Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
File: vLFqiHOxvhMm61zbkLGGEV2nTWc.mft (raw, json)
Hash identifier: iDtFpixno7Aa5WHxG7WIzOeWPVcKda+QFM86+n2p4AI=
Subject key identifier: 55:58:6D:10:8A:BD:71:B0:A1:5D:2C:5A:81:C9:80:06:EF:FD:75:EC
Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
Certificate issuer: /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
Manifest number: 01D1
Signing time: Sat 29 Mar 2025 02:23:35 +0000
Manifest this update: Sat 29 Mar 2025 02:23:34 +0000
Manifest next update: Sat 05 Apr 2025 02:23:34 +0000
Files and hashes: 1: vLFqiHOxvhMm61zbkLGGEV2nTWc.crl (hash: DJ3yk2CjicSOVKCpdoMgAYP4d5ixfwz/6iVyVtJITI0=)
2: A8A940C6429811EDBB392C35C4F9AE02.roa (hash: us+hXVbT4+IxuDXf1t8Zy0IqvnZFy688N7EVgUtl4FA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194715
Validity
Not Before: Mar 29 02:23:34 2025 GMT
Not After : Apr 5 02:23:34 2025 GMT
Subject: CN=67e759a6-1d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:61:37:a0:60:a2:9a:d2:38:ca:9a:04:6c:
0a:c3:c0:b0:c0:3a:98:5e:ac:11:49:62:60:6b:2e:
03:ac:95:e8:0d:4d:27:1d:9a:06:ff:ad:13:bc:7e:
43:39:2b:95:d3:45:02:75:83:28:7e:f7:f6:7e:c9:
e6:15:1f:25:ed:71:e6:67:ae:b8:05:ea:34:60:78:
4c:97:0c:6f:d4:93:ec:a1:0c:f7:44:91:96:ed:06:
ec:98:d2:b0:fa:f4:d0:76:a0:6b:b5:5f:29:53:8c:
a0:53:b4:80:d6:b0:74:e7:92:68:11:f0:7a:f5:16:
d9:54:70:59:31:7c:87:30:c7:0f:a4:47:55:78:85:
84:74:1f:16:d3:4a:0f:88:20:a6:9a:f0:4a:05:46:
49:24:ef:71:5a:54:16:43:0f:00:ec:84:b5:bd:2a:
bb:df:d0:8d:bf:1d:51:cd:ec:8c:ee:b0:b4:14:ad:
45:dd:4d:5d:5e:62:8e:5d:a2:7a:59:cd:0a:71:95:
1b:79:85:3d:05:1e:e1:28:52:8d:7d:ce:52:4d:81:
b3:a9:ff:a1:90:8b:32:17:76:7c:29:f2:61:2b:3b:
e8:b0:4d:e2:20:de:02:3b:8c:7e:64:94:d4:51:1c:
b7:f0:8f:cf:f7:0c:91:59:00:06:c2:29:9f:09:84:
b8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:58:6D:10:8A:BD:71:B0:A1:5D:2C:5A:81:C9:80:06:EF:FD:75:EC
X509v3 Authority Key Identifier:
keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a0:b7:5b:68:9b:27:38:08:79:2b:2c:e3:c3:6b:84:13:1f:
4b:64:40:7d:15:15:64:62:88:96:c5:78:e0:33:38:30:71:e2:
17:3c:09:7c:c1:0c:c9:5e:7a:cb:1e:ee:55:9e:34:58:60:97:
61:b5:69:a8:08:4e:90:57:77:54:8f:40:b8:2e:b3:07:18:d5:
9f:9c:79:e3:a3:0d:09:4e:2f:1a:db:15:1e:a5:99:75:c1:51:
c3:92:64:77:3f:25:98:be:1b:30:28:72:bb:a7:7d:eb:ce:f1:
30:a5:17:c4:79:8c:32:db:4e:87:d8:71:7f:23:d6:98:48:00:
6e:88:ac:46:25:97:26:5e:0f:8f:60:3b:8c:a5:e6:f1:8c:98:
e0:e5:f4:f9:f0:f4:50:36:d7:84:a3:cd:bc:ee:d8:bf:f4:13:
42:1f:fa:3c:88:e4:f9:bf:0d:8d:3b:40:a6:25:56:f3:c3:09:
72:34:ba:69:9d:34:81:de:db:a2:e8:8a:79:d9:01:18:e6:f0:
c4:39:fc:90:6d:b9:2c:c7:3b:55:d1:93:51:1e:98:ed:26:fb:
70:39:c8:99:76:4a:fd:fa:04:16:70:07:9b:f0:12:c2:fb:e5:
be:10:64:a0:65:17:83:0d:a7:be:28:58:2e:91:94:08:8b:b0:
e2:e5:20:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:45:11 2025 by rpki-client