Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/2o28OwmXQtOr0qiV3RM5iTuaj18.mft
File: 2o28OwmXQtOr0qiV3RM5iTuaj18.mft (raw, json)
Hash identifier: s4U0ZtZ9L/wExbd5WA5HH5OTmJvCeE6zN/sQxPTQIhQ=
Subject key identifier: 36:98:A3:2A:63:3F:97:10:11:E7:2D:A4:5A:7C:04:45:DD:62:A8:0B
Authority key identifier: DA:8D:BC:3B:09:97:42:D3:AB:D2:A8:95:DD:13:39:89:3B:9A:8F:5F
Certificate issuer: /CN=A916B0A3/serialNumber=DA8DBC3B099742D3ABD2A895DD1339893B9A8F5F
Certificate serial: 0B5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2o28OwmXQtOr0qiV3RM5iTuaj18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/2o28OwmXQtOr0qiV3RM5iTuaj18.mft
Manifest number: 31E1
Signing time: Fri 28 Mar 2025 15:46:19 +0000
Manifest this update: Fri 28 Mar 2025 15:46:19 +0000
Manifest next update: Fri 04 Apr 2025 15:46:19 +0000
Files and hashes: 1: 2o28OwmXQtOr0qiV3RM5iTuaj18.crl (hash: xA6qE6NSjI9FhzScM0q841+Hc+5/vfx57mFfPhxsu40=)
2: 0B6054BA851E11EA86E0DF24C4F9AE02.roa (hash: MgTUngCCzikGCV51wBox1XfJC+wHmw6xDYqUAEuxnEk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2907 (0xb5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B0A3
Validity
Not Before: Mar 28 15:46:19 2025 GMT
Not After : Apr 4 15:46:19 2025 GMT
Subject: CN=67e6c44b-1d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:21:16:74:b5:66:a1:db:8c:c6:24:d4:6d:
cb:95:21:ae:48:df:7c:3b:1b:b1:0b:7f:a7:6a:94:
cb:1e:0a:84:90:3f:f7:f1:f0:f1:39:c5:54:49:b5:
4c:8a:29:db:e2:a8:9d:31:b4:9b:a0:77:b8:68:ed:
19:2a:ec:10:db:56:25:5b:c3:fa:24:0a:c2:99:af:
bc:38:87:d4:d2:9c:17:36:c7:c6:99:99:c8:f1:86:
26:65:1f:d0:01:b4:38:55:55:44:6e:3a:88:69:c2:
87:11:41:cf:c6:85:6f:3e:7c:cd:ea:59:8d:c5:e4:
8b:d2:8b:6e:95:01:62:08:34:e7:83:96:86:11:ab:
e8:10:3a:1d:32:77:91:dd:48:3e:c8:4c:27:fe:13:
d1:8b:e7:99:b0:a5:cb:e3:3d:aa:97:76:03:d1:7a:
72:2d:d9:ed:4f:25:1a:e2:14:fc:0b:77:ac:69:75:
69:bf:10:c1:6a:3d:2a:f4:b0:aa:62:19:35:9b:ff:
3f:c2:66:96:d5:07:b6:ee:d7:e3:7e:c0:32:a8:5d:
2e:3f:e9:af:7e:7d:70:e4:a2:56:2d:30:43:b6:e9:
a9:67:65:c0:f5:d7:51:33:02:d9:0a:3b:78:fe:9f:
83:1c:fe:ba:19:bf:94:94:a5:14:c1:4e:79:5d:54:
59:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:98:A3:2A:63:3F:97:10:11:E7:2D:A4:5A:7C:04:45:DD:62:A8:0B
X509v3 Authority Key Identifier:
keyid:DA:8D:BC:3B:09:97:42:D3:AB:D2:A8:95:DD:13:39:89:3B:9A:8F:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/2o28OwmXQtOr0qiV3RM5iTuaj18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2o28OwmXQtOr0qiV3RM5iTuaj18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/2o28OwmXQtOr0qiV3RM5iTuaj18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ea:ae:b6:a9:56:e1:20:b4:db:c1:81:f6:f0:b3:4e:50:ee:
85:86:47:a9:87:86:e1:41:29:27:33:49:86:15:ea:d7:e9:0f:
49:80:46:f5:5b:09:6d:8c:43:fc:ff:53:e8:19:a5:5f:d2:0e:
9f:35:40:2c:77:a6:ec:61:79:7d:30:87:7f:42:29:7f:9d:6d:
64:35:b6:0a:4d:27:92:f6:30:94:7b:55:9b:1d:97:a8:c5:e2:
c3:12:43:3a:bd:41:9c:bd:6c:80:fc:7f:0b:9a:fe:42:e4:16:
3b:2a:f9:3d:db:ff:ee:dd:27:4d:6b:62:ae:33:da:5a:4c:41:
58:3b:a4:b5:8c:d9:82:61:58:9b:01:30:7f:7f:d5:f0:5a:4f:
93:49:81:b7:02:68:71:c5:f1:dd:0f:89:32:0f:ba:4f:f2:28:
f6:47:6c:b7:5f:0a:9b:16:89:c3:3b:69:72:33:b8:ff:6f:9d:
73:c3:a1:f6:49:8f:eb:8f:db:9b:27:d0:d5:d2:cf:8b:13:04:
8b:90:4f:c9:f2:f6:18:5f:c5:df:b5:a8:8d:f0:2f:89:33:37:
60:f7:88:c5:54:ad:64:32:b1:25:0d:9d:e1:82:08:c6:37:7e:
fc:ec:05:ea:b9:2a:6b:93:74:f4:87:be:e3:1f:f8:ee:21:d1:
09:74:95:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:53:45 2025 by rpki-client