Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
File: DS1vMynFa_bo-UG9_adJbb4lMOU.mft (raw, json)
Hash identifier: NMJx6R/ogK8yMXp4cimf23DqDukRXQEbPSRe3wil0LY=
Subject key identifier: 6C:20:2E:2F:27:72:FF:19:FF:5E:3A:1E:4A:40:57:5C:A6:4A:53:49
Authority key identifier: 0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5
Certificate issuer: /CN=A915479A/serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
Manifest number: 1C
Signing time: Sat 29 Mar 2025 07:12:49 +0000
Manifest this update: Sat 29 Mar 2025 07:12:49 +0000
Manifest next update: Sat 05 Apr 2025 07:12:49 +0000
Files and hashes: 1: DS1vMynFa_bo-UG9_adJbb4lMOU.crl (hash: F0QHAD/AXe/vtZN23zVONXmamj7Zod4FlWeQr7quh0U=)
2: 8836D872E37B11EFB4D75458C4F9AE02.roa (hash: SXO1+0APe7z5DY3Hw4Iwvndpe+8U4RSEIeHcUiLcev8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915479A
Validity
Not Before: Mar 29 07:12:49 2025 GMT
Not After : Apr 5 07:12:49 2025 GMT
Subject: CN=67e79d71-4a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:30:fd:13:28:20:49:fb:11:ab:2a:3a:e4:
af:66:97:27:9f:9a:b4:b9:4f:18:99:a1:3b:58:7a:
38:16:bd:da:43:23:11:fe:40:fd:4c:7f:db:ec:51:
b0:36:1d:fa:e5:ec:36:5a:27:37:70:4c:6d:fc:bf:
7a:70:ae:8e:19:cf:e4:24:b5:15:3a:bd:83:1b:79:
61:fa:a6:34:4e:3e:6a:23:f2:7e:0d:ba:57:69:d6:
bf:2b:d1:68:f8:a7:73:3b:1f:31:45:71:78:d7:2b:
fa:8b:9e:89:15:91:2b:5f:82:68:6d:b7:ce:57:6d:
7e:a8:8b:fb:c5:0b:27:86:e4:a3:36:14:87:cb:09:
c2:d7:cd:30:3e:27:26:ba:d7:d6:2a:a5:2b:98:26:
fd:03:8c:91:66:4e:75:c3:c6:75:38:f2:42:a9:7a:
4c:b7:de:19:8f:32:7c:ad:50:4d:b6:db:32:21:65:
65:2f:94:ac:2c:e8:cd:e1:f4:94:46:c4:85:59:a0:
9f:a9:3f:2d:2f:b4:44:13:54:5c:6e:a6:0d:db:4d:
78:8c:32:2d:9b:32:f7:b0:a2:47:3f:09:4c:34:13:
7b:19:76:e5:ff:2f:e7:9b:50:c8:61:c4:8a:b1:81:
42:df:ff:b1:60:ef:72:b7:14:bd:a3:61:ef:a3:d2:
8d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:20:2E:2F:27:72:FF:19:FF:5E:3A:1E:4A:40:57:5C:A6:4A:53:49
X509v3 Authority Key Identifier:
keyid:0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e9:a6:ad:e5:26:7e:33:f5:69:f0:26:ce:98:ca:8c:14:5e:
6e:13:d4:3d:ff:90:7c:5e:fb:1e:f5:ea:39:02:bc:c3:33:95:
b2:1a:28:cc:a1:de:24:ba:1e:fa:66:b5:d0:a7:d6:04:b3:13:
3b:b3:78:75:83:f7:f0:3b:9d:3c:a0:6e:bc:71:41:76:70:01:
44:51:9b:1c:ee:ed:36:b0:c0:90:12:f3:bb:e1:01:bb:2e:e1:
92:f2:28:c3:97:ee:fc:b5:36:e6:9e:1b:a7:0a:e1:42:44:88:
04:67:1c:f7:8e:ed:c6:be:f6:3f:36:85:c2:38:d0:c1:c1:ce:
4b:9d:2f:4d:0a:dd:df:b5:a8:12:39:d1:3c:a1:24:63:76:c4:
39:f1:5e:93:18:f8:d7:12:21:93:47:39:38:ee:a0:0e:f6:89:
bd:eb:d1:f1:30:47:4e:4d:5d:bb:4f:ad:9e:18:80:ee:fe:d6:
db:f9:da:80:1f:b1:ad:6b:ae:03:3c:43:37:80:d9:6d:3f:14:
87:37:28:24:3b:a5:f8:1c:54:77:15:bb:f5:56:88:f8:a1:ab:
96:ad:00:08:de:c9:f6:57:39:bf:98:0a:06:25:ee:fa:0d:8a:
5a:62:dd:7d:45:1c:44:7b:f5:3d:1b:fa:3a:cc:b2:c9:ac:11:
de:c6:27:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:59:49 2025 by rpki-client