Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
File: 1mAaggCAx5DwpRpsN2X1tLDQGzc.mft (raw, json)
Hash identifier: x9cSb6BjJw+PSIrOH5mLGkItOm+6Muynmqsrw8CEdp4=
Subject key identifier: A0:A3:3D:12:A3:9D:D7:B4:8F:4B:01:22:01:C2:B3:40:2C:F2:9F:76
Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
Certificate issuer: /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Certificate serial: 0AA6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
Manifest number: 0A9F
Signing time: Fri 28 Mar 2025 19:43:42 +0000
Manifest this update: Fri 28 Mar 2025 19:43:42 +0000
Manifest next update: Fri 04 Apr 2025 19:43:42 +0000
Files and hashes: 1: 1mAaggCAx5DwpRpsN2X1tLDQGzc.crl (hash: 8/1FckC469lVfVYemS+6zU9dGrUjTbKADcVz4cpkiv4=)
2: 5EEC619850A611EA823DE980C4F9AE02.roa (hash: q02Hd4XFE+H9p8qEMOu2AbjA5nPs5WOETsJPUT9HbXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2726 (0xaa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915343B
Validity
Not Before: Mar 28 19:43:42 2025 GMT
Not After : Apr 4 19:43:42 2025 GMT
Subject: CN=67e6fbee-b017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:e3:2c:35:f8:48:2c:e1:f9:e1:ac:9e:fb:
98:5b:e6:56:0e:54:4e:bb:5f:a0:29:3c:f9:7d:14:
08:c6:0a:cf:14:a0:c4:a9:4a:c4:ce:ee:cb:53:07:
32:f4:31:67:16:4d:2c:40:5b:9f:6b:c4:00:fd:45:
52:03:28:79:5c:5e:e6:c9:3a:1f:d7:a0:b5:b3:e4:
55:57:fa:d8:91:28:e4:15:04:70:1d:86:f6:7c:ad:
99:47:b1:12:76:ee:bb:bd:94:e0:ad:4a:32:26:ed:
23:26:0f:28:4b:b1:f0:de:2b:87:60:29:d5:ce:89:
51:da:34:77:85:8f:fc:25:fe:32:ba:d7:9e:f6:d7:
6a:e3:eb:a7:ac:8c:26:46:85:a0:ca:01:da:51:0a:
24:d1:1b:67:8f:35:92:ae:64:d3:b4:fb:dd:f0:a4:
75:af:c2:6e:a1:4b:81:61:de:a0:d1:6b:d4:e0:69:
35:43:29:15:9d:62:4b:86:f3:e9:53:ef:9d:ef:97:
7c:14:16:7a:e2:e0:e6:88:5b:0b:49:73:a0:f9:16:
f7:da:a6:57:1b:80:d2:ee:10:fc:e9:d7:60:c8:8a:
1b:d3:38:e8:a2:bf:1f:2b:01:39:5b:4e:24:2f:2e:
aa:d6:b8:38:57:36:c5:2d:fc:75:47:d1:fe:69:7c:
1b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A3:3D:12:A3:9D:D7:B4:8F:4B:01:22:01:C2:B3:40:2C:F2:9F:76
X509v3 Authority Key Identifier:
keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:5a:58:7b:d3:7b:ea:35:ea:e4:a5:c2:51:51:4e:c8:dd:63:
1d:34:cc:b8:8d:94:15:5d:14:ea:e4:bf:e0:83:1e:09:db:66:
7b:0a:56:4f:65:2f:ed:70:dd:93:61:f4:ec:9b:b0:ba:17:1d:
52:a2:63:7f:a0:f3:30:e6:61:a8:7d:48:14:fe:99:87:eb:51:
46:ae:81:59:20:48:c2:af:b0:b9:83:e6:53:e7:57:52:66:d7:
de:eb:25:8c:11:8b:77:de:a7:7f:11:53:78:fa:f5:aa:c5:cf:
b2:ae:29:a6:56:3e:68:0e:4f:01:7a:cf:39:d2:53:86:c8:3b:
60:10:b3:48:62:5a:67:e9:d4:7a:df:56:cb:22:d8:29:dd:56:
8d:28:ea:b4:2a:94:96:24:9a:16:b9:74:ee:03:8c:9f:71:03:
ef:90:40:aa:79:45:d4:6a:07:f3:c2:6c:7e:88:03:b4:ed:75:
87:fa:0d:35:68:15:0b:55:4c:18:33:e0:0e:a9:73:33:57:db:
44:43:37:21:11:9d:0b:62:fa:4e:5c:75:78:96:69:f4:ad:89:
33:15:68:6c:c2:cd:42:3f:d8:36:7b:ea:80:bd:aa:c6:b0:dd:
73:0d:cc:ce:bf:0f:76:79:6c:28:db:cf:6f:3a:87:99:ee:fa:
be:4b:cf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:28:50 2025 by rpki-client