Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
File: lufMd6OOPhgL91JrodlTIYBONeY.mft (raw, json)
Hash identifier: Nu6rYunWtwWnaNSXshoU9HK3kYq4MHv4ki2uWLnH1jI=
Subject key identifier: 81:F3:81:7A:EE:6D:97:1C:D5:2A:6F:76:DB:80:47:3E:4D:7C:25:D7
Authority key identifier: 96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6
Certificate issuer: /CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
Manifest number: 04BF
Signing time: Sat 29 Mar 2025 01:21:31 +0000
Manifest this update: Sat 29 Mar 2025 01:21:30 +0000
Manifest next update: Sat 05 Apr 2025 01:21:30 +0000
Files and hashes: 1: lufMd6OOPhgL91JrodlTIYBONeY.crl (hash: YzqSyBhqALU/cIlOggXbY99T4yOdTgBLazk/kmjIkLE=)
2: C310EE5AACD311ED84BAA06EC4F9AE02.roa (hash: NPYNnjaBYs2qmRUfu8/y0KOBedXU4EghxnWja8r1cbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C4FA
Validity
Not Before: Mar 29 01:21:30 2025 GMT
Not After : Apr 5 01:21:30 2025 GMT
Subject: CN=67e74b1a-d065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:b0:13:6c:41:00:51:9f:5b:76:71:32:75:
db:58:d3:3f:d7:f6:8c:68:22:e0:a5:f9:f9:4d:9c:
2b:df:1e:9a:44:3c:1e:de:c3:84:0c:59:b6:42:c1:
c6:10:9e:95:65:52:e4:d2:a9:a9:44:3d:7f:e2:d7:
4e:bc:67:00:ae:04:63:ef:d9:33:15:0f:56:d4:69:
f3:91:80:b8:e1:ad:c4:6f:3e:01:1b:47:ac:44:d1:
9e:fc:74:76:8b:a1:4e:54:38:b4:b4:5f:6b:bf:cd:
90:a8:a2:9a:04:d5:d2:f5:1c:33:99:1d:1c:c6:76:
f6:95:11:12:2a:3e:cf:73:bd:14:0d:5b:bb:d5:72:
f9:b2:10:79:45:ca:21:7c:78:37:69:12:a3:2f:e4:
87:b8:4d:fb:74:6f:fc:9e:b8:65:ef:82:8d:4c:e3:
be:0f:31:9d:35:64:8c:b1:7e:8f:80:23:bd:2b:53:
3d:65:72:88:80:79:16:e1:a5:d7:32:31:5e:bd:66:
da:03:fd:44:a8:2b:e5:01:e5:ed:00:72:44:12:ca:
85:46:4c:55:61:1d:ac:68:ba:b2:00:dc:44:7d:95:
0a:e0:ee:d5:ae:54:da:72:c7:7f:94:3e:a0:10:15:
e2:3d:f2:cc:4c:b6:c4:b0:38:0c:75:13:9f:50:2a:
6b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F3:81:7A:EE:6D:97:1C:D5:2A:6F:76:DB:80:47:3E:4D:7C:25:D7
X509v3 Authority Key Identifier:
keyid:96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:df:b9:e6:ab:56:96:0d:7a:1b:ad:57:f7:3a:2c:6e:d6:7b:
d5:6b:94:aa:db:13:3e:55:4d:1e:a3:4d:7a:49:25:43:89:a5:
ec:76:e1:93:e2:8b:27:f1:6e:e9:a2:da:08:61:21:7c:6f:52:
0e:21:9d:89:ab:cc:51:0b:08:af:f7:ec:d4:39:5e:81:04:76:
af:52:d2:21:11:45:16:25:32:3a:78:37:67:84:84:cf:ed:ec:
90:ea:04:c8:f2:7f:e6:b7:f4:92:e9:b3:3f:ac:9b:16:cd:9b:
c3:80:de:4d:eb:e2:55:fb:ad:3c:37:08:53:0b:7f:f9:69:ba:
cd:70:be:91:0a:5c:20:8f:31:36:da:54:e7:30:36:2e:64:83:
59:89:7e:81:80:ab:09:3f:9c:97:07:1f:1f:ad:42:61:e7:b9:
ff:d6:11:1b:c7:65:f6:ae:51:46:c1:a4:3a:4a:2a:31:ac:85:
e4:c8:df:36:94:7c:78:6b:bc:80:5f:58:41:50:c5:00:c2:6e:
f8:67:51:44:9c:7f:cc:e9:67:eb:81:13:05:64:8a:be:dd:91:
81:ff:ff:25:48:6f:b2:6a:39:f4:4c:d7:0e:c5:ed:80:87:b2:
15:8c:78:9f:ef:63:79:ae:f6:9f:05:11:e2:3f:eb:9a:ff:bb:
3f:81:9d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:51:40 2025 by rpki-client