Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
File: 40tPgNnj9wC8rExSxasj61t-37s.mft (raw, json)
Hash identifier: uDnC4ThRAHGLbWKg8tnaxRkNsoOOoo8HA3UaaN0ZM/k=
Subject key identifier: C2:BD:CF:D1:21:1D:40:C3:0A:FF:A4:63:C5:1F:A9:B7:E0:2F:F9:AE
Authority key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
Certificate issuer: /CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
Manifest number: 0110
Signing time: Sat 29 Mar 2025 00:07:55 +0000
Manifest this update: Sat 29 Mar 2025 00:07:55 +0000
Manifest next update: Sat 05 Apr 2025 00:07:55 +0000
Files and hashes: 1: 40tPgNnj9wC8rExSxasj61t-37s.crl (hash: eIUwwOneRLs+tyfQb0wbX+EiQ95gaZ4akxbnzqf3zxk=)
2: 1E4ABC8C50C111EFA64C2437C4F9AE02.roa (hash: +idkc0Y+TplJvB7T7xrVzyMgw/UlYDqH1h1gbH9ycfU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7
Validity
Not Before: Mar 29 00:07:55 2025 GMT
Not After : Apr 5 00:07:55 2025 GMT
Subject: CN=67e739db-d4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:76:87:a0:11:d1:23:4e:55:2c:66:16:b3:
f8:6c:62:0e:bd:7a:db:0c:6a:f5:a0:7c:32:7f:3c:
84:44:fc:d8:6d:a3:73:2f:32:09:3b:ae:e8:44:b1:
b4:e0:1f:a4:3d:83:19:39:59:1c:08:59:d7:b2:30:
99:7f:6d:39:60:95:fe:f0:e2:cb:7a:9a:2a:e1:da:
6a:b3:f5:fd:d0:87:8f:49:05:8e:82:28:71:f2:0a:
ec:cd:05:92:dd:90:90:0e:f7:c2:7e:61:e3:78:4a:
b5:df:58:da:b3:12:9a:b8:40:c9:5e:67:9d:30:91:
e2:9b:8d:47:0d:43:de:12:f2:ce:ca:5c:a3:a8:16:
17:ce:e7:61:08:78:16:32:8c:c1:e2:e2:2b:33:6f:
b4:7c:f9:58:80:b5:d3:10:bd:73:b2:9f:08:84:a3:
91:e0:73:ed:0a:e0:15:ef:7d:16:b2:27:09:1d:a0:
e3:7d:b1:94:b2:06:5b:bd:07:a0:f9:00:9e:7b:41:
6a:78:5c:98:37:c4:c2:90:66:8d:24:09:a3:79:dd:
a6:0e:08:e7:fe:e9:0f:61:e0:84:45:7d:7c:97:b4:
ba:3d:bf:47:0a:22:35:42:5a:36:47:01:fe:ee:a2:
7f:08:62:de:a7:fc:5c:cb:1c:3f:30:a4:2e:4e:93:
70:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BD:CF:D1:21:1D:40:C3:0A:FF:A4:63:C5:1F:A9:B7:E0:2F:F9:AE
X509v3 Authority Key Identifier:
keyid:E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:69:4e:53:5a:39:88:fe:fb:c1:71:14:4b:4b:6e:02:71:4a:
89:5d:dd:0d:7d:5b:fb:66:f9:e6:7d:f7:a7:3f:22:c4:43:bf:
4f:6e:95:09:e8:55:77:a9:31:00:fc:40:ad:fb:54:4b:1b:54:
ac:0c:f9:09:61:21:76:0c:52:c1:e0:2c:03:b7:32:1c:ad:7a:
d2:db:46:12:f2:a4:73:e1:7e:b4:9a:ec:53:c1:05:82:cd:ed:
e9:5d:d4:45:0f:27:f7:9e:0e:21:86:93:80:b5:ba:41:e8:74:
b4:b2:f3:44:e8:c7:a6:61:b4:50:69:ea:54:f1:b4:a9:4e:5c:
bc:07:db:0b:ee:66:48:80:78:93:a9:3e:f1:15:c8:d4:4e:49:
33:5c:9d:55:2d:01:f9:71:9f:f1:8a:a0:bd:eb:69:a4:a8:86:
cc:cb:f4:d3:ec:2f:0f:c4:c9:a6:bc:5a:24:89:0f:c3:0e:5e:
29:4e:4b:31:7d:b5:97:9e:a3:e9:a0:2f:41:86:6e:94:c2:48:
cf:83:0f:6f:44:0c:e3:1f:6a:9b:4b:5b:5e:12:3c:3a:90:d7:
56:00:7f:c9:10:ec:1a:4c:d7:79:21:3e:a5:8c:45:d3:9f:b8:
f9:f6:9c:d8:fe:d8:ba:6f:bc:78:fa:11:cf:89:39:63:ad:fe:
5e:ce:2a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:02:00 2025 by rpki-client