Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft
File: b6MnfND3RvILaYm150QQZcbD0eE.mft (raw, json)
Hash identifier: HQqFV1Ojj+kQmuHbgNRrzAdOyEKdoRqp1644HaPTMRg=
Subject key identifier: BE:E1:17:48:C7:4D:4C:9B:B4:B1:5B:13:BC:D7:01:79:E6:47:FA:AC
Authority key identifier: 6F:A3:27:7C:D0:F7:46:F2:0B:69:89:B5:E7:44:10:65:C6:C3:D1:E1
Certificate issuer: /CN=A9183A53/serialNumber=6FA3277CD0F746F20B6989B5E7441065C6C3D1E1
Certificate serial: 0BB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6MnfND3RvILaYm150QQZcbD0eE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft
Manifest number: 0BAD
Signing time: Fri 28 Mar 2025 19:05:38 +0000
Manifest this update: Fri 28 Mar 2025 19:05:37 +0000
Manifest next update: Fri 04 Apr 2025 19:05:37 +0000
Files and hashes: 1: b6MnfND3RvILaYm150QQZcbD0eE.crl (hash: co4XXXD7w/IQYE5/LbMJ/dMl29aIs5Jrz5y2lJXaCrE=)
2: 5B89EDAC1C1911EA905C7109C4F9AE02.roa (hash: yFbcE2/zh5W+jYTCtbp+al/Ly/eMMC6ALp6S0V30Zsc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2997 (0xbb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183A53
Validity
Not Before: Mar 28 19:05:37 2025 GMT
Not After : Apr 4 19:05:37 2025 GMT
Subject: CN=67e6f301-b574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:59:f3:b6:fd:5a:2f:8d:2b:3d:77:b0:26:68:
21:40:8c:31:aa:cc:b6:b6:37:c0:ed:9c:e4:d6:8c:
3e:28:63:75:ca:2c:3a:48:8a:b7:5d:48:ba:67:32:
4c:65:11:95:01:89:ad:5d:bf:1f:99:f8:35:d9:84:
a5:58:15:ef:44:3a:06:72:83:19:05:1a:34:d3:b6:
30:24:41:10:3d:20:7f:5b:db:be:46:1f:78:b8:15:
07:6a:59:16:09:24:4b:17:a7:4d:dd:b2:e4:7d:8c:
33:7c:55:4c:75:ca:b3:30:4e:7a:79:7a:b4:0a:0d:
9b:6f:3b:f3:79:45:f9:96:36:cb:24:a5:8d:8e:e5:
7f:84:1c:f0:77:80:a2:64:78:cf:25:d2:6d:ea:4c:
82:83:f4:0f:bf:0e:6b:93:09:66:d6:08:10:74:74:
f7:08:6c:9b:d8:57:63:5d:87:d6:72:0d:8e:c2:12:
ef:ba:6e:b9:ac:ac:a5:6c:67:fe:da:a0:59:19:f6:
5e:69:da:f8:7c:97:f6:38:55:c3:90:1d:c9:c2:bf:
06:e2:ff:49:4c:cc:63:a9:65:77:64:ae:92:3c:be:
66:29:43:6f:23:6f:f2:30:97:81:0c:08:de:58:88:
c1:7b:af:7a:bb:39:a5:d2:46:16:ee:80:21:6d:00:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E1:17:48:C7:4D:4C:9B:B4:B1:5B:13:BC:D7:01:79:E6:47:FA:AC
X509v3 Authority Key Identifier:
keyid:6F:A3:27:7C:D0:F7:46:F2:0B:69:89:B5:E7:44:10:65:C6:C3:D1:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6MnfND3RvILaYm150QQZcbD0eE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A53/9852A2F21C1811EABF343C87C4F9AE02/b6MnfND3RvILaYm150QQZcbD0eE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:20:61:12:b4:a0:08:a3:69:6b:88:01:1b:9f:71:63:9f:30:
cb:3d:a6:fc:cf:b5:46:99:6b:eb:f2:bd:fe:7f:8b:a0:41:d3:
de:08:14:f5:90:f7:13:23:a0:d5:91:7c:4c:0c:e1:7b:41:22:
85:b1:f0:12:e7:eb:e7:06:ab:49:34:8b:5e:89:fb:c1:d2:b8:
a4:be:e3:06:b5:ff:95:8d:e3:16:c0:c7:cf:e5:c5:b0:af:f0:
cb:98:26:e6:fd:19:6c:d7:d8:e9:41:69:e0:e8:f6:4b:d3:13:
e9:e1:5e:db:89:85:be:21:56:63:d0:ec:a4:84:3f:8f:8d:95:
3c:50:70:6c:e6:a1:65:34:e5:f4:63:40:36:f3:90:1a:42:4a:
f6:59:4c:63:25:70:cb:7a:43:1d:69:62:5d:32:2c:fc:6e:d2:
3f:4c:3d:f1:4f:d2:52:f6:da:a5:f9:c3:5f:95:cd:dc:2f:0e:
bc:39:f3:43:6a:de:45:3e:f6:65:37:b7:37:0b:ea:ed:a1:a6:
b5:1e:15:8e:d7:18:bd:51:78:71:3d:58:61:54:61:17:75:36:
c2:b4:0d:fc:10:b1:ca:68:47:3d:07:c5:52:ce:a6:aa:bd:67:
ce:ff:ca:49:ac:80:b0:9f:f4:7a:82:77:30:5f:0b:73:51:13:
35:bd:2c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:23:01 2025 by rpki-client