Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
File: RLx47eY9W2Ire6wDs0mWsv5C4yc.mft (raw, json)
Hash identifier: tBW5lNYiM0Yke1k9xlsnRoD2NKtumfrEa8CztzbMukY=
Subject key identifier: FB:98:AB:9F:F4:11:81:47:4F:EE:0D:D1:A5:01:D2:C5:1C:DB:DD:16
Authority key identifier: 44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27
Certificate issuer: /CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
Manifest number: 4A
Signing time: Sat 29 Mar 2025 06:39:31 +0000
Manifest this update: Sat 29 Mar 2025 06:39:30 +0000
Manifest next update: Sat 05 Apr 2025 06:39:30 +0000
Files and hashes: 1: RLx47eY9W2Ire6wDs0mWsv5C4yc.crl (hash: RYfH8QtGl813XXCDOk4skh/zIIFRPVLlm7wf20gEiPY=)
2: 0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa (hash: CckqoSL6Kl8ijND7YWEunm6CSbx21plf0BMP2SCxoy0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7C7
Validity
Not Before: Mar 29 06:39:30 2025 GMT
Not After : Apr 5 06:39:30 2025 GMT
Subject: CN=67e795a3-52bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:0d:3a:0b:17:77:f0:51:ee:18:76:81:e5:
e6:57:5e:da:43:85:95:a7:bd:b2:7c:27:f6:e9:92:
80:f9:84:ee:9f:e9:30:8a:dc:bf:ee:f8:65:58:e9:
a4:0d:6e:04:09:fb:44:9b:b5:94:de:4b:6e:3f:5b:
4d:9e:a5:66:d0:11:ac:dd:c7:1d:81:2e:b8:41:c7:
33:cf:5c:7a:a0:1b:79:cb:74:04:b9:10:cb:df:4b:
89:7f:10:08:61:6b:2e:e6:ff:da:3d:9a:e2:3f:ae:
04:86:ed:23:57:0f:9e:22:ab:1e:ed:12:4e:40:35:
45:0d:be:b4:c2:3c:7a:fc:90:96:3c:31:a8:13:a8:
80:cd:03:81:2e:01:85:dd:4c:3b:3d:70:02:80:fc:
ca:2e:16:08:44:a6:5f:b4:f8:0c:58:f8:6e:d9:49:
4e:de:de:33:6e:7f:c5:80:ef:4c:8d:ff:06:f3:79:
bc:8d:c8:bf:b7:ea:0a:60:af:a1:88:a8:0a:5d:9c:
80:9d:9a:55:ea:b8:3d:82:55:58:01:b4:e7:94:fa:
6b:a1:2c:f4:1a:da:6c:22:d4:8a:35:06:b3:ce:b8:
ce:95:cd:78:80:87:10:8b:97:f0:ef:42:76:dc:2c:
2f:27:91:60:80:e8:28:91:ba:5c:57:5e:1a:39:fa:
45:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:98:AB:9F:F4:11:81:47:4F:EE:0D:D1:A5:01:D2:C5:1C:DB:DD:16
X509v3 Authority Key Identifier:
keyid:44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5a:f5:27:7f:96:22:32:9d:47:1a:7e:99:9d:0f:e1:cc:fc:
79:94:38:4c:23:b6:7f:e4:5d:51:18:49:aa:18:5f:3f:44:2b:
5d:93:f8:48:a0:9c:e2:95:c4:73:e6:bd:f7:e9:e0:a6:0a:a6:
1d:6d:95:05:02:d8:db:d8:ae:79:be:35:e3:fc:68:8b:b1:47:
ee:01:da:c4:e7:2d:0e:21:c5:92:2f:d4:91:bd:d5:b5:22:b7:
d5:6c:c8:c9:24:92:a2:ec:a9:0a:41:af:90:95:4b:4c:d0:8c:
2d:d4:b0:07:39:12:f9:a9:36:77:d5:7d:3d:cf:33:6a:c9:94:
8a:fb:86:f5:77:9c:a3:44:e8:16:c1:67:42:c5:d9:b2:2c:56:
87:d1:3c:27:73:ec:6b:ad:8c:1e:8a:c7:cf:1e:ed:7c:11:0a:
6b:c1:86:4d:93:90:8c:c9:48:a4:19:87:11:47:d1:2b:e2:a3:
57:fc:9f:c3:e0:a6:ff:2e:75:2d:e8:da:de:2c:04:1d:a0:27:
a4:60:95:8e:d4:7a:e7:ed:01:9e:85:0b:06:57:a4:34:5d:e2:
a9:04:c0:6d:62:50:8d:f0:c3:28:89:22:49:07:52:00:b7:79:
79:79:07:0d:25:78:12:6a:ae:d7:ea:ed:b2:0c:9c:b5:23:0a:
b7:40:7b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:40:14 2025 by rpki-client