Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft
File: i6r6xGXwjQR9LXCUulKA19OYg2Y.mft (raw, json)
Hash identifier: GR44FnbDJLAP7vDm3O7fFii/Xw7rFWo+nT1DQpAwPe8=
Subject key identifier: ED:88:F6:35:36:AE:AD:86:64:FE:7B:9B:60:E3:C9:D0:A3:AA:8E:3C
Authority key identifier: 8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66
Certificate issuer: /CN=A917C716/serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366
Certificate serial: 0258
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft
Manifest number: 02F3
Signing time: Tue 25 Mar 2025 01:43:24 +0000
Manifest this update: Tue 25 Mar 2025 01:43:24 +0000
Manifest next update: Tue 01 Apr 2025 01:43:24 +0000
Files and hashes: 1: i6r6xGXwjQR9LXCUulKA19OYg2Y.crl (hash: 822Y17CAn2aYfajAao7uOU4+39vUM+H1n25AN6N9Nsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C716
Validity
Not Before: Mar 25 01:43:24 2025 GMT
Not After : Apr 1 01:43:24 2025 GMT
Subject: CN=67e20a3c-f3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:19:9e:f2:9d:a8:73:2e:af:6e:44:59:21:
4a:34:40:3d:36:1d:4a:b4:bc:41:38:21:fd:4a:d2:
13:e9:f9:75:d5:8f:d0:d2:c1:bf:45:13:61:70:44:
bd:2e:97:32:75:89:d0:a3:39:ef:53:05:4b:47:fa:
c5:b2:dd:26:2e:12:61:99:24:b6:cb:63:e4:6c:6e:
28:02:05:55:f3:fd:bd:07:4f:cd:c1:15:07:b4:5d:
66:ec:46:30:e7:c5:10:6f:78:b4:0a:b5:df:29:0e:
f7:a3:f6:17:c9:12:d5:e0:0b:60:39:e6:dc:92:2e:
7e:4f:c4:a3:15:7b:57:f7:29:5e:d3:69:c6:24:f6:
36:dd:42:22:2d:67:b6:de:f1:03:95:62:1e:4c:b6:
c5:90:7f:58:33:e2:c4:55:40:17:3b:ae:2e:e4:90:
e7:9c:b8:dc:01:ab:c9:61:e3:52:e9:9e:67:44:58:
a0:ea:9b:59:87:b8:83:c7:b5:58:90:c8:bf:3f:6d:
c4:94:11:6b:64:f8:cd:e3:78:e9:79:39:26:fe:c0:
6f:9c:58:dd:5f:64:eb:20:79:52:fa:4d:f2:12:88:
49:6e:96:cb:e6:ab:d1:7d:ef:bf:b9:8a:2c:e2:85:
05:e7:29:61:af:e7:43:0d:c3:ee:d1:f2:2d:56:bf:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:88:F6:35:36:AE:AD:86:64:FE:7B:9B:60:E3:C9:D0:A3:AA:8E:3C
X509v3 Authority Key Identifier:
keyid:8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fb:ba:fd:86:a7:05:3a:d3:c3:1d:f1:40:b9:d8:05:d6:8b:
7e:18:7d:2b:37:e2:1f:57:b1:5b:bc:46:7c:b7:09:75:e4:18:
17:9a:4e:7b:0f:ca:8a:4c:56:ec:fe:f5:ea:6b:be:3c:d8:1a:
73:21:ef:de:07:19:64:98:97:a9:1e:de:ed:2d:e7:ca:fe:21:
8b:f9:e8:d1:27:c4:61:be:d4:c2:3b:4b:03:59:16:ef:ac:77:
ea:69:20:e5:48:3d:fb:b5:b6:cd:78:e7:68:db:d0:5b:b1:9d:
3d:a2:35:0b:6b:21:76:e5:9b:83:bb:da:e9:d3:dd:2d:0d:32:
a4:3f:c3:91:3d:22:8f:d7:bf:97:95:07:c6:f1:07:c8:d9:f6:
61:1e:c9:21:85:ff:54:fc:2d:49:aa:66:a4:a7:02:b7:97:2c:
e0:32:30:bc:5a:b3:e9:81:68:ff:f3:4b:bc:f0:d5:19:f3:6a:
d2:76:a8:13:ef:fa:21:11:f3:ef:81:ba:cd:f6:a2:e6:f5:2c:
2b:af:da:66:b5:45:3e:c5:f1:55:a2:8a:bb:b7:3c:db:74:15:
20:bc:14:ea:4b:d3:d8:3c:7f:d5:a3:bb:c9:03:2f:21:52:f4:
a1:88:0e:d5:2a:79:59:c0:d3:45:18:23:aa:9b:d1:4c:f4:a1:
a7:6d:09:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:09:30 2025 by rpki-client