Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft
File: IooLm4TrYOtGFVZbAhDVR1xRiKk.mft (raw, json)
Hash identifier: 0xA9Yp51L7RDxDJ9MFjIY48ppjpGJBrMzexQyTvU93U=
Subject key identifier: 65:41:7A:DC:F6:D8:8B:83:34:86:F5:E9:D7:38:A7:29:FA:66:69:2C
Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9
Certificate issuer: /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9
Certificate serial: 0B14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft
Manifest number: 0B0D
Signing time: Fri 28 Mar 2025 19:25:57 +0000
Manifest this update: Fri 28 Mar 2025 19:25:56 +0000
Manifest next update: Fri 04 Apr 2025 19:25:56 +0000
Files and hashes: 1: IooLm4TrYOtGFVZbAhDVR1xRiKk.crl (hash: D3fCHWACv477F27rN6sLe4VTonxVwbXKgj648h+OtMo=)
2: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (hash: 6Ds3NGu2wYLJMMD3M602IBKNI5PFzIBlSYGM/Hpizc8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2836 (0xb14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BE2F
Validity
Not Before: Mar 28 19:25:56 2025 GMT
Not After : Apr 4 19:25:56 2025 GMT
Subject: CN=67e6f7c4-25d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:f7:bc:e4:7f:a0:63:86:95:13:99:91:ff:
11:7b:fe:79:41:cf:5e:9a:f2:c9:7a:15:6d:bb:b5:
6b:59:88:bf:fb:90:a4:3f:b7:c8:d5:25:0f:b4:63:
55:be:18:5e:1a:8d:e4:72:79:e9:82:2d:01:b6:ad:
25:89:f2:7c:42:7b:fa:a4:17:ad:ec:22:bf:fa:ec:
19:12:eb:c7:b7:35:af:37:e3:ba:61:d4:30:f1:34:
eb:c8:b3:2e:3a:02:d3:ed:bb:44:9f:3c:f2:b7:04:
0d:9a:3b:70:b2:f1:90:e5:3a:30:c3:04:3f:2a:23:
8e:95:dd:ff:92:f6:b4:d2:95:3a:0b:52:bf:4a:db:
38:80:74:aa:4a:76:89:27:57:8b:15:42:69:bc:8f:
55:b5:f2:0f:6b:11:e9:c1:87:25:95:c0:c0:ad:90:
eb:a6:e1:2b:f2:1d:71:9d:2c:b4:f3:f9:dc:cc:38:
b1:fc:2a:4b:7a:87:06:2e:17:ed:f6:d8:fc:7e:0a:
0f:77:0b:c0:c4:64:ec:d0:87:99:0f:76:a6:75:30:
96:c6:e7:5c:9b:38:b5:6c:1c:1f:41:88:bc:37:4d:
5b:88:b1:ff:6e:07:3b:36:b9:e4:1b:fb:1d:ec:be:
2c:88:5e:a1:23:1d:8c:dd:10:50:78:67:68:5b:74:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:41:7A:DC:F6:D8:8B:83:34:86:F5:E9:D7:38:A7:29:FA:66:69:2C
X509v3 Authority Key Identifier:
keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:40:1f:2c:fe:d2:56:a2:0c:8a:6c:c5:52:13:e9:98:c1:28:
40:6f:7c:5d:d1:86:d7:ae:43:7e:a1:a5:dd:d3:1f:f1:c9:00:
32:a4:e8:b1:06:66:7f:a5:5b:7f:e1:62:a9:4c:cc:71:34:e4:
e1:fb:3b:58:66:de:48:04:1c:ee:1b:a9:35:0e:bc:e9:44:ff:
25:e8:43:18:af:f4:2c:cd:b4:c6:14:30:74:23:35:c2:c8:71:
1f:2a:21:f4:1f:d5:e2:6e:ef:13:6c:63:46:98:80:2d:9f:63:
4a:c1:35:5b:7e:e0:0e:68:6a:f9:58:08:d0:e3:47:3f:d3:33:
a5:29:44:bc:02:50:84:44:7c:a5:a0:63:ab:3c:e7:b8:b1:77:
c3:b5:df:46:0a:cf:65:86:ff:63:a2:0b:eb:eb:b8:b9:b6:b0:
88:22:1b:fa:9a:6f:15:5d:e5:0f:9f:4b:b2:f8:d9:a2:4e:b3:
6e:37:fc:ae:28:71:fc:ed:14:99:b9:2d:44:4b:e6:44:6c:fe:
60:34:f2:89:01:e4:eb:39:4d:f7:02:ca:fd:46:a3:b6:19:73:
3e:1c:32:b4:f7:9b:d2:49:09:58:0b:99:dc:f9:cd:1e:0a:ec:
b3:a7:2d:0c:82:dd:a2:d1:58:fa:60:94:29:b6:be:99:84:e0:
09:40:61:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:16:43 2025 by rpki-client