Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft
File: 2CVmixrBt_OBXwe82lfnSMSWSpo.mft (raw, json)
Hash identifier: sOk/PYJ9x5wI5oS47TvNaGP5dw3n92zKzTcbO3Re8Ts=
Subject key identifier: E1:6B:E9:89:E7:C9:A3:C3:E7:30:AF:71:A6:57:1C:CE:01:17:57:ED
Authority key identifier: D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A
Certificate issuer: /CN=A91756C3/serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft
Manifest number: 1E
Signing time: Sat 29 Mar 2025 07:11:46 +0000
Manifest this update: Sat 29 Mar 2025 07:11:45 +0000
Manifest next update: Sat 05 Apr 2025 07:11:45 +0000
Files and hashes: 1: 2CVmixrBt_OBXwe82lfnSMSWSpo.crl (hash: /K4Mj3vNvClDsEJPAr45N/M1eNtjDKaFRzNbJ6BL1lo=)
2: 00078764E06811EF8716401DC4F9AE02.roa (hash: xskJHyJy9wOT0np+Xdp4jl5Zejz4/7Uevmd8xiyRBK0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91756C3
Validity
Not Before: Mar 29 07:11:45 2025 GMT
Not After : Apr 5 07:11:45 2025 GMT
Subject: CN=67e79d32-d6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:b8:24:64:69:8a:9c:49:36:b2:ab:af:48:
8f:5d:9e:7d:63:e1:b4:d5:5a:23:82:c2:f5:86:7a:
ed:d5:2f:81:e9:b6:bc:19:56:cc:09:94:ee:6d:5c:
d2:62:15:39:81:0d:08:dc:0d:a3:6b:18:3c:f4:9e:
81:4f:2b:7e:e4:50:05:f1:76:de:a2:bc:7f:01:bb:
75:8c:42:bf:2e:54:f9:e8:9a:8e:0f:59:c5:ff:fd:
fc:a5:da:7d:db:fb:bb:27:a3:53:f1:f6:a1:bf:1c:
09:1e:cb:57:70:a6:e3:3b:ed:b5:5e:3f:c9:2c:73:
76:91:72:33:ca:d0:44:ca:aa:20:b7:8e:31:08:6b:
b4:37:5e:65:99:12:f6:41:a9:8e:d9:83:95:bf:07:
a5:d6:f2:f2:83:4f:7d:2a:af:68:4e:8a:91:44:48:
12:78:5c:59:fa:69:b3:46:7d:7a:63:58:86:69:6a:
cb:a4:e1:76:c9:80:54:7e:4c:59:2b:8f:6d:08:e4:
bc:b5:8d:bd:ca:e6:ae:ee:4e:ed:52:52:3d:72:69:
e0:0c:4b:b9:52:53:58:e5:59:00:d8:4b:f4:86:25:
21:3d:02:7a:65:40:8e:7d:6f:6b:7a:97:f0:10:b8:
55:61:81:af:cc:73:4b:8f:65:9d:85:7a:68:3c:b1:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6B:E9:89:E7:C9:A3:C3:E7:30:AF:71:A6:57:1C:CE:01:17:57:ED
X509v3 Authority Key Identifier:
keyid:D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:3c:e2:9a:01:ce:c6:f8:7c:d7:68:92:01:62:5c:1b:ee:46:
75:6b:13:16:ea:89:54:34:13:25:d9:7f:34:01:34:1a:f3:01:
cc:d1:3a:02:35:3e:bb:12:ee:cf:a0:da:51:9f:10:11:b9:09:
45:62:66:02:1b:62:fd:b4:3c:86:a3:ad:95:ef:2e:4c:9a:ba:
dc:93:84:e8:17:51:69:7b:8a:3d:4a:a8:6d:26:fa:5a:bf:71:
16:b2:17:29:e1:ed:8e:00:aa:cf:e5:90:51:a7:1f:c2:f9:40:
19:eb:f0:30:b7:ee:d6:c6:82:cf:87:a2:de:d2:ed:00:7b:6d:
c0:fb:55:0a:46:9f:a9:d9:7a:ae:10:4d:47:7e:6e:4b:61:f1:
98:4c:fa:49:b8:83:3b:fd:a1:ea:9d:ec:97:cc:53:24:28:e2:
85:32:4d:76:82:39:5b:b8:41:24:b2:5f:12:be:e1:79:b7:a5:
37:ab:c4:89:ae:7a:1f:a2:74:f2:eb:12:42:e4:49:ab:ba:99:
fd:3d:c1:5e:92:3d:ce:a6:cf:6b:c2:52:59:e9:79:b1:87:b1:
4d:5a:c6:e6:77:25:20:12:bf:19:68:b4:6e:e1:cd:dc:ac:10:
16:0e:78:06:b0:8f:97:4a:ac:e3:33:10:d1:ca:95:72:b1:fb:
03:03:33:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:50:27 2025 by rpki-client