Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft
File: FOvueS5AUhzVGx8DIDp_jiq7EtI.mft (raw, json)
Hash identifier: JKC0lXETUJbS2/x3fvQxdrHu1DRSiz7nvXKOGSlK+1g=
Subject key identifier: DA:B3:18:63:52:C5:CE:DC:CF:20:5A:95:C5:A7:5F:3C:5B:5B:0C:94
Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2
Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2
Certificate serial: 0A1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft
Manifest number: 0A15
Signing time: Fri 28 Mar 2025 20:02:56 +0000
Manifest this update: Fri 28 Mar 2025 20:02:56 +0000
Manifest next update: Fri 04 Apr 2025 20:02:56 +0000
Files and hashes: 1: FOvueS5AUhzVGx8DIDp_jiq7EtI.crl (hash: QJryLWox0xrU+6RiKIZFMIxEusL3fEbj3UpmBvOADaU=)
2: 6677438E6B7B11EA908F7C82C4F9AE02.roa (hash: MSUgG3YpJNbihj2Swmi1mDO3TB3FswBz5L2+dcR+N7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2587 (0xa1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F40E
Validity
Not Before: Mar 28 20:02:56 2025 GMT
Not After : Apr 4 20:02:56 2025 GMT
Subject: CN=67e70070-32df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:b2:2b:e6:28:91:87:dc:aa:b2:8f:32:16:
8a:b3:7a:83:37:19:96:4d:6d:44:c0:f8:7b:c5:f2:
2f:08:d9:19:f5:f2:88:95:70:0d:34:0e:e5:5f:ae:
ad:79:6d:cf:b5:e8:6e:d3:1f:7d:79:fa:36:81:6c:
a3:73:c8:e7:6c:81:2d:bd:0b:58:2b:76:ad:76:72:
60:e9:98:f1:33:75:d2:a3:07:48:51:1f:3f:75:70:
5f:4f:11:14:dc:8d:ce:85:a2:45:6e:a5:82:a7:ac:
fb:a9:c6:ad:83:e4:e9:0c:41:cc:29:95:fa:5d:52:
80:5f:3b:60:d1:2c:38:9a:72:31:88:79:e8:98:01:
25:eb:53:a4:f1:13:24:76:f7:23:1e:9c:80:01:37:
e3:ce:dc:01:2c:8a:eb:5a:c0:20:56:69:96:ab:a2:
4c:e1:81:ca:24:4a:15:2e:ee:75:c8:c9:a4:10:bd:
38:e9:75:e0:2e:1b:b7:bf:8a:29:de:4e:f4:fe:6c:
dd:98:67:d4:9c:e5:3f:57:e4:9e:c4:b1:56:27:19:
9e:3e:b1:c7:35:42:bd:2a:a5:22:f0:65:13:18:5a:
58:b5:2a:c6:23:dd:3d:c8:ed:b0:36:d1:87:de:8b:
86:ac:d1:41:a8:c0:ef:c9:e4:70:27:dd:ac:13:3f:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B3:18:63:52:C5:CE:DC:CF:20:5A:95:C5:A7:5F:3C:5B:5B:0C:94
X509v3 Authority Key Identifier:
keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:92:85:17:ba:99:9b:37:e5:66:dd:2a:ce:2a:e8:16:50:7f:
e3:cc:d8:b8:47:af:07:74:1e:ef:f1:df:27:e3:81:81:da:d3:
98:da:cc:60:82:67:cd:48:17:89:65:24:f3:5e:3f:16:81:bc:
f6:53:a9:18:27:c1:09:e2:4e:ba:a3:26:cf:0b:c6:7d:a6:1f:
be:70:9c:39:1d:42:97:2c:53:35:d7:57:bb:83:68:7a:94:e2:
ca:03:90:ef:fb:40:c4:d7:77:cc:0b:6b:e8:55:b0:2e:56:1d:
e7:27:5c:6e:19:98:4d:5b:34:43:60:9e:5c:c6:be:85:0c:7a:
e0:49:c7:d8:26:0f:e7:eb:0a:c0:e1:5a:c4:db:d2:79:b2:b4:
c5:dc:93:83:7f:6c:e0:f8:7f:7d:70:e4:c6:d5:28:34:89:9e:
a0:b5:d2:e1:69:1f:93:e6:93:13:1a:bb:3c:2a:0c:68:f8:85:
95:45:f1:6f:a5:68:79:92:78:cc:76:95:df:fe:96:82:c3:2e:
7c:63:32:0f:35:63:cf:61:a0:0c:c9:7f:51:72:54:5f:ef:5b:
61:4b:6c:a4:ef:c3:2d:7e:7e:f9:5c:a4:5f:f4:7e:52:e7:db:
e7:25:de:03:9a:66:a6:4f:3b:27:e7:3b:4b:a2:8e:49:ac:00:
3a:57:28:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:09:04 2025 by rpki-client