Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
File: 2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json)
Hash identifier: bAYCv2d9PmPKAjsFiWE0GaqihILbma+dfgFJZhto4tM=
Subject key identifier: 7D:F4:C6:A9:C4:FD:2E:2D:18:91:73:0A:0E:B8:02:65:0B:1E:D6:9D
Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
Certificate issuer: /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB
Certificate serial: 02AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
Manifest number: 02A5
Signing time: Sat 29 Mar 2025 01:45:53 +0000
Manifest this update: Sat 29 Mar 2025 01:45:52 +0000
Manifest next update: Sat 05 Apr 2025 01:45:52 +0000
Files and hashes: 1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: pWiGhjrSOUA3wjGbmLHrRDMeI65LLUb/QSNiIksNmgY=)
2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: 06qlKoNMAgG5qkJwM6sNlRAgtRr58eOsszFhlsT8L0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B241
Validity
Not Before: Mar 29 01:45:52 2025 GMT
Not After : Apr 5 01:45:52 2025 GMT
Subject: CN=67e750d0-671c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b2:02:3f:71:52:a2:12:db:e0:c9:3b:6b:de:
24:ee:57:a0:f1:fe:de:71:8c:f4:a4:77:3a:ba:8a:
e5:0b:bc:fa:dc:37:b8:fc:4d:c1:8d:dd:2c:73:4a:
fc:82:35:ba:20:50:d6:c8:38:72:ff:56:73:e4:d7:
33:cf:24:a2:97:b1:f5:04:4e:b0:0a:af:ae:67:a3:
4b:69:23:7a:42:62:ea:99:9b:75:7f:cb:05:fa:8c:
27:88:ca:75:fb:e6:e7:2a:ff:df:8b:7e:20:06:01:
d7:72:e4:10:80:15:43:b5:b9:2e:74:21:88:5f:a0:
70:f3:61:03:9a:27:00:21:f0:83:e2:37:45:61:cb:
f4:31:9a:00:a0:a7:4d:65:3e:f4:e8:60:92:06:37:
ab:09:ee:1d:62:fc:34:bb:46:5b:31:45:b8:09:e8:
26:c9:2e:fe:59:55:8e:72:3c:54:5a:ad:e1:e4:69:
70:da:1c:53:53:81:7d:2d:4d:0d:9b:c5:bd:be:e8:
5f:b8:56:a0:49:2c:27:34:9f:e5:ba:e1:d6:9b:4e:
a0:e2:91:e6:9d:b0:0c:d7:b1:29:d6:d5:63:11:02:
b7:16:3e:bd:e1:86:c5:90:fb:5f:86:34:e7:08:ae:
c4:bf:a7:d6:69:c5:b3:ff:b5:43:0c:28:01:04:62:
cb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F4:C6:A9:C4:FD:2E:2D:18:91:73:0A:0E:B8:02:65:0B:1E:D6:9D
X509v3 Authority Key Identifier:
keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:08:9d:0f:53:28:4b:8a:ab:02:b4:82:55:48:47:e7:24:67:
ce:6f:26:93:20:a1:e6:15:da:58:ce:90:2d:45:bf:7d:ca:69:
ee:ec:7c:75:77:13:02:6f:c4:dd:b1:fb:e2:12:be:65:c9:47:
e3:e4:aa:85:34:41:0e:a5:85:65:a6:05:8e:d1:15:ec:b6:08:
50:41:48:3e:86:ed:7c:c3:e5:22:b7:3e:e1:ca:da:04:31:0c:
80:ca:72:7c:5e:2d:45:4e:5d:fb:41:b8:d8:36:3c:c1:7f:fd:
7d:a9:85:a0:3d:a1:94:5a:15:4c:86:ce:f9:98:d5:d4:8d:5b:
0b:85:b5:27:76:4c:33:51:36:9b:db:82:d8:9f:3d:1f:67:a1:
37:cb:6e:81:c6:49:c0:94:98:78:02:ba:9b:42:36:bf:00:b8:
a9:50:4d:cf:18:50:a1:a3:b6:80:06:e8:9e:10:f6:bb:7a:18:
69:2a:b0:37:74:4f:31:1f:0b:ab:64:17:c0:6a:b5:4c:6b:9c:
41:99:25:7f:23:99:08:7d:7f:d5:ba:6e:53:81:93:2e:81:dc:
21:11:5a:db:45:70:de:c8:34:f3:6f:f5:27:b0:cd:68:52:79:
aa:dc:dc:71:ce:87:a6:8a:4c:50:a2:95:89:2a:21:f1:b4:20:
80:b4:22:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:38:10 2025 by rpki-client