Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft
File: RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft (raw, json)
Hash identifier: NxyrahL09XBr2Ad+bRwwZ3rf4a/zymb9V81WCr8LpRo=
Subject key identifier: AE:4E:F0:37:60:E4:86:C7:00:E1:42:B5:83:40:C9:B2:4D:F1:5C:FD
Authority key identifier: 44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87
Certificate issuer: /CN=A91807BB/serialNumber=44F9C4DA47E6371FD1C9F9F8E564D1803A0F3287
Certificate serial: 5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft
Manifest number: 5F
Signing time: Sat 29 Mar 2025 06:22:50 +0000
Manifest this update: Sat 29 Mar 2025 06:22:49 +0000
Manifest next update: Sat 05 Apr 2025 06:22:49 +0000
Files and hashes: 1: RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl (hash: GmzuSojSnLFS/Mah/jNwEY6+tq6u4aBGN6hQ6kiCdI8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91807BB
Validity
Not Before: Mar 29 06:22:49 2025 GMT
Not After : Apr 5 06:22:49 2025 GMT
Subject: CN=67e791ba-2db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:29:ef:5d:b8:8d:5e:75:4a:0d:88:14:9a:
2c:9e:b7:66:50:a6:89:64:98:54:0f:2d:46:cd:ab:
4d:37:4a:48:4d:c9:da:0d:ae:f8:65:cc:94:d5:7b:
6c:23:7d:ce:6b:6c:f1:73:d1:22:6e:94:8a:ab:ae:
a1:0b:c6:d4:b6:91:d0:93:e2:32:b8:26:21:6a:fa:
6c:79:3d:7e:cc:60:9e:2f:32:dd:e7:28:bd:02:d5:
1c:5d:ae:3b:62:5d:43:02:9d:8b:fe:82:01:49:9b:
b4:81:ae:90:23:26:98:e3:23:50:8c:ce:93:27:fe:
d2:7a:22:57:7f:f5:8f:54:9a:91:83:92:4c:ce:f2:
0c:06:d8:77:7c:b3:71:a1:de:fb:9d:f8:de:67:3b:
2f:9f:17:b5:2d:b4:83:27:6f:f9:3c:62:d7:ed:fb:
27:05:cc:84:1a:8d:f3:ec:d2:ec:08:a4:d8:b7:43:
16:4e:22:56:0d:c3:f1:40:05:94:42:b2:1c:20:69:
c1:54:4c:2e:a4:68:f0:fc:09:0c:5a:bc:c6:19:c4:
13:a5:af:a7:53:d4:cb:2d:44:29:2f:db:c8:71:15:
0e:1d:d3:32:b4:71:a6:0b:50:d8:99:2d:0f:ab:e5:
c7:59:77:1e:83:9d:b0:66:d1:9e:14:bb:b3:7c:64:
12:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4E:F0:37:60:E4:86:C7:00:E1:42:B5:83:40:C9:B2:4D:F1:5C:FD
X509v3 Authority Key Identifier:
keyid:44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:e1:fa:48:8e:f1:cb:b6:e4:7d:b0:46:06:56:09:75:7e:0e:
0e:da:3e:00:da:35:de:1b:1b:12:d5:57:57:91:3c:1b:e3:8d:
45:89:7c:92:87:08:65:03:3d:63:c9:19:1f:e5:81:f7:f7:07:
35:42:c3:53:94:af:97:3f:7a:89:3d:9d:66:2b:a7:6b:76:d3:
e1:89:a4:a6:17:ab:10:17:38:4b:4e:38:45:dd:7b:b8:7f:a7:
82:95:3e:2b:10:26:1c:45:e4:26:d2:58:e7:20:e9:75:0e:15:
b9:b2:91:65:5c:4f:0a:cf:09:4f:b0:e4:86:2c:3c:be:de:fd:
bd:85:7a:61:88:22:78:97:da:4d:b5:62:3e:46:c1:0a:9b:a3:
e6:6c:f0:71:c0:14:c0:e4:c4:7f:59:96:8c:ba:92:6d:6d:ec:
e2:6c:a3:f2:8d:9e:8a:60:ae:fa:e8:a8:4a:d1:09:b9:f4:bc:
ce:94:49:50:7a:d2:02:c5:f8:0f:75:e5:84:be:47:c7:6c:e6:
9e:17:a1:a0:3d:7d:7a:49:58:bd:f2:bd:c1:a6:bc:d8:5d:0c:
ab:35:cc:7b:68:ce:f0:d8:5e:22:7e:92:9d:1e:20:60:cb:ba:
e5:36:38:f7:1d:3b:59:52:9b:0f:02:7b:ef:91:be:0b:6c:f0:
c6:ba:83:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:16 2025 by rpki-client