Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json)
Hash identifier: cWxhjZ6nlfBWXhVs5b1ApzXG2cPJmmLruiZEKhr0AzE=
Subject key identifier: B2:9B:21:BA:35:1A:81:56:D0:A8:41:9A:A2:A5:1C:7F:11:70:24:80
Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
Manifest number: 0186
Signing time: Sat 29 Mar 2025 03:06:37 +0000
Manifest this update: Sat 29 Mar 2025 03:06:37 +0000
Manifest next update: Sat 05 Apr 2025 03:06:37 +0000
Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: l3xj1HECTD9S0CM2hpH8G3kBCWtcAV05HYol355nPjI=)
2: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: fdj786LqemSZiJSQFR5Ny/PwTC9eYDtT9LwHAqxwkRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91852AB
Validity
Not Before: Mar 29 03:06:37 2025 GMT
Not After : Apr 5 03:06:37 2025 GMT
Subject: CN=67e763bd-d128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f4:16:9b:ec:a6:95:94:dc:f3:da:85:e7:ea:
35:5f:76:d7:ac:b4:0a:42:a4:50:01:71:96:fa:1e:
74:2a:eb:8b:99:2a:4e:c5:fb:80:6e:3b:89:7b:b8:
82:99:4d:17:2f:2b:9a:c0:e5:b2:21:73:15:54:a9:
60:df:90:97:65:d7:b8:8d:90:be:8f:62:9b:0b:d1:
9d:95:9b:6b:6a:e3:e2:ea:4a:1e:23:46:31:2b:2e:
f5:18:72:41:18:44:fe:df:8a:e2:85:85:1a:42:80:
6e:3a:17:cb:05:06:d0:f1:0a:f6:1f:a3:2b:c5:9b:
fa:b3:d4:5f:61:e8:a9:7d:87:cf:f5:70:10:5a:82:
6e:bf:cd:4c:ac:ca:f6:12:95:f2:34:b5:d3:e5:43:
d4:d7:7d:b7:88:2c:29:7f:05:12:2d:36:8d:a8:ea:
0f:74:b3:d5:c7:9d:4a:a4:aa:7f:9e:7f:fd:3f:99:
92:f5:22:2f:f5:d2:b4:ef:01:db:2a:68:f4:28:3f:
8f:70:a3:28:27:d0:4f:27:6b:bb:6d:d6:62:65:69:
c6:1d:26:9b:02:05:f3:01:ae:9f:50:73:de:8e:51:
ce:36:ad:86:95:3b:5b:24:15:42:08:2a:e7:90:f3:
60:c0:da:70:4f:f0:5a:8d:a0:18:71:ba:ed:6d:0f:
e7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9B:21:BA:35:1A:81:56:D0:A8:41:9A:A2:A5:1C:7F:11:70:24:80
X509v3 Authority Key Identifier:
keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ef:2f:c8:14:a4:ae:27:68:e4:e8:e9:cc:43:c5:85:89:dc:
d9:70:a4:be:89:37:0b:c3:ee:7f:ed:31:b5:b2:3d:4c:ac:1d:
ba:de:2e:c0:bf:6f:4c:8b:0b:77:3a:14:cb:e8:10:25:2b:94:
b7:fa:59:f9:2c:f4:3d:80:66:fc:d2:07:50:4c:05:cb:f1:ea:
c9:8c:c0:7d:76:96:07:a1:ce:25:a8:bd:f6:db:fe:bd:f3:b6:
c7:76:d1:00:01:21:c5:3c:62:ba:b7:36:78:8e:fc:2a:4b:04:
8a:30:e5:9b:1f:81:b0:1d:65:cd:6f:a2:1a:df:c8:35:bc:78:
db:8a:a9:39:fe:6f:1a:69:92:64:03:94:a1:e7:58:04:80:47:
31:7b:f7:72:7b:5b:f4:e7:4c:fa:af:4e:d8:e3:50:f6:c1:41:
21:16:43:e2:f6:7c:e7:86:b0:6a:36:45:64:1d:50:fb:ef:30:
6a:4e:51:4d:c0:ba:03:42:d3:61:39:24:77:92:8c:41:97:e8:
f1:18:81:bc:a8:89:5e:40:3e:2f:9e:40:82:0d:2d:fc:96:e0:
39:55:99:50:ab:e5:74:7b:e5:18:4f:4a:24:bb:69:64:a8:29:
ac:be:87:ed:83:93:ec:ae:71:6a:1a:8b:36:d6:a9:c9:cf:ca:
a4:28:78:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:05:09 2025 by rpki-client