Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft
File: g8K1S2QeP_BuMaK0RQwVetrVm2g.mft (raw, json)
Hash identifier: EATvH5S9bN1dTP8IFExZRQTPZGuAy9map6RcFmrLZpE=
Subject key identifier: 54:41:B8:95:FB:85:B2:FA:35:84:9C:59:8F:09:4E:D2:E4:FA:2E:5D
Authority key identifier: 83:C2:B5:4B:64:1E:3F:F0:6E:31:A2:B4:45:0C:15:7A:DA:D5:9B:68
Certificate issuer: /CN=A9137E5F/serialNumber=83C2B54B641E3FF06E31A2B4450C157ADAD59B68
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8K1S2QeP_BuMaK0RQwVetrVm2g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft
Manifest number: 6F
Signing time: Sat 29 Mar 2025 06:11:47 +0000
Manifest this update: Sat 29 Mar 2025 06:11:46 +0000
Manifest next update: Sat 05 Apr 2025 06:11:46 +0000
Files and hashes: 1: g8K1S2QeP_BuMaK0RQwVetrVm2g.crl (hash: BdEqrnwz/NpFqe0s/pYgp641VinzfhlNEdIUvHqHHN0=)
2: 7114716A653911EFB61F430DC4F9AE02.roa (hash: bO/gfY3HBbGIQDRrLWr0PVEzkY2zoAiDv4q0XXDREo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137E5F
Validity
Not Before: Mar 29 06:11:46 2025 GMT
Not After : Apr 5 06:11:46 2025 GMT
Subject: CN=67e78f23-1274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:49:a7:07:f8:ee:5e:6f:3d:53:48:4f:3d:5c:
63:2f:f8:45:ee:c9:20:65:be:42:5c:7c:fe:57:1b:
dd:ff:1c:bc:0d:b6:86:ae:ad:c8:30:0f:40:e3:ef:
2f:63:2a:1d:c1:69:05:b3:08:51:ec:15:e8:5c:1e:
df:ea:4d:1b:c7:aa:33:d5:9f:ed:fb:30:96:67:f3:
87:0f:62:0a:15:fb:41:3f:0f:63:98:b2:38:95:34:
04:61:95:7a:23:96:c8:45:7d:ec:7c:ed:0d:ca:b0:
3c:ba:12:98:97:bd:17:c3:07:55:b4:0c:24:04:93:
11:4f:c4:21:67:92:33:0d:a4:68:4b:b8:b3:b2:19:
d5:12:e8:8e:24:7f:c2:5f:1c:f6:dc:b5:75:4e:05:
33:d8:53:e7:5f:3d:cc:bb:54:24:a9:b2:e2:fe:66:
26:7b:aa:df:92:8e:c5:f7:98:38:18:12:98:4c:1b:
00:19:b0:90:22:05:7c:52:0f:dc:ab:ae:ca:cf:94:
da:71:5c:91:e4:88:9d:58:bb:e8:7d:70:86:4c:00:
cd:cb:95:6c:38:8a:21:0c:4d:3c:ac:be:66:f8:83:
a0:1f:c8:4d:02:2e:38:43:e3:5f:67:e8:3e:57:11:
46:9f:37:c6:56:e2:8a:a2:ab:e4:9f:8d:94:a7:82:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:41:B8:95:FB:85:B2:FA:35:84:9C:59:8F:09:4E:D2:E4:FA:2E:5D
X509v3 Authority Key Identifier:
keyid:83:C2:B5:4B:64:1E:3F:F0:6E:31:A2:B4:45:0C:15:7A:DA:D5:9B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8K1S2QeP_BuMaK0RQwVetrVm2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E5F/80C4B300653811EF8B46896EC4F9AE02/g8K1S2QeP_BuMaK0RQwVetrVm2g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:41:f3:84:84:50:71:f6:62:5d:98:ea:99:9c:86:aa:ac:5a:
57:c1:ef:43:62:2d:9d:23:92:f6:a6:06:d2:bc:c5:11:fb:a4:
dd:2e:ea:60:21:0a:96:82:a6:ab:f8:01:31:25:70:11:47:2e:
74:26:9a:d1:ae:bb:14:5c:4e:16:6a:7b:68:0e:6e:e1:51:f0:
06:71:d6:cd:78:72:50:6f:57:41:93:52:39:b1:aa:08:e9:af:
f6:9e:75:df:65:07:d5:91:dc:8c:29:c1:92:ad:68:1a:7f:6d:
88:31:2c:e6:49:82:da:68:b0:7d:dd:d3:6d:a7:c5:00:95:43:
85:11:c3:75:d5:2b:0e:8f:8d:36:36:78:75:bb:a2:27:b2:40:
5f:43:27:3a:9c:7e:2c:f8:76:44:96:b7:07:3a:30:0f:26:ff:
bd:4b:68:19:42:ac:5c:34:44:ef:4e:6a:bf:fd:16:39:50:32:
9a:6f:dd:83:d6:f7:76:10:99:a3:1f:8c:a4:94:c6:49:cb:bd:
3d:4c:2e:fd:ff:73:58:ce:9c:df:28:9b:dd:73:56:8f:f6:55:
11:b3:6c:d4:30:92:cc:7e:7e:22:3c:a8:b6:02:37:f5:cf:8f:
ba:8c:97:5b:5e:28:33:05:66:69:30:a0:4c:51:7b:48:2a:95:
1c:4b:c0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:03:13 2025 by rpki-client