Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
File: CKtUearwyEilFC1v5NyZFitFwzc.mft (raw, json)
Hash identifier: b7hQO7iTeT2IpLZAisXyLKBy23k/V3hz7s9SL1lsN8o=
Subject key identifier: E4:F7:21:87:4B:03:0F:77:39:A0:59:FB:73:5C:DE:9A:18:64:36:3F
Authority key identifier: 08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37
Certificate issuer: /CN=A916DC7C/serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337
Certificate serial: 7B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
Manifest number: 7A
Signing time: Sat 29 Mar 2025 01:15:16 +0000
Manifest this update: Sat 29 Mar 2025 01:15:15 +0000
Manifest next update: Sat 05 Apr 2025 01:15:15 +0000
Files and hashes: 1: CKtUearwyEilFC1v5NyZFitFwzc.crl (hash: 4NY85syIG00OhYb5FqFkJoeHrrQd1GsMmFnJV0aEUFE=)
2: 710957A8559411EFA07E1C5AC4F9AE02.roa (hash: Mlxt5emszaeJ3fsjQmXEkAwHWwex3p02yZAD82J2nVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DC7C
Validity
Not Before: Mar 29 01:15:15 2025 GMT
Not After : Apr 5 01:15:15 2025 GMT
Subject: CN=67e749a4-32ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:f2:8e:a5:b0:f4:bb:6f:4a:50:10:ab:42:
07:ba:73:3e:c5:cb:a9:64:ad:46:a3:38:73:03:69:
5a:74:f2:c4:d7:58:14:a4:ae:58:40:f9:10:9b:af:
f9:1f:ff:4f:84:60:cc:3d:97:c6:b5:8d:72:69:8b:
91:3e:10:52:9d:d2:f6:f2:b0:ca:2c:5f:55:72:48:
87:ec:09:62:71:27:ee:3a:0b:92:75:b6:51:01:6d:
7d:94:18:e8:97:f4:11:c1:73:a8:5f:86:9a:30:b1:
67:11:01:70:84:70:c0:26:f7:37:bd:92:9f:9b:48:
cb:21:83:12:17:50:22:85:79:62:07:ba:bd:e1:83:
e6:d0:72:a1:c5:a3:0e:d6:f9:07:0d:2f:76:95:53:
cc:e7:4e:1a:06:c8:80:e8:9f:c3:af:d3:11:6e:e6:
76:11:bc:43:26:41:88:7a:4e:08:25:77:ab:a6:7e:
47:8f:05:e0:1a:35:42:26:c3:3b:09:01:ce:42:cc:
38:72:76:62:60:c0:0c:ca:f7:1b:9a:e7:71:17:d8:
18:56:6a:3c:09:56:29:88:1c:8c:0c:50:85:a2:83:
5e:6d:d5:02:83:7a:0b:18:66:93:ac:30:01:05:d1:
f1:4f:ba:d0:ae:c4:6e:91:31:f2:0e:77:a7:ff:f5:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F7:21:87:4B:03:0F:77:39:A0:59:FB:73:5C:DE:9A:18:64:36:3F
X509v3 Authority Key Identifier:
keyid:08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:90:e9:50:3c:2a:d8:b7:e4:6d:11:5e:2a:2e:d3:c0:ed:e0:
3b:a1:2a:49:91:4e:17:5f:38:1e:d6:43:9a:f2:58:87:a7:6c:
1d:42:13:01:35:73:9f:33:f7:ae:9b:6a:67:6a:8e:f2:4d:7e:
e7:a7:4a:17:05:5c:7f:0b:fd:40:33:e9:1b:42:26:bd:dd:af:
38:dd:38:b8:a0:70:70:15:b4:86:51:02:37:5d:75:09:bc:51:
76:30:47:5d:86:8b:cc:51:91:0f:9b:d8:8c:3f:ed:86:7b:4b:
16:b5:37:e1:f4:97:92:04:d4:4b:ae:9a:65:f4:72:80:e7:3a:
67:92:ff:e9:35:6f:f5:5e:fc:3d:2c:02:37:f6:33:00:87:b2:
72:17:c4:cf:49:f0:67:14:84:78:14:50:5e:cd:cd:7b:48:bf:
e3:d2:88:3b:4e:27:13:fa:cf:2a:e1:d4:1f:ab:f3:b6:ee:0c:
5d:81:c8:65:79:30:6e:f6:c6:6e:8c:69:2f:9e:49:9c:89:5b:
35:b0:5c:a5:b5:d4:49:14:b7:0a:dd:5e:c1:19:3f:8a:c2:44:
f6:67:f8:5b:f3:8f:a8:3e:73:92:ab:71:6f:49:f1:c3:f7:86:
86:58:6e:c6:b3:7d:3a:c3:28:27:da:4c:4f:a9:a8:2f:8e:fb:
2d:6b:de:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:53:42 2025 by rpki-client