Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft
File: rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft (raw, json)
Hash identifier: PqlEmHgq+v6p8YJtq5/rtvqgO144JwSp0fg+LcjETYI=
Subject key identifier: D9:2A:E3:BB:26:39:A2:9E:72:9D:21:48:4F:00:C6:B7:43:2C:CC:0C
Authority key identifier: AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87
Certificate issuer: /CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987
Certificate serial: 0656
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft
Manifest number: 064C
Signing time: Fri 28 Mar 2025 22:45:14 +0000
Manifest this update: Fri 28 Mar 2025 22:45:13 +0000
Manifest next update: Fri 04 Apr 2025 22:45:13 +0000
Files and hashes: 1: rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl (hash: kA2k/j2jVkI9J2Tj8hlURXGHBsqZ4cUV8pc4zW2utOo=)
2: 47249F9E7D7D11EBA5FADA5FC4F9AE02.roa (hash: Ck9VYv/1rcTBtaX5FrHIAevWzTx3mNc72bWTwUqMdEA=)
3: 467830CE7D7D11EBA5FADA5FC4F9AE02.roa (hash: mTOOiMtwoSIKIvU9I/HZJyVIkpOV2ubS6z5GxznmdY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1622 (0x656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91878B2
Validity
Not Before: Mar 28 22:45:13 2025 GMT
Not After : Apr 4 22:45:13 2025 GMT
Subject: CN=67e7267a-5af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:c8:40:5d:b6:a5:4f:ac:57:0b:15:74:1d:
d0:54:90:fa:03:97:11:45:c7:95:55:e4:d3:fb:94:
f4:a9:4e:33:a4:57:54:e8:c4:63:a8:1b:d8:d9:06:
91:7f:2d:69:ad:3a:5f:bf:cd:b4:b0:0a:c1:43:ae:
68:79:54:fb:86:f7:e2:21:e0:c1:fe:1f:cb:39:00:
11:30:6e:cc:10:f2:26:ae:88:7a:99:55:e5:c3:60:
8d:15:93:25:e7:b6:89:1e:ca:d1:2e:8a:ce:cc:4f:
43:0d:f5:a4:6c:37:fe:7f:6f:ce:01:26:57:84:99:
dc:96:d3:10:bb:e6:9d:ea:65:0a:33:f7:03:4b:37:
b2:8d:48:ce:42:3a:99:4e:b9:46:7d:0b:7b:23:e4:
06:b4:20:35:4e:3b:e0:cc:aa:ee:41:78:a9:15:24:
fb:77:c9:30:2e:41:7f:28:d8:f6:5f:3c:fc:e9:81:
cd:92:e1:38:68:66:1d:df:48:5b:ff:48:28:64:61:
02:57:ba:f6:c1:55:18:8b:61:23:11:45:ba:ef:37:
e6:11:4e:38:e7:5d:e4:2a:01:37:f4:6d:90:d0:74:
ef:0f:f2:65:ca:c5:26:af:c9:04:9f:88:c1:30:4a:
da:0f:cb:87:6e:55:97:c6:f1:a2:7c:4c:ce:05:46:
31:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2A:E3:BB:26:39:A2:9E:72:9D:21:48:4F:00:C6:B7:43:2C:CC:0C
X509v3 Authority Key Identifier:
keyid:AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:fa:5c:92:df:e3:29:d6:d6:17:46:b1:5a:09:1c:87:dc:c6:
29:7c:67:6f:27:03:da:35:54:96:b1:31:50:13:b7:3b:29:20:
ee:3b:e0:71:c3:34:6f:94:ca:b9:5b:5d:11:ee:89:93:1a:94:
d6:ac:cb:82:94:f0:b0:87:ef:74:aa:2c:e2:be:81:9d:c7:27:
79:75:59:42:24:a4:2c:f4:4e:e9:d9:3a:1d:ff:da:18:53:c3:
12:ba:0f:30:a4:c2:d6:ce:87:1a:50:05:6f:42:19:b1:07:92:
47:49:fa:a7:6c:85:8b:88:c0:4d:59:c8:03:4e:d6:6e:a7:17:
f0:05:d8:1e:ac:db:16:fe:27:75:92:eb:56:66:33:ab:d7:24:
aa:8d:25:a9:b0:98:e1:ca:c2:9c:a2:f1:cf:49:d5:05:7e:bc:
22:d1:72:5b:2c:bc:f8:fd:83:fc:c7:29:05:a1:42:51:90:2c:
25:cb:bf:33:21:88:a9:e9:73:e7:b2:ce:3f:a1:0d:da:e0:ca:
c0:e3:e0:7e:7d:b0:fd:74:86:94:7d:e9:85:14:66:38:15:c4:
33:16:3e:cb:2f:e9:e6:3e:cb:1a:7d:2b:f8:10:49:1b:39:ca:
0c:48:8c:e8:e0:95:a5:44:04:33:cc:35:5d:8f:aa:e6:79:ee:
9e:ae:9a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:46:39 2025 by rpki-client