Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/X2rsonLVbJhJShClpYl-LCz5XwE.mft
File: X2rsonLVbJhJShClpYl-LCz5XwE.mft (raw, json)
Hash identifier: ECnWNAmYqTw8rVnsgeajIDSwJS4N4l9n0M7GXhb/RZ4=
Subject key identifier: 74:82:11:BE:5E:BF:02:40:5E:B4:F6:60:CC:C4:E2:39:32:D9:9D:B9
Authority key identifier: 5F:6A:EC:A2:72:D5:6C:98:49:4A:10:A5:A5:89:7E:2C:2C:F9:5F:01
Certificate issuer: /CN=A917A220/serialNumber=5F6AECA272D56C98494A10A5A5897E2C2CF95F01
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2rsonLVbJhJShClpYl-LCz5XwE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/X2rsonLVbJhJShClpYl-LCz5XwE.mft
Manifest number: 0C36
Signing time: Tue 11 Mar 2025 23:45:31 +0000
Manifest this update: Tue 11 Mar 2025 23:45:30 +0000
Manifest next update: Tue 18 Mar 2025 23:45:30 +0000
Files and hashes: 1: X2rsonLVbJhJShClpYl-LCz5XwE.crl (hash: +qlYu6BI+3Pe2qPxIfS2dcjr6lQNgfEQ72xXqJaTdHQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A220
Validity
Not Before: Mar 11 23:45:30 2025 GMT
Not After : Mar 18 23:45:30 2025 GMT
Subject: CN=67d0cb1b-1ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:d4:2c:5e:9e:51:2a:fb:9a:38:4d:bc:10:
23:61:02:31:2d:ac:18:cc:63:91:82:c3:3d:29:5c:
29:fd:2b:cc:74:26:95:d2:79:d8:2c:4a:22:a6:81:
5f:a2:ee:1d:c5:ce:ae:bf:1c:76:25:66:8a:c0:e9:
d8:52:df:1a:cc:16:16:3e:d2:ff:1b:38:4c:ff:15:
68:c6:39:28:d1:5d:a5:51:8b:00:ce:c2:23:10:1b:
98:19:59:96:3d:26:0c:18:c2:1a:a4:12:2f:68:df:
b2:e2:9f:53:ae:be:ee:ef:b7:cb:65:4a:ac:ad:d1:
86:a3:b1:74:f0:b1:28:f5:56:3c:52:b7:fc:65:b8:
4b:dd:ea:bd:ba:4b:61:e8:0b:2a:81:6f:3c:88:15:
85:3e:61:1e:73:15:96:d4:1b:fe:3a:d9:1f:af:95:
bb:af:9f:49:d4:f4:ad:56:ae:2f:17:e2:06:18:f9:
e0:fb:b8:31:25:67:65:3f:18:16:43:5b:7d:1e:a0:
2a:76:21:93:87:22:df:d9:aa:06:cf:76:30:83:64:
e6:ef:b7:4a:b2:d6:7e:df:93:55:6e:ea:fe:a8:d1:
7b:9c:a7:94:1e:64:80:a6:96:f8:40:74:d6:79:1c:
09:c3:23:99:dc:bc:d8:76:28:c3:8f:b5:8c:b0:ee:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:82:11:BE:5E:BF:02:40:5E:B4:F6:60:CC:C4:E2:39:32:D9:9D:B9
X509v3 Authority Key Identifier:
keyid:5F:6A:EC:A2:72:D5:6C:98:49:4A:10:A5:A5:89:7E:2C:2C:F9:5F:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/X2rsonLVbJhJShClpYl-LCz5XwE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2rsonLVbJhJShClpYl-LCz5XwE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A220/00EE08D6412811EA8E5E4B83C4F9AE02/X2rsonLVbJhJShClpYl-LCz5XwE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b7:fb:db:f9:38:13:f4:96:e6:2b:0e:5c:93:14:13:34:c1:
6f:44:77:0b:6f:8b:2e:d0:ab:70:53:b6:2b:b6:d0:27:14:e4:
74:15:ea:74:3f:d7:3a:61:b3:c3:b7:76:8c:82:bf:75:30:73:
c5:98:e3:2e:00:b7:c7:e7:28:a8:40:05:82:ad:29:58:3a:a4:
44:f1:a0:e5:ec:de:65:e7:16:ce:2a:99:ca:0c:1e:80:70:bf:
95:30:a4:4d:06:d3:55:f6:68:68:9f:42:ac:6a:11:27:d7:df:
44:af:2c:7b:04:0c:4f:9d:2b:1f:36:ae:21:4c:a8:9a:07:d0:
0e:28:1e:da:7b:5c:71:ed:65:18:a2:17:c0:a2:ce:bb:02:d5:
46:7f:be:53:56:35:a7:6b:7f:99:59:23:fe:58:05:e4:ec:cb:
7d:2b:13:46:46:36:29:6d:d7:11:6e:00:2e:b4:2c:58:71:84:
20:46:3e:5f:a2:d1:1c:ee:59:ae:f3:36:79:13:22:1b:c6:bc:
f1:dc:34:5f:39:07:75:07:ab:45:f9:18:62:53:d8:40:07:9a:
7b:17:bf:3a:7a:21:ef:e0:64:24:07:40:b4:5e:d5:01:14:37:
71:c0:51:71:aa:29:a7:21:b1:75:72:7d:03:be:64:33:dc:07:
a7:1f:49:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:49:07 2025 by rpki-client