Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
File: dYrCvtrcujrXOBafs4nVCLVNdL8.mft (raw, json)
Hash identifier: sBS3gFi9HkwBlq/BxTP+6PuQVL/2j4xkBavT5/Buyyc=
Subject key identifier: BA:6B:9F:58:B4:D4:A1:28:C6:86:54:F5:53:0F:F7:01:E7:EC:03:9B
Authority key identifier: 75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF
Certificate issuer: /CN=A915479A/serialNumber=758AC2BEDADCBA3AD738169FB389D508B54D74BF
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
Manifest number: 1C
Signing time: Sat 29 Mar 2025 07:12:52 +0000
Manifest this update: Sat 29 Mar 2025 07:12:51 +0000
Manifest next update: Sat 05 Apr 2025 07:12:51 +0000
Files and hashes: 1: dYrCvtrcujrXOBafs4nVCLVNdL8.crl (hash: aDiReyOJUTzLllZ/cRNLrx9bXJ1yartSUralrhK6Qxc=)
2: 88A1F6DEE37B11EFB4D75458C4F9AE02.roa (hash: cprKT/vfUwI6vjvLZuHXw1YhqI0bQrhQTc7WaG1olUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915479A
Validity
Not Before: Mar 29 07:12:51 2025 GMT
Not After : Apr 5 07:12:51 2025 GMT
Subject: CN=67e79d73-428e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:51:a4:64:6f:27:09:5b:2a:3e:0f:98:4e:
aa:c0:57:a2:b7:80:fe:1a:9d:46:9c:26:61:50:7e:
72:70:bf:06:98:9b:2a:80:47:d4:f0:b6:b2:21:04:
03:11:4e:02:df:52:f6:57:d7:a4:9d:9a:13:85:79:
45:75:45:79:2f:aa:55:49:d7:6c:a8:04:aa:3f:09:
d8:e1:f4:a2:6c:25:9b:a8:28:83:c3:cb:91:3a:25:
a6:26:c1:83:0f:ac:e4:a1:a4:8d:a0:49:3c:03:00:
28:57:4e:51:49:2f:4e:ed:f7:16:22:d4:7e:72:c3:
dd:ca:3b:48:f3:2f:e1:a3:10:a7:4b:14:3a:d5:b3:
65:81:06:ee:a4:1c:07:f8:49:fa:8c:58:c6:7e:7d:
be:ad:6f:cb:59:06:1c:c1:ad:fa:da:f3:e9:c3:25:
34:7e:eb:b7:a5:00:cd:89:96:4d:8c:ac:0a:18:1f:
cf:c5:2a:ca:75:d3:5e:00:97:55:93:92:86:14:9f:
80:e7:35:f5:c8:c0:72:20:43:4b:82:f6:c4:e5:08:
86:17:1d:5c:40:8f:24:ba:d3:27:5d:97:ec:2c:17:
53:de:44:fa:a2:3c:2e:c9:12:28:0d:26:60:64:83:
cb:6f:34:eb:00:1f:b5:3f:53:4d:4a:b4:09:0a:5c:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6B:9F:58:B4:D4:A1:28:C6:86:54:F5:53:0F:F7:01:E7:EC:03:9B
X509v3 Authority Key Identifier:
keyid:75:8A:C2:BE:DA:DC:BA:3A:D7:38:16:9F:B3:89:D5:08:B5:4D:74:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dYrCvtrcujrXOBafs4nVCLVNdL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/2E10EDB2E37911EFB4666B31C4F9AE02/dYrCvtrcujrXOBafs4nVCLVNdL8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b8:f1:b7:33:4c:17:4e:4c:de:c2:20:63:c8:ad:dd:75:89:
7a:91:45:25:a6:a8:5c:ae:3d:96:57:3c:35:aa:bd:42:32:4d:
99:f8:2f:4b:e5:c0:0a:0d:7d:df:63:ee:7d:09:6e:f0:5b:12:
d3:ac:d7:7a:8e:ab:95:53:79:20:6e:cc:8a:77:8a:88:e3:8c:
69:3d:84:8b:b1:34:19:76:f9:d8:78:1c:fe:37:6b:2d:90:46:
cd:61:43:f2:99:d8:16:a8:da:3f:df:84:5b:f6:2d:4e:8b:9a:
b1:15:34:9b:7d:62:b2:02:b6:44:d4:de:a6:88:91:df:22:5e:
79:4a:90:8b:6a:ed:66:33:78:1d:44:58:01:79:c4:72:77:bb:
8e:63:d0:05:fe:30:8d:1f:08:41:63:03:58:f1:ab:07:c3:4f:
fe:90:14:07:16:ee:a6:8f:e2:ec:be:40:68:de:b3:0c:8b:14:
62:6c:ba:60:68:d0:dd:2c:d1:ab:55:d7:24:18:5b:1b:24:17:
be:2c:3a:88:80:00:5a:59:4d:d2:24:f4:03:5f:09:b6:27:a3:
2d:d8:3d:10:95:42:e9:18:76:41:11:d0:96:46:4f:1f:48:84:
50:8a:ce:04:b3:25:f1:b8:69:1e:5a:bd:7d:a1:38:b7:47:66:
c1:70:74:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:55:05 2025 by rpki-client