Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json)
Hash identifier: Xs+F6vV5PeRhQHzTFnfSkZh4n3LRfkcQASJVY9GXJoY=
Subject key identifier: 0B:7E:C6:B1:4B:C3:C2:F8:2A:26:0A:E4:D3:30:B7:29:F4:B8:D4:4B
Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5
Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5
Certificate serial: 016E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
Manifest number: 016B
Signing time: Sat 29 Mar 2025 03:24:29 +0000
Manifest this update: Sat 29 Mar 2025 03:24:28 +0000
Manifest next update: Sat 05 Apr 2025 03:24:28 +0000
Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: vYTAb0Qi7oFLhibz0zW1UcbvUlQePhMhjf26WL439Oc=)
2: 71F97AC0560E11EEA8088470C4F9AE02.roa (hash: 8kpq6ggiOvPDzABgylcMixzcZMr2vZ4NvVsGkSaMxFA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886CC
Validity
Not Before: Mar 29 03:24:28 2025 GMT
Not After : Apr 5 03:24:28 2025 GMT
Subject: CN=67e767ec-b79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:91:e4:04:95:b3:62:39:4f:1e:0a:16:05:
df:77:13:a2:aa:9c:a3:f1:d8:8f:cc:87:a8:41:67:
32:75:39:1e:e7:61:c8:d2:3a:4e:28:9b:a1:b1:f0:
3e:18:04:0a:fb:18:d1:d7:fe:17:43:90:dd:93:5f:
8d:52:98:29:11:8e:c7:e4:a2:18:d1:da:43:df:24:
c3:df:0b:4e:72:2a:33:21:55:01:57:8b:e7:82:74:
a5:ea:5a:b2:31:25:5f:6b:9a:e2:f1:36:6e:1d:e6:
12:11:9c:fc:55:dd:18:f2:8a:45:f7:33:62:ea:42:
30:6b:5e:63:5c:32:df:83:75:3c:10:12:c6:b8:01:
97:ec:80:ae:42:2a:32:a1:77:da:c8:19:41:4e:e0:
ac:2c:a2:60:5e:9d:e0:5f:08:fe:e6:64:b2:b5:8d:
d6:c3:1f:22:ad:23:69:f1:62:cb:ef:a2:c9:62:a9:
31:48:f6:c2:d6:de:b4:9c:d3:a8:8f:42:e4:e2:02:
94:4e:e1:3e:cd:21:8b:08:61:1c:b3:46:0b:0f:e9:
6c:3d:61:5d:3a:59:13:d9:e9:8f:11:68:8d:fc:73:
e2:72:5a:da:6f:db:12:a4:3a:64:2d:d0:ee:79:b4:
2f:44:58:83:a6:15:84:80:58:8a:8e:2f:a3:1b:99:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7E:C6:B1:4B:C3:C2:F8:2A:26:0A:E4:D3:30:B7:29:F4:B8:D4:4B
X509v3 Authority Key Identifier:
keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:a2:9b:c0:89:0b:81:4d:52:06:14:c6:b2:ee:60:8a:22:48:
b1:ea:06:7d:62:2b:ac:55:0e:e8:6c:7e:b7:a1:dd:3a:59:86:
0b:cb:16:3b:1a:ba:d9:98:b5:13:b2:e3:c3:65:1c:87:55:bb:
de:14:02:62:9f:56:0c:59:ee:19:c4:3f:b8:00:9f:ec:58:23:
5d:68:48:33:26:ac:12:b0:81:01:af:b3:2b:4d:52:7b:e1:bd:
b6:78:e8:fa:0e:4b:e5:ab:02:36:34:dd:c5:75:87:0d:6b:62:
ae:18:49:22:58:b3:e6:5e:e6:69:94:e2:99:0f:95:ef:4e:f0:
53:4a:50:ea:2e:39:00:16:c6:6e:2c:ba:0b:be:a0:fb:ce:64:
36:e5:c2:65:23:dc:5d:ae:4a:3e:57:55:b0:9f:3d:5d:bc:96:
7e:34:d6:5e:dd:26:d7:4a:e5:06:25:05:af:cb:8a:d6:6d:d8:
83:9d:fc:1d:da:9c:7f:f3:a9:16:78:b6:f0:e4:fe:64:92:03:
d9:67:af:1b:e7:ad:56:4f:7f:c1:d1:04:34:89:91:c0:2d:4e:
52:d6:b0:de:31:60:7a:71:d9:97:35:27:65:e8:76:f8:51:c8:
0c:45:13:fd:77:32:fd:e2:62:6d:73:62:07:66:1a:af:df:05:
06:e7:b2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:49:53 2025 by rpki-client