Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
File: L0yMSsxFXG1aSQxAkLOjUqivHLU.mft (raw, json)
Hash identifier: LPE0dVISNUCB242bECd/L6NNZ5r9VIZNBJAHgJqX9rw=
Subject key identifier: 86:AD:D5:30:A7:B8:17:41:5F:7B:CF:7D:1E:EC:DE:A8:1F:92:5E:56
Authority key identifier: 2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
Certificate issuer: /CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5
Certificate serial: 0409
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
Manifest number: 03FE
Signing time: Sat 29 Mar 2025 00:45:49 +0000
Manifest this update: Sat 29 Mar 2025 00:45:48 +0000
Manifest next update: Sat 05 Apr 2025 00:45:48 +0000
Files and hashes: 1: L0yMSsxFXG1aSQxAkLOjUqivHLU.crl (hash: CW0mYOdcU31oxjhs8Cg4LUWZslNHPUiZC/vxVJ+rDfo=)
2: BD6C86326AEC11ECB61ECF30C4F9AE02.roa (hash: ycvRnCz+W4ba8DDROuCngyAKLqsVfBGFpl90bOtHXMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1033 (0x409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130128
Validity
Not Before: Mar 29 00:45:48 2025 GMT
Not After : Apr 5 00:45:48 2025 GMT
Subject: CN=67e742bd-4095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:8b:79:5f:3f:a8:70:8d:1d:2b:92:e2:e1:
ab:54:cd:f6:3e:14:a3:7a:49:58:e8:53:06:49:bd:
ee:0d:77:0a:f4:a1:df:7d:d8:83:67:55:24:cb:8e:
93:41:bd:a6:a2:56:0f:8f:d3:2a:9c:fb:a7:d5:f8:
2e:03:5e:00:73:8f:59:04:d4:f8:fc:75:d6:12:72:
c5:5a:43:41:ee:24:43:16:19:2c:65:3a:0a:0a:38:
29:b7:7b:14:51:a1:a9:b2:60:0b:9d:43:87:e9:dc:
88:9f:0e:5a:6f:50:57:f0:94:14:93:a8:72:a7:a0:
0e:a5:a1:05:63:62:3c:0b:ce:56:6f:d9:c0:f5:c9:
f1:7c:ae:36:7c:60:1b:00:c3:1d:86:43:00:94:1c:
c8:98:ac:f6:99:a6:c6:57:13:cf:74:4b:d3:e3:ad:
3d:b0:65:91:bd:04:8f:c2:65:d1:ff:81:f0:a9:f8:
52:4e:03:56:a6:40:de:0e:42:71:db:9b:65:3a:0e:
9a:8d:59:2d:45:ad:e3:dd:1d:f3:3a:d1:b4:9a:e1:
8d:78:9a:c0:2b:e1:27:5c:9d:23:c3:d9:be:e5:ae:
05:c5:0e:8d:2b:82:a3:27:c2:57:3e:6c:6c:73:6f:
f5:3b:d2:a0:e0:62:18:ff:32:cc:5b:8f:5f:5b:ab:
30:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AD:D5:30:A7:B8:17:41:5F:7B:CF:7D:1E:EC:DE:A8:1F:92:5E:56
X509v3 Authority Key Identifier:
keyid:2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:36:0b:9f:0c:17:48:5a:5e:f8:58:d4:8f:2d:e6:c4:5e:f5:
bd:b4:3e:1d:50:fa:ca:b1:93:f6:f9:3b:f4:db:52:83:33:51:
19:92:f8:ae:9a:ac:00:26:d8:3c:07:f4:d9:55:0e:09:9a:31:
55:b5:38:c5:61:95:76:d7:ec:22:0f:94:93:57:7b:e4:4c:ff:
fa:eb:01:c0:aa:1c:80:f2:9d:e0:71:1b:42:dd:ce:ef:2d:32:
d8:e7:80:ef:6b:97:f3:eb:58:f5:06:60:d0:06:cc:ac:69:7b:
41:8e:90:6f:8a:cf:0c:e9:0b:09:b5:99:a0:ee:ec:ad:de:eb:
27:0a:a8:88:dc:88:3d:85:e2:84:6a:b9:dd:90:3f:58:0e:ee:
31:59:d2:20:23:72:0b:b8:2c:de:e6:30:51:e5:55:34:6c:df:
bb:a3:e3:89:13:98:d4:f7:f4:51:55:6e:c6:36:c3:76:04:6f:
75:12:f7:71:24:71:9f:e8:26:c5:33:40:1e:80:89:5d:7e:d9:
50:2c:4f:cf:43:6b:cb:14:29:46:7f:1f:8a:5f:69:cc:31:a8:
a4:d9:2d:c8:8b:86:1e:80:66:89:3f:60:3b:fd:aa:c2:85:59:
00:e6:8d:2d:4e:60:5a:af:3e:10:b8:19:7b:4f:e4:4a:dc:e6:
20:b7:96:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:37:54 2025 by rpki-client