Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft
File: YWOpVUwzBnn36hZnixCNlk7ByAI.mft (raw, json)
Hash identifier: 8e8+4C1JjE4XHGDNZ+8D0z5E2UZ4iQ0zOV/YnV7rrcQ=
Subject key identifier: 84:9F:56:CD:A5:5D:BF:EA:64:EF:32:9F:6B:79:CD:DE:80:0D:CA:03
Authority key identifier: 61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02
Certificate issuer: /CN=A91364F5/serialNumber=6163A9554C330679F7EA16678B108D964EC1C802
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft
Manifest number: CE
Signing time: Sat 29 Mar 2025 05:07:41 +0000
Manifest this update: Sat 29 Mar 2025 05:07:41 +0000
Manifest next update: Sat 05 Apr 2025 05:07:41 +0000
Files and hashes: 1: YWOpVUwzBnn36hZnixCNlk7ByAI.crl (hash: AKIo5TJNYHTQWqPQtmdTsSSheg1kZ1fwZVm8Dq2OlZI=)
2: 0992C84EAC9111EF81B7B058C4F9AE02.roa (hash: NMxi1GoZmzjnplF0r010Ud++m6/u6o+EwLX+x6zHdIc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91364F5
Validity
Not Before: Mar 29 05:07:41 2025 GMT
Not After : Apr 5 05:07:41 2025 GMT
Subject: CN=67e7801d-e80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:76:b6:5a:fd:c6:7f:fd:aa:ff:7c:0c:d4:
9d:89:b9:38:9f:14:de:c0:a2:6b:d4:5b:80:98:1f:
dd:5e:c1:9c:1d:f5:c0:2d:8a:4e:35:3d:98:9e:ee:
29:a0:85:1d:96:ea:15:36:6c:9d:68:3c:da:1f:0a:
99:09:24:ab:e8:23:73:9b:fd:f1:a3:ea:ec:5c:1d:
f6:69:d9:22:ab:53:3a:1e:e5:c3:df:26:d4:be:86:
b2:3f:68:4f:15:9b:2c:3a:56:d1:2c:6e:c4:56:93:
83:4b:8a:9d:65:55:c8:3d:68:84:8d:50:3a:4b:4e:
ee:97:c2:05:c7:b2:04:de:55:81:6a:19:40:b1:80:
0d:ec:e1:64:22:12:2a:86:9c:7b:99:31:5b:03:08:
c9:d6:0e:14:6a:2a:2f:56:aa:99:af:3c:7f:85:d3:
5f:bc:13:69:29:43:b7:4c:be:71:c8:53:fa:9b:6f:
fe:37:26:8e:5c:a9:25:a6:42:b7:42:e2:85:99:3e:
6a:b1:38:f4:f8:d1:33:54:b0:4d:ae:78:c2:ea:0a:
6a:bf:79:b7:59:79:71:86:2d:23:2a:f6:cc:05:5a:
7e:7c:ce:99:e4:d0:47:a2:02:49:7a:1c:26:a5:ef:
29:e3:60:47:78:b2:68:49:36:22:6b:9d:f0:fa:78:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9F:56:CD:A5:5D:BF:EA:64:EF:32:9F:6B:79:CD:DE:80:0D:CA:03
X509v3 Authority Key Identifier:
keyid:61:63:A9:55:4C:33:06:79:F7:EA:16:67:8B:10:8D:96:4E:C1:C8:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YWOpVUwzBnn36hZnixCNlk7ByAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/5B5B93ECD9F911EE9EAE5D7DC4F9AE02/YWOpVUwzBnn36hZnixCNlk7ByAI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1b:d1:f1:3a:50:9b:f6:45:6e:c0:b9:78:20:58:b8:ec:90:
bb:e7:e8:4d:a2:30:70:84:dd:8f:f9:d8:76:36:cd:c0:32:0b:
8f:f8:2f:5a:65:dd:37:58:3d:06:cb:b0:8a:e1:2f:4c:dd:f5:
93:09:31:73:30:aa:7e:c4:c7:b3:21:ac:fe:3f:27:6f:3c:c4:
2b:89:07:25:e6:d1:c0:9a:e1:e6:ba:3b:f9:76:04:c1:04:37:
9a:7a:28:9f:5a:60:ec:2c:33:79:ef:58:ed:89:80:88:32:a7:
ab:df:3c:fd:59:a8:60:66:09:e0:14:3b:83:a0:09:52:dd:e3:
9e:92:ea:17:95:e3:cc:72:01:8d:e6:b2:98:ca:e3:8a:ee:99:
55:12:87:2f:31:53:09:50:30:dd:16:ef:13:57:89:c7:27:26:
a7:b4:18:49:c3:fe:e9:70:8a:0d:5e:b0:33:a0:9d:4a:c0:e4:
46:ee:ee:e0:a6:01:ee:4e:fe:7b:34:ae:3e:da:65:b9:80:95:
7c:53:8c:72:ce:01:43:8d:47:68:09:a4:d7:47:d4:33:2f:74:
d6:26:85:fc:0f:35:ac:f4:e2:18:77:79:15:cc:f1:a2:31:36:
5f:0c:81:70:93:bd:6c:52:b3:91:fe:5c:43:8e:42:bf:af:6c:
b9:4f:d8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:12:34 2025 by rpki-client