Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
File: i16Our4JofST0QJTwaO5OTm_yoo.mft (raw, json)
Hash identifier: zo1D+as0hC5baww5xG5puITYvlvoFpBY+wYAdHx6g94=
Subject key identifier: 94:F6:37:CF:D9:AE:FE:6B:E5:6B:A7:E2:37:31:09:21:11:53:A1:AF
Authority key identifier: 8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
Certificate issuer: /CN=A91336DF/serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
Certificate serial: 5E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
Manifest number: 5D
Signing time: Sat 29 Mar 2025 06:23:51 +0000
Manifest this update: Sat 29 Mar 2025 06:23:50 +0000
Manifest next update: Sat 05 Apr 2025 06:23:50 +0000
Files and hashes: 1: i16Our4JofST0QJTwaO5OTm_yoo.crl (hash: 4bzYJh9NxXEgcH1Qn52n9h2Ts0odmtg7HOd5LYPB7PM=)
2: D5A3117E85DF11EFA2C33754C4F9AE02.roa (hash: DRt8K6jlAria6yTB9gWZIhOKN+7LEqAGx7rHUxgtPQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91336DF
Validity
Not Before: Mar 29 06:23:50 2025 GMT
Not After : Apr 5 06:23:50 2025 GMT
Subject: CN=67e791f6-3c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:14:85:6f:4b:39:c2:a2:ad:7e:35:79:82:09:
0d:ce:7b:5c:45:1b:c6:05:92:ea:c0:cd:44:34:86:
b6:d6:96:62:c5:fe:3c:3d:33:4a:13:8d:22:50:7a:
ba:96:73:51:f9:e5:08:b8:b7:09:91:1b:d6:67:c5:
4a:c5:05:ff:9c:96:f7:8e:99:28:83:c9:ac:86:67:
4d:25:b7:a8:9e:ad:59:ff:8c:12:a6:98:65:1a:9b:
40:35:2c:ff:9e:61:d3:5a:0b:0b:d6:a7:94:2c:28:
7a:d1:6c:8d:7f:e0:4f:65:75:f1:47:99:03:16:f4:
86:b5:78:07:9b:28:29:34:ec:11:13:5c:a9:c2:22:
00:d3:e9:ad:d4:9e:f2:fc:cd:5c:54:d9:bc:86:e6:
ac:50:8d:46:dc:5b:3c:1a:22:44:ad:27:f3:ba:80:
20:c3:8a:6d:1d:6f:46:1a:eb:78:0b:d5:fc:14:23:
2f:47:69:7e:a4:fb:a2:5b:8e:6a:d9:9f:9e:83:75:
7e:d4:ad:88:1c:3e:e5:b2:d2:fb:0c:c8:d7:78:90:
84:e0:ff:e4:6b:9c:53:f1:62:ca:5d:ee:78:c4:28:
b8:2f:e5:18:f1:6b:fa:5f:c0:0e:33:21:b6:c9:86:
0a:0e:00:3a:ea:fb:6e:00:84:35:98:21:72:11:ef:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F6:37:CF:D9:AE:FE:6B:E5:6B:A7:E2:37:31:09:21:11:53:A1:AF
X509v3 Authority Key Identifier:
keyid:8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:de:f1:2a:bf:11:5c:f2:95:46:29:40:01:44:8a:36:e2:66:
59:86:ff:95:93:7d:50:16:f5:de:ec:17:9d:39:0b:6f:32:4f:
4c:cd:72:3e:81:30:d4:67:87:1d:c5:ee:37:b3:69:ec:d9:ae:
a5:cc:9e:d9:62:ec:89:9e:8a:32:41:fe:d2:5b:3e:ed:60:57:
de:84:36:97:5c:55:45:f5:cc:ac:57:0f:9a:41:21:a3:39:32:
d2:47:06:73:02:d4:84:8c:58:f8:7b:5f:8b:91:3d:c1:f3:02:
e7:3a:09:7e:cc:b0:a0:bf:7f:d9:6c:af:f0:fe:17:55:59:d1:
aa:4f:1e:95:2c:e7:d7:a7:c9:0b:47:84:a6:88:ed:53:6d:20:
81:89:cf:c2:b3:bc:33:e0:52:60:00:61:0f:65:98:1d:66:c4:
85:36:1c:a7:fa:8e:e5:7e:a2:ee:26:d7:d8:5e:9d:1b:68:30:
5c:d2:36:54:67:4d:cd:b8:83:13:c2:fe:37:d7:3e:fa:21:ae:
14:4b:2c:40:eb:e6:6a:32:9e:15:60:31:87:96:87:86:c3:07:
22:14:1a:e6:c5:fc:77:22:cd:57:43:18:77:22:86:20:70:ac:
2a:01:71:53:88:01:a9:99:96:14:b6:b8:cb:fc:c3:a6:38:94:
81:50:56:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:02:00 2025 by rpki-client