Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
File: peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json)
Hash identifier: PMNitgZ9hR6Ni2sD9gqAH4eJZtfl4hz5I1OCg5kLZbI=
Subject key identifier: B8:61:F7:83:9A:C2:95:15:82:BE:05:7B:A4:34:47:13:DB:16:7D:F4
Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Certificate issuer: /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
Manifest number: 01BF
Signing time: Sat 29 Mar 2025 02:32:58 +0000
Manifest this update: Sat 29 Mar 2025 02:32:58 +0000
Manifest next update: Sat 05 Apr 2025 02:32:58 +0000
Files and hashes: 1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: SFDA50gVbgVyemhO3k8CA8nNpm3BnwwW58odz+/x3LI=)
2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: 1Kz/gacCnhM+fr3wXAjqYRKG+spIHUpJaLSQPwac8Js=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91684D0
Validity
Not Before: Mar 29 02:32:58 2025 GMT
Not After : Apr 5 02:32:58 2025 GMT
Subject: CN=67e75bda-6cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:bb:ea:97:62:15:24:d6:96:f5:6d:1e:07:
a8:18:4c:40:d2:f0:42:24:8e:7c:67:9b:11:17:01:
ee:d1:5f:6a:3d:9c:71:68:41:c6:a0:17:ff:17:c6:
d7:4e:9b:1b:ba:6e:d0:a0:9e:7c:82:df:df:81:ce:
35:0e:6f:b1:24:72:c0:1a:ce:b1:e9:b5:fd:e8:9f:
7f:cc:4a:8c:fd:26:2b:a3:6a:a6:fb:73:9b:68:e4:
7b:46:b0:cd:9f:9b:9b:d4:4c:ff:db:71:7f:8b:f8:
53:d9:d7:03:6c:77:5b:db:af:40:8a:00:3d:76:e2:
2d:65:da:18:33:ec:f1:f8:2a:20:1c:07:50:52:84:
cb:15:d0:6b:a9:fe:b7:94:05:3e:82:66:90:3b:72:
24:f8:b1:6e:75:58:c5:2d:39:05:6a:d7:5d:04:8b:
fe:12:22:c9:c1:e7:53:67:85:b4:9f:4f:f5:20:f1:
80:2a:9b:63:30:09:64:ce:40:72:a9:ec:97:3f:58:
eb:38:d4:94:a8:c7:e7:12:f7:dc:2f:f5:dc:08:a9:
04:ce:6b:ac:ac:b4:18:db:42:68:9f:9f:fa:3d:7c:
a9:15:7c:08:04:65:c8:e9:78:9b:b1:26:c0:5b:d5:
0f:bf:03:1c:94:d6:1a:f0:08:15:f4:e4:64:e4:1c:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:61:F7:83:9A:C2:95:15:82:BE:05:7B:A4:34:47:13:DB:16:7D:F4
X509v3 Authority Key Identifier:
keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:b4:bf:aa:94:98:86:bf:c0:59:fe:80:b5:7d:99:c4:e9:01:
94:58:29:27:91:c3:31:0a:59:2f:91:f1:5a:b3:2d:90:9e:4a:
1b:72:86:ba:76:74:a4:88:24:6b:f9:c8:b6:c6:2d:00:48:96:
84:e8:a3:91:33:0a:f3:95:4d:4b:eb:55:07:d2:e9:a6:95:04:
b0:60:20:ad:c2:21:99:fd:5c:17:b8:d5:95:ea:0b:c1:26:a2:
f2:b5:a4:0b:51:16:6d:52:5f:e7:3f:8f:da:39:0e:c7:f5:27:
06:c7:55:22:ba:d7:d9:f6:ea:7a:a6:92:6b:15:b2:bc:93:05:
4c:18:d7:76:6a:f8:30:41:7c:56:84:02:fa:7f:97:9b:db:96:
51:e2:87:4c:a9:38:69:31:5a:54:cd:33:32:c7:9e:d3:c8:99:
c6:26:f1:74:1d:f9:b8:4b:d7:9b:bd:6d:b0:c6:cc:5b:49:80:
2c:34:a1:d0:b7:ea:19:c4:71:11:84:9f:82:93:0b:63:b0:55:
7b:bc:04:11:c8:0e:e9:b8:59:d3:bd:d5:f6:82:ff:15:4b:a5:
08:dd:6f:35:7e:97:29:40:ce:a7:b1:f4:d8:d2:48:da:87:bf:
d5:dc:b6:0c:cc:34:d6:c6:5e:2a:64:1a:e5:96:7e:5b:59:d2:
d6:bd:53:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:51:18 2025 by rpki-client