Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
File: An8FUlFPJEqU7j8GVypK9zNWVzc.mft (raw, json)
Hash identifier: 8fgK6GA9ksvJqXOkOsJftAY467PkBFR5/WMcNKC7upA=
Subject key identifier: 31:56:A2:8E:B9:3F:2D:ED:CB:DD:1C:E1:30:F3:19:1A:F3:02:DC:E7
Authority key identifier: 02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
Certificate issuer: /CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Certificate serial: 01E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
Manifest number: 01E0
Signing time: Sat 29 Mar 2025 02:22:16 +0000
Manifest this update: Sat 29 Mar 2025 02:22:15 +0000
Manifest next update: Sat 05 Apr 2025 02:22:15 +0000
Files and hashes: 1: An8FUlFPJEqU7j8GVypK9zNWVzc.crl (hash: l3ji78Ry8iBZIXtjChH8+Vtdakf8wpomBpC6QK/oMNo=)
2: 7B00C6B83F1D11ED8A66DC5AC4F9AE02.roa (hash: 2Fh4hwQIdZbln/uQFk/hnm7n5pbTcIACPB8cEmZ2S3s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E042
Validity
Not Before: Mar 29 02:22:15 2025 GMT
Not After : Apr 5 02:22:15 2025 GMT
Subject: CN=67e75957-a612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:4b:62:1c:f2:a8:58:66:48:b4:28:14:3f:
d6:6c:a7:3b:f4:b3:38:1d:31:80:30:ff:c9:7c:7d:
40:83:6d:dc:f6:9e:9b:f6:62:79:fa:bc:86:c6:fc:
c6:d8:12:ea:73:18:a5:21:98:b4:d3:07:d2:e7:30:
03:0d:7d:93:0f:1f:2b:5c:7e:56:97:e2:b4:ba:b4:
f1:f0:63:5e:a3:ed:2d:a8:59:70:d5:84:09:10:d5:
ba:5d:e8:7a:2d:f6:d4:c5:09:fb:1b:76:03:b8:ea:
01:3e:9b:83:cb:af:60:0c:6b:9c:fb:ea:75:f7:b8:
1e:cc:66:b2:37:08:31:47:39:66:48:27:5b:38:fb:
0b:fd:bb:82:0d:56:84:2d:9b:6f:e5:e2:8c:11:a7:
4c:3f:4a:dd:4c:86:6d:63:84:f7:f7:aa:a7:0c:e3:
c5:c2:7c:80:fc:3e:f6:ee:95:36:67:8b:78:21:8a:
46:cb:3b:d6:64:d3:54:06:b5:84:2e:f9:7f:78:2b:
78:93:52:f6:a3:5f:71:d0:f5:67:d0:f6:b3:11:b0:
6b:7f:e1:4f:e1:83:f5:05:d7:4a:d1:1f:7c:5c:21:
be:f1:de:5a:2f:62:b1:d3:ed:57:cc:6f:f9:c6:61:
0a:ee:48:6d:8a:1f:9b:3d:ef:a5:59:da:06:25:31:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:56:A2:8E:B9:3F:2D:ED:CB:DD:1C:E1:30:F3:19:1A:F3:02:DC:E7
X509v3 Authority Key Identifier:
keyid:02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d8:9a:fd:c5:87:b6:b4:dc:db:88:8a:46:47:b4:8e:0d:31:
80:0d:44:1c:5f:93:bb:e0:35:4f:ec:0f:cb:ed:f9:e2:9d:e2:
fa:85:fd:9d:a2:93:30:f4:46:be:65:bc:8d:09:c4:a9:54:94:
76:d7:f2:2b:8d:dd:14:81:ad:51:0f:c8:ca:c7:99:9a:52:34:
a4:87:36:ef:61:a1:64:c6:7d:e5:e0:93:a4:6b:52:77:f0:6a:
75:b0:44:d9:a0:f5:00:83:3e:a0:98:2c:85:6a:df:98:8b:18:
04:7a:fd:e0:be:74:a0:44:5e:17:10:4c:fa:a2:80:5a:f5:2c:
40:c3:e3:65:a5:fe:7c:f4:70:89:4c:b3:e8:b7:7d:ca:cf:02:
b9:8f:32:68:11:5a:7a:88:c3:ca:c5:77:6a:8d:0e:ea:df:93:
4f:4b:6c:79:80:df:73:6f:dc:ff:db:78:0e:07:97:f8:fa:14:
60:11:a8:1d:d3:ac:60:ce:42:6c:fb:dd:7c:62:30:f2:8b:5a:
21:56:d4:77:b4:1a:36:5a:85:e9:6c:d2:bd:4a:79:88:d8:6d:
3b:1a:69:ee:49:bd:dc:37:55:22:fe:fa:9c:83:7f:bb:bf:ce:
30:d9:2c:9c:5d:d5:a3:39:ef:06:72:2b:c5:4a:c4:4e:4c:ea:
8a:03:02:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:38:26 2025 by rpki-client