Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
File: aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json)
Hash identifier: eVV0pLns+cHsV0yV5ivVjzYuz+7m5oDulj7amAl2xxU=
Subject key identifier: C0:57:86:86:F6:12:36:20:E0:72:09:BC:1F:CA:56:5B:F0:F6:EA:29
Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C
Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C
Certificate serial: 3493
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
Manifest number: 3477
Signing time: Fri 28 Mar 2025 14:45:48 +0000
Manifest this update: Fri 28 Mar 2025 14:45:48 +0000
Manifest next update: Fri 04 Apr 2025 14:45:48 +0000
Files and hashes: 1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: 5L52C9baARwoo5ExloLUpT/LHAn9Jtp50NXe927aJpo=)
2: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: /edqiqL2miGSNr0uoaTjo4btCNWXItXesGyoq/gND/E=)
3: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: C4bWHi41cN0y8JVNPFitYHiPYUVvz8I3upa7uMSFTP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13459 (0x3493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917201D
Validity
Not Before: Mar 28 14:45:48 2025 GMT
Not After : Apr 4 14:45:48 2025 GMT
Subject: CN=67e6b61c-a296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:56:1d:47:05:f2:5b:e9:52:5f:2c:07:a3:
21:56:f2:e5:6c:12:4a:60:2d:a9:e3:91:b0:9a:f9:
d9:85:3a:ec:ef:c2:8f:49:1a:ac:c2:3a:32:88:6e:
1f:92:b4:46:e8:f3:db:26:9d:27:ad:e8:2a:69:64:
23:84:13:85:78:23:b7:b3:74:c7:88:0c:2e:33:cb:
0d:75:3d:80:ef:1e:61:fb:14:f8:3e:f1:28:61:e5:
24:06:34:32:0a:b2:db:f1:7d:54:8c:8b:ff:79:9c:
6d:ad:88:45:e8:16:2c:0b:95:75:9b:d2:6a:7c:27:
b0:6a:55:e6:12:6d:73:94:0e:48:74:b7:97:57:9e:
4e:da:4b:57:61:31:c8:39:b7:78:0a:66:6e:0e:30:
ad:1d:0a:d0:7d:5e:b1:20:11:b7:a8:5a:b1:8b:2a:
c4:09:df:ac:aa:c4:89:b7:13:d4:0d:20:b5:ba:5c:
e5:22:25:d6:23:9a:13:e3:ff:8b:38:25:9a:fb:56:
b1:06:eb:db:30:2f:2f:c8:ca:44:53:24:0a:c6:e4:
e2:5e:12:7c:ef:31:61:7a:5c:67:db:7b:2d:5b:9e:
ad:9e:0e:52:04:b9:fa:db:e3:6f:b9:83:a3:93:49:
30:a5:d5:84:13:de:86:66:cc:01:68:c1:fa:f3:ca:
eb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:57:86:86:F6:12:36:20:E0:72:09:BC:1F:CA:56:5B:F0:F6:EA:29
X509v3 Authority Key Identifier:
keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:95:41:54:b6:f0:34:41:d7:83:d1:fa:b0:a6:78:37:3a:2f:
c6:a7:8d:ce:94:39:26:0b:70:ba:95:7b:b0:66:c8:59:a0:36:
f1:9f:42:e3:de:94:48:b5:4c:03:df:cc:64:55:ad:11:5c:bd:
a2:b4:e0:e3:8c:1f:74:7d:d2:44:94:ec:2e:80:1f:db:a1:e6:
26:ac:c2:89:f2:e3:2c:c0:58:fb:c9:09:be:dd:66:19:eb:d1:
36:49:88:af:bf:f1:8a:1c:ae:27:8a:0d:8b:03:bc:8d:02:f8:
19:2e:4f:56:0b:31:69:34:96:d4:40:48:b3:33:c0:31:26:45:
85:69:36:08:54:79:59:18:19:56:4a:4e:40:a3:4a:cd:01:47:
27:98:b0:9a:3b:4f:23:c2:55:bc:64:07:09:00:7d:cf:75:b9:
5f:94:38:f4:7a:19:fb:de:75:94:a6:80:ef:5e:6e:89:e0:7e:
56:5a:9d:06:2d:65:34:6f:da:e1:0b:13:a9:d5:08:27:a8:e6:
f9:38:eb:14:48:04:97:b6:f3:68:41:7b:d5:36:0d:2e:13:96:
bb:1a:ac:2f:b5:6f:cd:30:cc:ee:74:be:cc:79:6f:50:2f:6f:
65:2c:4a:5a:9d:c5:0e:01:41:ae:92:90:c9:4c:26:02:e4:01:
d4:3d:fe:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:48:42 2025 by rpki-client