Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
File: M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft (raw, json)
Hash identifier: luRI5KN6riM907F9yHaQXCQ5fBzdazG3vkLx0FXoEUM=
Subject key identifier: 2F:7C:40:AB:8B:08:C8:13:C9:9C:0B:A9:CD:BF:28:3C:F0:EE:5A:CB
Authority key identifier: 33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
Certificate issuer: /CN=A9154961/serialNumber=33B0D5689504836C11E9ECDD0D119C058D3F760B
Certificate serial: 023B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
Manifest number: 0235
Signing time: Sat 29 Mar 2025 02:10:23 +0000
Manifest this update: Sat 29 Mar 2025 02:10:22 +0000
Manifest next update: Sat 05 Apr 2025 02:10:22 +0000
Files and hashes: 1: M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl (hash: FVpj6iM7+yx7Iadj0MOEtMIsln29P4Tckt/4rlgGR8w=)
2: 7359F5C43A4A11ED9B8FF35AC4F9AE02.roa (hash: RW7mrI/X8sf61J1ueh+btyO6BZUeqCysdCPEaUN7lpY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154961
Validity
Not Before: Mar 29 02:10:22 2025 GMT
Not After : Apr 5 02:10:22 2025 GMT
Subject: CN=67e7568e-7990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:16:23:a8:41:20:0a:e5:88:f9:aa:f3:67:
c6:1d:b3:13:4b:68:24:00:d1:78:a4:21:ab:98:33:
79:37:7e:0c:42:4a:53:fc:f6:09:3e:60:b5:29:4e:
e2:43:90:29:e4:73:97:10:9c:ca:9c:75:72:69:9a:
aa:36:fb:4a:78:4d:d4:f1:be:0d:97:4b:c2:28:3c:
1c:08:43:e2:5f:9f:e6:04:fe:50:bf:00:59:21:77:
46:f7:b6:9c:e3:17:7c:ce:2f:1b:a0:cb:27:4a:5c:
b9:98:bd:38:f0:6e:09:6c:44:f9:05:5d:1a:2a:31:
36:34:a1:6e:d3:be:60:01:4a:0b:e4:02:c1:a4:c8:
f1:0d:b1:a6:26:67:2b:92:1c:7c:5e:12:c9:46:5f:
b9:41:ea:6d:d5:39:32:94:8b:4d:83:8c:d6:e3:a6:
5d:d9:d7:86:c3:eb:7c:de:12:59:63:9d:30:f0:2e:
2c:15:32:56:d7:a1:cd:ac:35:7f:0c:53:c6:8e:b1:
fa:b6:c0:d4:62:95:45:f8:43:00:e9:f3:33:c3:fb:
5f:de:b0:a8:b5:8c:0e:b0:9f:5a:ba:b1:85:55:f2:
38:b2:03:62:e7:34:91:ae:25:d6:f0:99:7f:91:6a:
19:85:fc:38:7e:b3:93:71:b4:4b:4e:93:29:96:75:
61:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7C:40:AB:8B:08:C8:13:C9:9C:0B:A9:CD:BF:28:3C:F0:EE:5A:CB
X509v3 Authority Key Identifier:
keyid:33:B0:D5:68:95:04:83:6C:11:E9:EC:DD:0D:11:9C:05:8D:3F:76:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7DVaJUEg2wR6ezdDRGcBY0_dgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154961/FEBBFA801BE211EDAF17A558C4F9AE02/M7DVaJUEg2wR6ezdDRGcBY0_dgs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:b9:0a:58:73:bc:e6:9a:bf:6e:e6:e4:75:1d:53:90:3b:63:
ee:cf:08:b5:62:c5:11:b0:c5:0a:e2:10:76:04:9c:e7:d5:f2:
20:7b:8e:2e:27:b1:e7:4b:95:ca:c6:a6:3d:fa:79:05:57:60:
0f:5e:9f:f1:05:4f:60:d1:61:83:2f:14:5f:a2:7a:c7:d3:97:
46:5b:f1:56:be:9d:3d:b1:55:b8:f2:6f:9f:86:87:b3:c5:99:
8f:4c:0e:de:30:4c:25:b0:68:5f:4e:c4:e3:32:c1:19:65:c1:
90:1f:eb:0a:e1:7e:95:3c:30:44:20:4e:b8:9a:4c:2d:d9:47:
e6:c3:a6:33:d5:3d:2b:7f:f4:b2:1e:fe:11:79:a7:0e:f1:87:
b6:f6:0d:0e:cb:94:f8:f6:51:ca:9d:c8:74:47:e9:a9:c2:b0:
a8:73:d8:c2:d6:02:e4:e0:ea:3a:16:0e:31:ea:20:83:6d:4f:
98:ea:d3:77:3e:77:2f:fc:90:ac:ea:4f:0d:3e:1a:c9:c3:0f:
3a:02:85:84:65:6b:9f:e8:69:fd:7d:e5:29:63:6a:7b:9a:74:
50:f4:0e:70:d1:5b:90:e2:e7:0d:74:21:5a:ea:1e:ca:06:21:
1d:42:1d:b2:86:bc:8e:ef:ba:9d:f6:80:a1:f4:4c:a1:7e:21:
e9:63:18:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:02 2025 by rpki-client