Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
File: FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json)
Hash identifier: L8PnrrXR5y/hM2cFWlekRhiQcwP6oRkYGTK3DKsCmyE=
Subject key identifier: 59:6B:1A:8E:82:B1:55:2B:E9:BE:1D:57:AE:BB:0E:19:80:CB:F7:06
Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
Certificate issuer: /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Certificate serial: 0B99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
Manifest number: 0B92
Signing time: Fri 28 Mar 2025 19:10:07 +0000
Manifest this update: Fri 28 Mar 2025 19:10:07 +0000
Manifest next update: Fri 04 Apr 2025 19:10:07 +0000
Files and hashes: 1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: AZluFmpkE8cnvBKo7bvXSmTeFYLgyW0wewaZeqYJE0c=)
2: FC90C520213411EA8D675645C4F9AE02.roa (hash: bfvf5p0RJyl+DBh15oeIU1R+cb9fxOcLHABt0IlZccM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2969 (0xb99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91503BB
Validity
Not Before: Mar 28 19:10:07 2025 GMT
Not After : Apr 4 19:10:07 2025 GMT
Subject: CN=67e6f40f-0fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:5e:77:1e:d1:88:ec:6a:9a:e7:b7:24:e7:
c8:3f:2d:62:e1:e7:ae:bb:5c:e3:55:1d:25:b1:05:
db:b7:49:cc:81:8a:a8:b7:31:44:27:c4:45:e7:4a:
07:ec:74:33:c4:21:61:2f:02:2a:97:db:52:de:47:
83:91:83:7d:43:05:84:77:d6:9c:57:21:c4:1e:1b:
79:c9:16:53:63:f8:6a:99:22:a8:16:1d:09:d9:fa:
12:03:45:ba:23:02:9a:94:c7:2f:e9:56:52:7f:c0:
63:5b:f2:0f:a4:ce:57:96:d3:f5:64:80:e2:0d:7a:
ff:41:79:8f:49:7c:31:e5:f4:44:96:12:4f:1f:f8:
6c:a6:eb:b0:84:07:28:8e:d6:99:21:0d:1d:e9:9e:
11:5f:50:6e:23:8f:59:ed:07:8e:ef:15:ef:3d:d8:
d4:3a:3a:75:aa:3b:1f:2a:41:3d:ca:e5:b8:dc:a5:
a5:ac:ff:b7:29:74:0a:a3:42:0b:aa:f9:e6:ee:c5:
7c:01:74:0a:7c:66:28:a0:ea:d2:80:9b:05:8c:e6:
b2:27:ce:6c:e5:85:be:ac:24:18:e5:4e:a0:eb:34:
3c:8a:20:9e:ff:e5:85:f4:96:2b:aa:aa:a8:e0:83:
fc:bd:f4:6b:cb:f6:b4:f8:1e:c9:c4:f9:b4:8a:68:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6B:1A:8E:82:B1:55:2B:E9:BE:1D:57:AE:BB:0E:19:80:CB:F7:06
X509v3 Authority Key Identifier:
keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:0c:4b:23:20:d7:a4:68:7f:eb:54:bf:b0:6a:14:77:6f:68:
3c:4e:7e:d6:38:16:2b:bd:e0:9d:68:b9:1a:d9:54:98:e2:ab:
a0:06:fa:73:c0:55:59:b5:c8:4b:c2:33:8d:e2:c9:1f:7e:e9:
7b:61:ac:04:95:db:75:19:a5:36:0a:0b:f2:94:42:5c:a8:67:
50:a7:40:88:e7:12:28:0a:33:8d:f8:99:fa:de:83:e8:e5:2a:
d1:95:22:2d:6a:e8:61:ac:d4:b4:c6:5d:65:8a:63:69:06:96:
8e:b5:ff:1c:e5:0b:77:bf:d2:2e:05:b7:23:4f:52:e4:60:9d:
67:4c:56:b0:5b:b4:04:ed:5c:e8:b4:14:1e:f1:fc:e5:bf:33:
2e:89:5e:36:a4:7e:29:dd:39:9a:e6:f8:e3:e1:ee:ae:0b:fd:
3d:b0:37:42:dd:30:d5:e7:8b:f3:a9:38:98:7d:e4:55:f5:2a:
62:65:ef:ce:61:3a:36:1a:ff:96:ac:77:fd:f4:f5:50:96:a5:
2f:18:2c:f3:2d:e4:53:74:78:d0:39:5f:5e:05:49:a6:4d:50:
de:b6:8f:e5:c9:74:2f:4b:c5:6f:5e:01:cf:79:cf:fa:07:20:
85:ae:6d:e8:98:5c:c1:2e:fa:c7:1e:c7:97:89:1c:ad:cd:a7:
41:72:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:17:03 2025 by rpki-client