Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
File: Rfpu6-HepSLAREPPJSnpd5qY2I8.mft (raw, json)
Hash identifier: 2UeHMFVcyVLaBcgHq/s9u2uOw8uU1NHcWEONbQhbRuU=
Subject key identifier: E3:8B:95:BA:FC:3E:D1:5D:72:36:A2:FD:57:D4:7A:A5:01:D2:F9:39
Authority key identifier: 45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F
Certificate issuer: /CN=A916E343/serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
Manifest number: 0127
Signing time: Sat 29 Mar 2025 04:03:33 +0000
Manifest this update: Sat 29 Mar 2025 04:03:32 +0000
Manifest next update: Sat 05 Apr 2025 04:03:32 +0000
Files and hashes: 1: Rfpu6-HepSLAREPPJSnpd5qY2I8.crl (hash: Y0+yNAhwWb5nXcuMmqN07eqoVAwqR7ZRnO0iRXKwP9E=)
2: 798F13884BC511EE95462F4FC4F9AE02.roa (hash: AVNsCvyoIWNnSL3EVkTgsABpIGwTqMix3+lKD39yw+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E343
Validity
Not Before: Mar 29 04:03:32 2025 GMT
Not After : Apr 5 04:03:32 2025 GMT
Subject: CN=67e77114-2fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:a4:30:76:eb:df:81:70:bf:f8:05:7b:42:
1c:3c:dd:30:c2:95:fc:7e:06:9f:e3:a8:67:ea:83:
e7:f2:3a:0b:48:cc:65:17:3b:dd:ce:b4:b2:6a:5c:
f6:ba:38:6d:a9:f0:b6:0c:eb:b8:50:32:ee:69:58:
6c:db:98:bb:60:f8:22:ba:cb:56:e9:b7:8b:dc:cf:
eb:38:dc:ef:8d:0d:fc:16:3d:dc:92:6a:ca:57:d6:
20:c7:5a:81:89:50:4d:d3:38:1a:df:79:73:78:d4:
bf:79:cb:12:f5:28:79:f8:56:f9:5f:5c:85:35:32:
ce:1e:06:6d:44:2e:b8:10:c0:2d:40:8d:dc:4f:b8:
71:5e:fa:86:15:ad:89:51:e7:da:b4:b1:fe:d3:8c:
1e:8e:d4:c2:c6:8f:82:b6:8b:ec:b9:14:b3:bd:1f:
61:6e:02:0a:ea:e6:bc:65:83:a9:8b:38:38:db:82:
5e:37:cc:04:77:07:60:a8:86:a8:b2:5b:3d:00:41:
a3:b1:ca:73:e1:7a:c5:45:03:cd:b4:62:07:91:9c:
4a:49:dd:b9:1b:3c:3b:32:39:85:2e:8d:1a:14:51:
44:f3:fc:2d:86:03:02:df:c9:85:45:b0:e7:e7:76:
92:0a:c1:10:6e:93:a1:a7:20:47:b7:a5:52:2b:70:
c4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8B:95:BA:FC:3E:D1:5D:72:36:A2:FD:57:D4:7A:A5:01:D2:F9:39
X509v3 Authority Key Identifier:
keyid:45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:b9:3d:93:63:09:22:c6:9c:81:26:bf:14:e3:9c:f5:1f:b5:
87:6d:44:d6:a9:b0:83:04:db:21:bb:7b:3f:dc:c9:01:ec:2d:
ed:70:31:24:5e:95:29:b6:f5:ac:e9:19:0a:e3:a1:f6:65:b9:
d9:1d:de:2f:b8:c8:86:04:e8:69:ae:f4:32:5c:87:19:68:54:
8a:ab:aa:4d:a7:2f:0e:e2:30:9e:23:5f:6a:a8:bf:4e:16:9e:
58:d5:d1:65:a7:a1:90:20:6e:7d:00:73:21:eb:71:17:41:7f:
8d:7d:b6:f3:89:19:46:ec:cc:16:9e:60:60:04:d1:aa:4a:8b:
ee:e9:66:84:f8:0e:80:ed:e0:83:8a:3e:70:d1:cd:36:61:0f:
dc:8b:18:2e:97:51:16:1a:67:d7:06:28:92:12:5a:17:33:d4:
38:75:49:8f:33:9f:bf:ca:83:56:79:8e:1a:6a:a0:8c:43:35:
cd:ed:52:f7:da:1a:ee:c7:4a:39:17:cd:b3:64:a1:1a:f0:a3:
eb:bf:17:82:e2:dd:1c:ca:5b:63:74:b3:c7:e5:b7:a9:d9:0a:
c3:b5:fa:ff:28:31:d3:7e:b3:45:91:f9:25:8a:28:98:fb:5c:
12:c4:6e:3b:6a:80:d2:49:d2:9e:ad:0a:46:e0:36:ab:eb:ee:
8d:d9:93:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:41:19 2025 by rpki-client