Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json)
Hash identifier: q7xpngHXEP8lnmV/YGJK1MisUMmIAqdFmhUICyWAToc=
Subject key identifier: D6:65:0E:53:E5:1D:EF:1A:26:97:9D:74:DF:90:32:EE:B0:14:6E:0B
Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Certificate serial: 0DDB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
Manifest number: 0DC8
Signing time: Fri 28 Mar 2025 18:03:09 +0000
Manifest this update: Fri 28 Mar 2025 18:03:09 +0000
Manifest next update: Fri 04 Apr 2025 18:03:09 +0000
Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: i52Arsnvmaf0AprMa7nTjwKkkNj6DoXc0TddsoWFHCI=)
2: FAAC7098424911EFABBC7D78C4F9AE02.roa (hash: 3NPXcNsi26X2NuLDFnrNuZlOxEwbtdhE/ZNaHoNQNAw=)
3: B2A2CFCEF56C11EE90E38718C4F9AE02.roa (hash: 9ef3bsd1YWEQ0cPGMtCDhRdH7824+50itsw2PqzlK9g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3547 (0xddb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F8B1
Validity
Not Before: Mar 28 18:03:09 2025 GMT
Not After : Apr 4 18:03:09 2025 GMT
Subject: CN=67e6e45d-0ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:00:c8:9d:94:d7:c7:f2:34:94:b6:04:ee:
52:10:e4:4d:f9:1c:6e:f7:07:6f:00:15:66:88:5d:
a0:d4:74:6c:bc:fb:3a:48:b4:51:e6:56:aa:e8:2c:
f4:56:2e:24:53:11:3c:4f:34:d3:52:83:13:b8:f9:
b8:5e:cb:b3:10:2c:76:71:2c:2b:56:b1:04:fc:cc:
50:58:b1:54:a3:9a:87:2b:fb:24:c5:e8:e5:8e:c4:
b8:64:9b:4f:ec:2d:c0:ca:9c:a6:33:32:79:93:81:
ff:1a:ab:17:65:91:cb:e9:5f:2c:74:f0:3c:b1:1d:
6d:b9:cd:7c:86:de:cf:32:d2:3e:c9:a2:e1:8a:30:
2a:99:fa:7b:40:51:3f:66:4e:b5:04:6c:bf:9f:27:
59:36:ed:ad:76:09:de:3f:21:3e:af:fa:58:e4:1f:
a7:02:f3:7f:d1:bb:4e:4c:7e:6a:e1:84:1b:70:09:
61:1d:58:c3:8f:c1:a5:bd:9b:65:d3:35:ff:48:24:
9f:d0:0b:1e:68:ce:f8:12:a9:cd:64:ba:fc:38:23:
a2:b5:01:23:bb:86:c8:e2:8a:7c:60:bc:13:50:23:
60:d4:f6:b3:aa:d8:04:f9:77:0b:7d:7f:0b:d0:09:
49:ee:25:35:75:13:1d:bf:9f:a9:eb:b7:ef:ac:27:
40:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:65:0E:53:E5:1D:EF:1A:26:97:9D:74:DF:90:32:EE:B0:14:6E:0B
X509v3 Authority Key Identifier:
keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:f0:8d:3c:c1:c6:2a:9b:d0:6c:02:d9:04:8e:8c:f2:2c:56:
1a:1e:97:59:ba:05:1d:7e:c9:c8:60:fd:e3:71:1d:61:ba:8e:
62:c6:d7:1b:aa:b6:8a:7e:17:25:1d:1c:5a:39:e9:c4:3f:15:
50:94:db:79:67:8d:bb:fc:56:35:86:8f:f4:65:06:53:c8:b8:
95:42:5f:a8:72:da:e1:11:99:4a:b8:0c:1a:59:92:c2:69:53:
75:84:c4:77:b8:69:28:62:88:49:7e:59:87:8c:59:42:52:d9:
1b:7b:a9:eb:e2:11:d3:79:a8:9d:ff:66:7c:07:d5:10:2f:03:
23:81:67:70:5e:dc:97:eb:0d:96:ad:bb:c5:06:88:4f:b1:70:
f0:8f:c9:26:c9:1d:9c:5b:90:b4:a3:32:92:d4:27:df:22:56:
5e:c4:7d:66:b9:4e:a8:81:e6:02:bf:18:39:d3:16:60:02:d5:
e1:47:3e:08:da:11:7f:98:b6:28:e3:72:ac:fe:c5:af:7d:00:
00:a0:65:a1:2e:0b:89:b6:78:fd:1b:1d:19:0c:5b:f1:03:4f:
f2:bf:f0:c8:c2:ab:26:29:74:f2:a9:07:2c:43:a5:fc:21:1f:
c9:33:ab:97:f8:f8:2e:af:e3:38:a1:5f:c7:e9:1f:39:6d:50:
56:04:86:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:09:28 2025 by rpki-client