Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/IOiB-z48CVPBT4i_0t-mkwg0Cxw.mft
File: IOiB-z48CVPBT4i_0t-mkwg0Cxw.mft (raw, json)
Hash identifier: SKFXzeTPlqzbAc///CPSLaFUXfdKyraisR2zV/xfU4k=
Subject key identifier: 47:A0:0C:17:5B:B4:81:BF:58:F8:30:55:4D:F7:95:11:FA:F5:87:7A
Authority key identifier: 20:E8:81:FB:3E:3C:09:53:C1:4F:88:BF:D2:DF:A6:93:08:34:0B:1C
Certificate issuer: /CN=A917B44D/serialNumber=20E881FB3E3C0953C14F88BFD2DFA69308340B1C
Certificate serial: 0627
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IOiB-z48CVPBT4i_0t-mkwg0Cxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/IOiB-z48CVPBT4i_0t-mkwg0Cxw.mft
Manifest number: 061D
Signing time: Fri 28 Mar 2025 23:00:37 +0000
Manifest this update: Fri 28 Mar 2025 23:00:36 +0000
Manifest next update: Fri 04 Apr 2025 23:00:36 +0000
Files and hashes: 1: IOiB-z48CVPBT4i_0t-mkwg0Cxw.crl (hash: lLTJNHRYAXEQu3867ht43mnHQQznO8NbfSQMYxXNvS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1575 (0x627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B44D, serialNumber=20E881FB3E3C0953C14F88BFD2DFA69308340B1C
Validity
Not Before: Mar 28 23:00:36 2025 GMT
Not After : Apr 4 23:00:36 2025 GMT
Subject: CN=67e72a14-195b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:32:e8:64:5b:c1:70:42:b1:32:90:52:c8:
d0:3a:18:a8:05:d1:fb:23:9c:bf:58:d0:b7:67:53:
a6:36:6e:ad:10:6d:0a:cb:1b:e8:5d:10:99:e6:9e:
01:51:a8:74:52:8d:b3:1d:e0:0b:ba:d0:cf:ab:47:
b3:d9:27:37:85:7a:72:d0:d6:84:39:13:a8:a3:65:
54:57:c4:80:fa:5a:da:c9:40:44:fc:49:5c:95:8b:
aa:fb:5e:a2:f9:f1:00:f6:49:c8:94:94:83:ec:f9:
31:4b:a5:52:c5:31:14:d3:9a:b4:cf:7a:24:16:10:
3d:f6:81:76:1c:9c:fb:5b:33:89:f5:c8:0b:07:0b:
ad:ff:18:01:19:3e:d4:cf:4e:6a:69:6a:36:c4:d0:
7e:7f:ea:73:ba:42:17:e9:91:99:48:5a:ad:b4:3c:
4f:e3:c3:8c:fb:ca:e8:21:07:e5:d4:45:fe:2e:ff:
ee:2f:9e:91:ab:1e:19:be:6a:a8:bb:ef:ab:55:6e:
a9:ce:c4:61:d1:0d:9e:50:7d:7e:67:f0:73:bd:a6:
be:07:a9:34:5e:15:7c:93:0c:ea:55:26:79:c2:12:
23:c8:43:e7:67:30:23:d2:8d:70:0f:60:c1:8c:6a:
cc:6d:fa:b3:2e:8f:77:04:1e:5d:be:ef:3e:e5:0f:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A0:0C:17:5B:B4:81:BF:58:F8:30:55:4D:F7:95:11:FA:F5:87:7A
X509v3 Authority Key Identifier:
keyid:20:E8:81:FB:3E:3C:09:53:C1:4F:88:BF:D2:DF:A6:93:08:34:0B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/IOiB-z48CVPBT4i_0t-mkwg0Cxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IOiB-z48CVPBT4i_0t-mkwg0Cxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B44D/2B4859EC90FF11EBB6248758C4F9AE02/IOiB-z48CVPBT4i_0t-mkwg0Cxw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:c3:dc:e6:ec:bc:0a:73:b4:66:96:56:7c:d7:a2:59:78:0d:
1d:57:54:d7:ea:d3:13:98:f5:ed:4e:62:08:db:00:e6:91:bc:
ba:01:7f:41:70:ea:ec:8c:71:e9:ce:ee:48:05:a1:41:85:62:
c1:32:62:13:27:33:e3:e5:2d:66:c6:5b:4b:0e:20:dd:87:68:
22:40:44:ea:b7:16:3d:27:b1:80:88:80:de:90:51:05:10:76:
a8:f5:7e:61:1b:f5:1b:9d:66:65:85:a5:85:e7:ad:e5:75:4d:
51:a5:a7:c9:ae:10:d0:ee:7a:3f:95:e0:02:20:80:27:fe:e2:
8e:df:5d:27:cf:39:da:8b:6f:76:a0:6b:d9:fe:23:1e:ed:8b:
1b:c2:e3:cf:8e:91:d5:2b:06:ec:ca:67:d4:c1:aa:46:e3:cb:
b1:f8:00:50:12:97:62:9c:0e:92:da:13:24:d1:11:02:61:4a:
a3:b9:2e:29:e7:79:8a:f9:2c:63:68:7a:9a:f5:5e:a3:6e:63:
6d:03:ee:f5:c8:84:e3:51:b2:54:9c:e7:bc:c0:2c:cf:02:11:
11:9c:7a:7a:ff:71:70:fa:9f:cc:96:86:6d:59:a2:30:20:b9:
5b:42:fe:81:99:45:1d:5e:df:b8:48:5b:a6:77:14:0d:76:54:
03:19:51:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:33:55 2025 by rpki-client