Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.mft
File: U3pyvmM5N4xMTSlwK-12dczMFGo.mft (raw, json)
Hash identifier: vBovRVFyadsRS4J5X4zpDANr7jrGb9Cv6JCExGefDks=
Subject key identifier: 4F:37:D7:93:C4:55:E3:AC:71:4C:F2:2B:B6:E1:73:29:37:CE:7C:60
Authority key identifier: 53:7A:72:BE:63:39:37:8C:4C:4D:29:70:2B:ED:76:75:CC:CC:14:6A
Certificate issuer: /CN=A916EB98/serialNumber=537A72BE6339378C4C4D29702BED7675CCCC146A
Certificate serial: 0B67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3pyvmM5N4xMTSlwK-12dczMFGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.mft
Manifest number: 0B60
Signing time: Fri 28 Mar 2025 19:15:42 +0000
Manifest this update: Fri 28 Mar 2025 19:15:42 +0000
Manifest next update: Fri 04 Apr 2025 19:15:42 +0000
Files and hashes: 1: U3pyvmM5N4xMTSlwK-12dczMFGo.crl (hash: PBIholS8fTgr/uhjgb5e6Fj4p5JJ2h46I1L6u2bMuHA=)
2: DD716A222ACC11EAAB36B444C4F9AE02.roa (hash: 9YLAXbZ28k13vNilzcTMcnMd0WVPI4XdwJeol/Aq30I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2919 (0xb67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EB98
Validity
Not Before: Mar 28 19:15:42 2025 GMT
Not After : Apr 4 19:15:42 2025 GMT
Subject: CN=67e6f55e-8d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:25:2a:d2:d3:3e:c8:fe:c3:fc:2c:5a:eb:
4a:a6:99:2a:d1:3c:bc:81:c4:98:14:a1:8f:ac:0f:
17:c6:97:81:f4:75:b4:12:0e:c4:c0:0a:6b:e6:99:
36:a7:67:b0:7f:b8:97:91:41:c1:25:e1:b0:36:c9:
c1:6b:d3:3e:ab:87:78:12:c3:bc:12:7d:31:b6:5e:
18:e0:d3:6f:cc:99:a9:a0:a8:07:29:65:29:98:6a:
fb:8a:01:b5:de:9c:01:70:93:3b:bb:5a:2f:c6:0f:
f7:e3:a4:84:18:47:ab:5d:5b:ca:dc:47:6e:c9:fe:
d1:34:f3:99:bc:1d:cd:ab:ca:cf:8b:7c:72:93:39:
64:ab:18:3f:c9:04:11:14:de:0a:da:6e:97:f3:81:
5c:d1:47:69:67:c6:bc:d6:8b:48:63:38:b5:85:ec:
06:f8:e7:ea:54:da:bf:ef:00:d9:b0:e0:ce:31:07:
35:64:4b:c0:a7:e2:ed:33:d9:73:cc:93:52:b7:47:
a8:c7:fb:f3:1a:bb:c4:a7:98:32:15:cb:00:f8:2e:
89:85:57:46:1a:75:b5:18:bc:87:2d:b4:21:d0:2a:
54:ec:01:bc:28:2d:3d:39:58:03:ee:47:63:2a:8d:
8e:21:78:8a:88:21:bd:e0:90:00:fc:ba:80:ee:cb:
9a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:D7:93:C4:55:E3:AC:71:4C:F2:2B:B6:E1:73:29:37:CE:7C:60
X509v3 Authority Key Identifier:
keyid:53:7A:72:BE:63:39:37:8C:4C:4D:29:70:2B:ED:76:75:CC:CC:14:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3pyvmM5N4xMTSlwK-12dczMFGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB98/B0FC35DC2ACA11EA87562740C4F9AE02/U3pyvmM5N4xMTSlwK-12dczMFGo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0e:42:2a:5e:37:5a:7e:ad:86:eb:22:9c:ca:7a:24:25:05:
65:8f:d2:c3:ba:18:1d:1a:58:1c:41:39:ea:e8:61:8d:d4:b0:
5c:6b:b9:b7:ea:c7:15:98:9e:d0:92:fc:42:19:d2:f3:68:fb:
0a:54:57:a3:ff:7f:8c:59:91:ab:a9:62:ca:5e:4b:d1:52:87:
9b:84:fb:b6:70:0f:4e:75:8d:ee:6f:f0:bf:e5:82:98:26:32:
f4:da:72:99:8a:7f:5f:80:9c:99:fb:05:0a:ab:9c:53:23:1c:
47:21:01:32:d5:83:56:b1:39:44:1c:8f:97:63:a0:51:94:8f:
f8:cb:3b:8b:1c:38:28:af:ce:3f:75:34:94:92:0a:28:4a:a4:
df:7a:eb:8d:20:90:23:b6:30:00:e5:41:9d:96:61:ee:39:4f:
85:d3:db:42:3a:13:3b:2e:7c:44:2d:cf:7c:4c:ef:4c:40:72:
bb:53:10:1b:c2:79:a2:04:e2:ec:4c:de:34:59:75:ae:81:72:
8d:ed:14:c3:c3:d2:d3:20:d2:29:40:48:b9:bc:9f:4a:3c:8d:
b4:ee:45:16:a8:f2:f5:1e:d3:13:00:09:ee:4c:5a:63:09:54:
bc:ad:6f:dc:cb:03:af:82:ed:20:8f:c0:24:6b:6f:c6:29:85:
c9:e1:f3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:18 2025 by rpki-client