Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
File: RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json)
Hash identifier: rBCk9Ns0s24zCY1vIE2VfxWlO5WG023Tq1+WszoxKKQ=
Subject key identifier: 44:D7:61:78:B6:1A:BC:4E:38:4B:BA:22:D7:27:B8:F9:1B:65:E6:51
Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Certificate serial: 054A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
Manifest number: 052E
Signing time: Fri 28 Mar 2025 23:50:30 +0000
Manifest this update: Fri 28 Mar 2025 23:50:29 +0000
Manifest next update: Fri 04 Apr 2025 23:50:29 +0000
Files and hashes: 1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: hwqiwpbpW5sCa3oSqXD3dHu302EzLrYqa4VYFQsi3Cs=)
2: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: 3vGbgZeBX2ux3qD/sA/eOOnJkTBw50rlrCAjdQKlgEE=)
3: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: i9dMAMF25KUvras5KvDG1QM1xBWeYt+C+ALZFoy+wTs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1354 (0x54a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E5DC
Validity
Not Before: Mar 28 23:50:29 2025 GMT
Not After : Apr 4 23:50:29 2025 GMT
Subject: CN=67e735c6-2740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:28:79:f2:66:b1:11:04:52:4e:be:be:ac:
b7:e7:3a:b4:cb:40:f9:fd:1d:9c:8c:bd:af:69:3d:
3c:53:69:68:b2:9b:c6:ee:a0:a1:4a:a1:8f:5d:13:
6a:b8:bb:07:8d:3f:35:61:41:2d:c3:02:be:04:1d:
ef:c2:36:c4:28:50:20:b7:d6:fd:3c:90:07:bc:01:
e2:e2:2a:bf:10:28:a5:65:61:cc:a2:ee:a9:2d:94:
e9:2f:a8:14:83:6b:93:04:7a:89:b3:59:de:7d:f4:
f3:89:19:26:65:ce:15:82:af:03:0a:44:44:2c:fa:
0f:8a:3d:0c:5f:d7:bf:9d:81:eb:b9:a8:1f:12:e9:
6f:69:99:7b:0b:90:25:69:61:2e:7c:ae:73:2b:40:
f1:94:72:f2:30:a3:e4:e6:8d:4d:eb:c4:c5:10:d6:
c0:96:9e:71:69:d5:80:f7:47:f7:1c:73:7d:23:09:
0a:ca:4e:38:37:f0:f6:d7:ba:a2:ad:6e:4e:b1:2f:
dd:82:12:e4:b6:f9:2e:83:5b:dd:d7:cc:08:25:19:
29:62:0d:c4:a9:12:8d:7d:d6:14:69:c7:b2:06:16:
34:75:78:49:ab:eb:2b:81:8c:56:bd:9d:8d:35:8b:
df:b8:b0:86:f6:bd:43:71:c4:77:97:43:fe:14:80:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D7:61:78:B6:1A:BC:4E:38:4B:BA:22:D7:27:B8:F9:1B:65:E6:51
X509v3 Authority Key Identifier:
keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c5:a3:67:6d:7c:a3:79:14:f4:1a:ab:66:db:62:db:4e:93:
7a:6d:1b:a0:b9:87:cf:73:a1:52:54:4a:6d:a4:b2:74:c8:ad:
2b:d4:06:ed:4d:a2:28:a5:43:a6:17:d0:a1:0d:92:26:45:10:
08:07:64:b0:cc:a0:c4:ce:9f:52:06:a9:0c:19:06:a3:d1:5f:
61:5f:1b:00:e9:0d:d5:60:7e:a5:86:3e:bc:c9:65:bb:6c:a7:
ef:e5:8e:32:6b:e3:6f:69:96:0b:95:55:91:50:09:02:16:98:
30:aa:90:ab:01:f7:27:78:54:29:7f:64:0d:4b:09:e6:bf:71:
82:a8:27:ac:ed:1c:6f:89:a3:ec:86:27:df:53:05:0b:6f:c1:
ea:8d:de:dc:92:12:e1:07:a1:d7:15:fe:e7:aa:47:76:2b:1a:
89:bf:97:f5:39:2e:ab:04:6d:ba:fd:88:bb:cd:7e:c7:12:ba:
77:2c:28:a9:05:ed:de:bf:8c:36:3e:2a:c9:d6:88:59:36:ab:
e7:40:42:81:69:61:e6:c4:2a:2b:91:c5:bc:46:ad:b9:3c:cf:
cd:e5:d3:13:f8:1e:3e:31:e4:c4:1b:58:ba:87:c1:1e:c0:11:
57:e3:c6:0b:fe:97:87:a9:0e:cd:00:70:8f:cd:69:d8:8e:15:
3d:05:6a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:22:33 2025 by rpki-client