Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
File: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft (raw, json)
Hash identifier: 0ohx2czNTVdsO1DLaaboueqYzmYy9/au/znxRbsrVNU=
Subject key identifier: 3C:1D:C7:43:93:EF:2B:C6:46:3C:1F:CD:6A:AF:BB:C4:AA:AA:57:3B
Authority key identifier: 76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07
Certificate issuer: /CN=A917ADD1/serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
Manifest number: 0132
Signing time: Sat 29 Mar 2025 03:56:30 +0000
Manifest this update: Sat 29 Mar 2025 03:56:30 +0000
Manifest next update: Sat 05 Apr 2025 03:56:30 +0000
Files and hashes: 1: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl (hash: YEYaiyO+aH2+Jkn10KK1+5XVgslMTWHjGcmv+T0hhRI=)
2: 8D0C1E0E37EF11EE82AF270BC4F9AE02.roa (hash: YBS7N1V85GEsKAdkA8SgTeGUq7xGqu6t+13xBrFpNlo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ADD1
Validity
Not Before: Mar 29 03:56:30 2025 GMT
Not After : Apr 5 03:56:30 2025 GMT
Subject: CN=67e76f6e-b90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ca:a1:48:45:31:4e:ca:17:24:97:d8:3c:b7:
67:85:92:57:e8:34:85:6a:bc:7c:02:b7:c6:9a:dc:
b5:02:c5:66:e0:7e:a8:f4:c2:62:a2:3c:9c:90:73:
fb:06:1c:b8:ae:01:9a:9e:fc:e6:74:0a:96:cf:5b:
d7:9b:f7:64:00:1e:3e:16:af:76:1d:67:44:f4:17:
5d:dd:50:03:23:69:56:6a:ba:3d:23:ee:8a:3f:bd:
64:c0:4b:18:f3:87:22:cb:31:93:8c:1b:c1:d1:b7:
2a:7e:f1:f2:07:6b:95:c3:e1:18:99:38:11:b5:b9:
a6:a6:eb:ff:36:cb:1d:ec:6c:c9:2f:6c:64:c0:33:
99:0f:6a:70:7b:ab:7f:63:0e:14:47:0c:d4:94:db:
5a:07:a2:78:08:aa:ae:6f:a7:ae:1e:d0:33:f0:e3:
5c:d4:77:45:77:fb:e4:b8:c9:d5:58:16:9f:fc:c3:
e2:53:20:f8:f1:91:34:aa:bf:d5:a3:eb:af:33:9a:
17:91:bc:5f:40:56:93:b2:74:55:41:d1:b5:6a:43:
5f:bf:d6:c6:28:cb:da:50:9e:1f:7c:8d:99:63:8b:
60:26:1d:ad:ce:be:65:18:cc:7f:cd:ed:f8:39:82:
57:51:7f:4c:bd:a1:e9:ec:00:75:1d:8b:ed:03:d6:
54:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1D:C7:43:93:EF:2B:C6:46:3C:1F:CD:6A:AF:BB:C4:AA:AA:57:3B
X509v3 Authority Key Identifier:
keyid:76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:e3:e3:a0:bd:18:27:f0:9c:67:e7:a5:f9:33:a1:da:c2:1a:
27:e8:63:88:ee:6d:2e:45:f3:4b:e4:8e:55:44:72:0d:34:0f:
50:ef:ff:b5:b1:ef:11:e4:e1:7f:16:6d:a0:74:78:54:23:8e:
5f:52:15:80:d3:1e:40:c0:88:e0:22:ef:85:91:ad:dc:bd:4e:
33:8e:f2:b9:1f:f8:04:d8:6e:a8:15:e5:2f:73:6b:dc:94:34:
33:95:82:07:c6:56:06:63:81:24:14:b8:33:db:15:fa:82:61:
08:f7:97:c2:6b:75:47:63:92:6f:f1:3a:08:69:81:20:5b:49:
ed:47:a7:b9:10:19:3a:7e:05:c1:95:ed:35:12:45:f1:01:d6:
e5:96:f9:06:52:8b:a2:76:89:ee:67:c5:7d:31:ed:99:ee:c7:
cd:e5:5c:20:85:60:3e:96:49:9f:31:cd:59:b4:eb:63:cc:28:
61:c6:32:bf:2f:dc:7d:d0:93:ef:6b:92:f2:6d:5d:d6:32:63:
82:61:4e:5a:4d:d9:fb:04:f7:d6:31:16:e9:e6:ec:d4:cf:b1:
80:9b:ea:b4:28:ed:c3:0b:60:72:3f:fc:90:04:e9:84:70:be:
81:57:0d:35:9f:33:50:15:e6:86:2a:a8:6a:68:60:62:8d:1a:
60:62:ac:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:57:48 2025 by rpki-client