Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
File: R-xTv901EyDomyxUG6zdTY1SoLM.mft (raw, json)
Hash identifier: MzkZZ7j38uBnBQZPByYxWn9GBvs4/JXRjhSkwzyRDTo=
Subject key identifier: 70:47:23:CD:92:29:CE:16:FA:4E:14:E6:FB:5B:E1:49:86:C6:17:00
Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
Certificate issuer: /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Certificate serial: 0645
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
Manifest number: 0630
Signing time: Fri 28 Mar 2025 22:59:05 +0000
Manifest this update: Fri 28 Mar 2025 22:59:05 +0000
Manifest next update: Fri 04 Apr 2025 22:59:05 +0000
Files and hashes: 1: R-xTv901EyDomyxUG6zdTY1SoLM.crl (hash: BcerBnRjGpFXshsdp7255+yZTdRr1G8BYWo+9svQc1Y=)
2: A6556900C0DF11EE9BA7B27AC4F9AE02.roa (hash: EgfWV3bjapet1pWv+VKLGp7GszirbkxZGbTbDfXNKuw=)
3: 24D8D69CADAE11EBB6E7565AC4F9AE02.roa (hash: K9wbLHRivpF9DHQpXalpHkYwZPdlN5pD4XKKl0H+dMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1605 (0x645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173DB5
Validity
Not Before: Mar 28 22:59:05 2025 GMT
Not After : Apr 4 22:59:05 2025 GMT
Subject: CN=67e729b9-58d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:ab:3e:32:71:15:06:6f:86:d8:71:08:59:
8e:60:66:33:9d:00:2e:9f:e1:36:8d:9c:5a:db:6d:
ca:bc:2c:cd:01:2f:74:b8:8b:43:d0:3b:82:f6:ae:
ce:5a:2f:ea:19:74:b0:14:16:69:5c:da:e7:ca:b8:
dd:72:d3:05:3d:23:db:6d:85:d1:ee:a0:63:93:4f:
7d:de:92:fd:87:91:62:06:8a:98:23:d9:26:d7:3e:
c8:6c:cd:b0:08:06:e1:7e:02:c6:3b:a8:ed:10:25:
21:0f:d2:30:e8:9b:bc:90:9a:c5:ab:7f:d4:69:c3:
41:a8:30:ca:fc:e3:77:d7:59:98:9c:59:7a:e9:67:
e3:2e:ed:17:2c:03:ef:c9:71:5c:33:f3:1e:6f:23:
cf:fe:f0:4d:84:53:a9:c9:bd:16:d6:2d:d5:6a:45:
ee:89:03:85:84:33:55:8c:ff:61:45:6e:83:e9:66:
98:10:b1:17:1c:cc:54:6e:3d:1a:51:5f:1f:b8:7a:
fe:90:8b:25:50:94:d9:c5:e3:26:6b:f1:41:02:0c:
47:f7:b0:4d:da:5c:cf:47:1c:55:a9:dc:0a:4c:6e:
d0:f3:2f:a7:65:df:43:fa:f8:e2:3f:69:23:9b:e3:
58:fc:28:90:a4:ff:ce:50:88:69:82:d3:17:dc:1f:
db:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:47:23:CD:92:29:CE:16:FA:4E:14:E6:FB:5B:E1:49:86:C6:17:00
X509v3 Authority Key Identifier:
keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:7a:d4:f3:da:c8:a6:16:ef:1f:e2:f3:e9:37:ff:1a:75:82:
08:8f:8c:82:0c:ff:8e:ea:0e:a9:ab:1b:db:95:b1:0f:c5:06:
be:30:e8:29:8d:62:c8:c2:c5:58:1d:98:16:5b:af:91:73:3b:
1a:b8:c4:ed:e0:dd:3c:0c:9f:4c:a2:2c:7f:f8:c9:6a:12:1a:
56:53:e4:82:7e:21:45:33:25:13:1c:17:c3:13:c3:22:c0:b6:
2b:98:04:92:6a:fd:7c:11:e4:2b:40:27:cd:05:51:30:b9:88:
85:cc:c6:32:00:f9:1e:b5:3e:3b:d5:ff:3a:5c:ae:b9:10:d8:
9b:18:df:67:30:a9:b8:3e:8c:d9:8b:19:9b:09:37:2a:27:b9:
86:d8:ba:56:84:3f:dd:5d:d9:b1:e7:ec:da:a8:19:a2:cc:02:
9f:7c:99:cf:d1:0d:4d:20:6b:54:ae:eb:70:5b:73:e1:14:7b:
ef:f4:3a:24:d6:77:a3:6f:c7:e5:35:1e:b7:4a:f2:cb:f8:8d:
2e:f8:f3:f0:91:bd:06:c4:d7:85:cc:ab:44:4a:33:e8:6b:15:
ff:cd:e6:ce:1e:13:22:d9:21:03:28:7a:ed:b1:c1:bc:4c:8f:
bf:27:e4:41:b5:89:29:c6:af:e9:f9:22:15:18:98:6d:30:ad:
c3:9a:75:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:14:20 2025 by rpki-client