Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft
File: D9l6GEHJl08fSQQu2j5yhCGq5f4.mft (raw, json)
Hash identifier: pxTHYaLZd7oG5ITp7SeWiuy6Nnqd2wja4Hi4WGQ/n6I=
Subject key identifier: 14:4D:A8:AC:0A:87:25:C4:17:17:59:CB:C1:18:68:ED:C7:AC:5A:0C
Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE
Certificate issuer: /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE
Certificate serial: 07BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft
Manifest number: 07AE
Signing time: Fri 28 Mar 2025 21:26:55 +0000
Manifest this update: Fri 28 Mar 2025 21:26:54 +0000
Manifest next update: Fri 04 Apr 2025 21:26:54 +0000
Files and hashes: 1: D9l6GEHJl08fSQQu2j5yhCGq5f4.crl (hash: 1jesfJk24MXC+tsvBEWKcVBmz6ywGIcWDanXJxdq0Oc=)
2: D31B3092F40911EA8A5C9E70C4F9AE02.roa (hash: Es/KgzPMe1zYauziZBRZHyjZJ35reOpMCOBV6MckhCs=)
3: D25A6970F40911EA8A5C9E70C4F9AE02.roa (hash: Ka3pUjVhAjV8Jw2bqRS1fw1Jl4NqlRDOjR/Fjs/H0+M=)
4: CD0710DA3F3511ED84AFEA5BC4F9AE02.roa (hash: OhYJKozvfID8ylqYGKB5GjbLkxxbmKyR5Jo0rIME+Bo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1980 (0x7bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ED2B
Validity
Not Before: Mar 28 21:26:54 2025 GMT
Not After : Apr 4 21:26:54 2025 GMT
Subject: CN=67e7141e-9b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:37:58:af:e1:30:4b:9d:59:eb:75:26:f6:
8f:64:91:bd:3c:d5:98:63:7e:59:b0:c0:e6:fd:8f:
81:e2:ed:ac:95:82:13:d1:5b:0b:69:d2:e4:f0:f5:
3a:8f:78:5a:4d:bf:f2:f7:f4:c4:f6:30:11:fd:8c:
c8:dd:7f:17:55:c3:fb:24:54:cd:9c:a6:1a:23:9b:
7a:b5:ae:57:4b:ea:17:c4:c2:fd:aa:72:54:25:01:
62:44:30:e7:ff:4f:7d:df:00:c7:d8:61:47:bf:8d:
c2:1c:a2:50:66:19:8d:63:c0:47:5e:f5:f8:cf:83:
39:9b:e8:e6:3a:df:b3:54:82:88:bc:11:8b:6e:a1:
26:f8:24:77:e0:6d:26:16:d0:51:75:d8:19:7a:1d:
5c:48:1d:21:04:58:bf:cb:ec:dd:37:28:a0:4e:1e:
37:5a:40:23:04:c9:df:76:ff:d7:c6:ac:a8:0d:29:
8b:c7:47:bc:28:2e:c0:39:59:85:26:47:91:99:87:
82:a4:c0:af:ee:af:44:ee:26:35:2d:28:5f:f8:78:
b0:94:fc:00:c3:1a:31:30:14:96:06:b2:05:c0:8c:
74:e7:71:39:fb:df:36:e3:30:84:d8:fc:27:0d:64:
82:ae:5c:c0:f3:f4:27:ea:ab:9c:e0:66:e8:dc:25:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4D:A8:AC:0A:87:25:C4:17:17:59:CB:C1:18:68:ED:C7:AC:5A:0C
X509v3 Authority Key Identifier:
keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:a5:f2:f8:aa:7a:e1:9e:d8:45:f6:50:0c:df:31:9a:99:7f:
2a:ac:3d:d8:2a:e5:2e:01:94:07:ed:e1:3c:1a:a4:3a:92:37:
c7:59:cc:ff:6d:b5:22:1b:6b:6e:77:8c:d3:fd:52:01:5c:da:
f9:2f:06:52:4e:ad:c5:90:12:bd:1c:ca:b0:a9:7b:2d:45:06:
3e:9a:18:70:a7:f8:00:07:1d:a7:3f:9b:b6:57:38:75:2b:45:
5b:c2:f7:e4:5d:e0:32:ff:b5:f1:76:63:03:8f:c3:55:35:ed:
61:c3:3a:38:30:80:09:d1:26:2e:03:7d:02:51:4e:05:20:0b:
7d:17:75:0f:43:d7:c6:b2:74:be:2c:5f:0c:9e:71:33:f6:86:
15:6a:e3:a3:55:eb:0a:da:4f:40:a1:2e:1c:a2:d9:a6:d9:e5:
75:34:f0:20:cb:e7:35:1b:9a:9d:dc:d9:80:28:cd:48:bd:fa:
d3:c3:fe:f6:6b:1a:4d:0a:0a:7d:c5:82:d5:27:16:1a:39:21:
ca:90:1d:6c:53:31:c6:1b:94:6c:0f:91:e9:ba:fd:79:ff:bd:
3e:e4:9a:73:ee:c9:cb:97:67:92:ef:9a:2e:e7:f2:73:a3:33:
35:0e:6e:f8:f9:5f:3e:6b:ba:05:fa:20:94:45:5e:52:ea:88:
16:b7:f4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:14:37 2025 by rpki-client