46:02:c9:15:7d:22:38:6d:7b:29:28:b8:2b:
9d:87:cc:09:ad:4b:71:76:18:d9:59:31:8b:12:cb:
e2:2b:ce:87:f2:5f:71:4d:61:c5:f1:b3:01:23:e2:
74:61:ba:f5:da:89:b9:21:7b:fc:e7:fd:c7:9a:18:
59:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C5:95:E3:A7:B6:83:58:22:E2:11:62:C5:0B:01:A6:6B:AD:A1:8E
X509v3 Authority Key Identifier:
keyid:68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d0:7d:38:30:a2:cd:f1:23:a0:c8:a4:65:87:67:0e:54:4a:
cc:fc:17:22:37:28:c3:8f:b9:b3:05:fc:f3:d5:77:07:65:a6:
ea:60:ea:b4:e6:07:1b:b5:15:df:af:42:4f:ec:10:6c:b2:22:
a3:8f:52:92:e0:80:8c:99:f5:1f:df:f8:70:07:7e:33:15:3d:
24:70:01:3f:26:d9:a3:96:67:43:f0:6f:72:96:aa:08:a4:f3:
5a:90:b6:86:65:5a:7e:d7:d6:a1:6e:fe:87:23:3d:8e:b4:31:
49:c8:09:22:90:81:87:ab:33:75:12:30:47:04:a7:27:c3:f0:
6a:5a:4b:9e:e4:15:6a:e8:0f:a0:d5:31:b6:65:fe:ca:12:cb:
10:96:c6:5e:47:64:1f:31:2a:53:34:95:67:a4:72:2a:bc:f0:
1c:83:11:5a:cb:33:69:38:89:39:6a:17:b0:14:35:78:61:e4:
57:62:50:5d:67:32:ac:5c:40:77:fa:e5:8e:55:74:ea:a9:ad:
66:3a:06:06:66:04:1f:74:c9:b7:da:3b:2e:25:1c:54:4e:3e:
a8:c1:c1:57:94:04:70:28:42:ad:6e:07:5a:9e:cb:8f:bb:18:
c9:c8:e9:16:f2:13:d0:94:db:71:2d:5f:63:65:e0:73:c9:7c:
38:1e:b9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:24:46 2025 by rpki-client