Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
File: _eNrbpSTmOUtleidQL32CyXbabk.mft (raw, json)
Hash identifier: AOHFBrupCqATMqS7AbFo6zA3EWnE+UqLDTP92ZrKPTg=
Subject key identifier: F1:56:A4:70:20:5C:EA:E6:FD:26:24:86:87:74:00:B3:60:70:90:34
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial: 1839
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
Manifest number: 17BF
Signing time: Fri 28 Mar 2025 16:43:57 +0000
Manifest this update: Fri 28 Mar 2025 16:43:57 +0000
Manifest next update: Fri 04 Apr 2025 16:43:57 +0000
Files and hashes: 1: _eNrbpSTmOUtleidQL32CyXbabk.crl (hash: DViRZIoTeOmJK9Ax4qnFYu+GZWgLFEQ3NEjt238/wGo=)
2: EF885538C28B11EBBF310469C4F9AE02.roa (hash: RF/S4KRa0Daxc1wRMUy6rkjMc6TZCjTUC2lD+JidsGI=)
3: C5B70210E46D11EF82B5C81EC4F9AE02.roa (hash: 4qSxdyYS2IkHKYInpH3D1Sn5i+sr82hSiF8AMx0Ez4E=)
4: BE214D76FCFF11EF8523525DC4F9AE02.roa (hash: AUcfzaa95NhKJFQDQDswO/DUdKZnZNyNILbljxDhLYI=)
5: E807C5CC52A411EEB770555CC4F9AE02.roa (hash: 4QaTtqJ6fCb5Gkmj3dPd7fei5dnVQ+bqBH21oxNpxXw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6201 (0x1839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B
Validity
Not Before: Mar 28 16:43:57 2025 GMT
Not After : Apr 4 16:43:57 2025 GMT
Subject: CN=67e6d1cd-d1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:cb:b6:c5:f2:03:a6:40:5d:40:c7:6b:cb:
52:86:a5:82:f5:d0:1a:0f:39:47:ab:61:a4:3f:b0:
01:eb:00:1b:67:9e:ff:24:1f:b1:0f:20:6b:2b:24:
82:c5:1e:f7:a2:8e:2c:de:66:c3:14:84:e0:e4:5f:
03:2e:6d:6a:b1:cb:d3:13:f7:53:3a:e8:c5:c0:2f:
83:46:5d:67:38:c7:84:f4:e4:71:a3:64:83:bc:bd:
eb:15:d2:95:8a:ae:be:c2:06:35:9d:97:fd:e3:8c:
b2:e6:61:31:4d:72:b8:2b:23:60:2f:46:1b:e7:1c:
63:56:d5:f8:14:99:84:4f:69:4c:7a:78:6f:fe:5c:
8d:65:52:57:be:f1:8f:a6:ce:72:6d:12:ba:df:a1:
be:ff:af:dc:b0:b0:98:2f:cf:f5:9f:53:a0:37:91:
99:47:24:b6:e7:be:d7:0a:02:41:77:5d:92:a2:9b:
b6:e1:2b:d0:6c:fc:a2:c7:c8:c2:2d:3c:8f:8b:2a:
fd:13:a8:17:87:05:2d:b0:a1:7b:29:05:b1:f4:c8:
3e:8f:bc:ae:02:0f:de:a5:9f:ae:e6:2f:10:6d:e3:
55:87:92:f0:6f:0b:e3:4d:72:2d:ff:f0:6f:25:6d:
14:31:68:b5:0d:5f:d0:7e:22:60:df:68:5c:ff:ae:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:56:A4:70:20:5C:EA:E6:FD:26:24:86:87:74:00:B3:60:70:90:34
X509v3 Authority Key Identifier:
keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:55:69:47:05:6a:63:0d:8b:f8:5f:ac:21:8e:1a:62:14:55:
08:33:10:eb:33:a4:0f:c2:db:99:40:0b:ab:b7:7c:c8:71:42:
67:17:0b:83:6e:36:ea:8a:85:09:f8:22:28:68:0e:6b:92:3f:
26:32:97:b4:6f:30:db:4c:3e:03:9e:bb:c6:a9:86:9a:05:9c:
81:b9:f1:38:ac:4d:da:8c:bb:01:e2:02:80:d4:49:41:27:97:
73:cd:7f:31:59:e4:71:4a:e0:51:7c:d2:3c:7d:67:86:77:26:
fd:98:1a:19:c2:b2:2d:d7:23:03:6a:58:ee:bc:73:f2:af:f3:
ce:58:62:f7:fa:42:22:95:1a:01:12:2e:4a:74:8b:57:f8:9f:
09:6e:8b:57:8f:3d:c8:ed:f4:58:f3:7d:9f:ec:b6:d6:fd:f4:
b2:09:a5:f9:15:82:1b:a4:b5:cd:83:39:70:45:76:29:e8:3b:
1c:49:8f:fd:e8:d5:a4:9b:d2:5d:e1:e8:c1:0e:99:d1:2d:d2:
18:8a:57:6a:cf:ab:09:f1:f3:0e:1e:23:1d:24:d6:cb:6e:a9:
8b:28:cc:c6:06:52:65:90:7f:2f:a7:c2:65:a9:0a:c8:5b:a0:
19:a3:97:55:a8:a8:05:97:02:f8:e5:dd:a8:86:26:7e:9f:88:
37:87:a0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:07:48 2025 by rpki-client