Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
File: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft (raw, json)
Hash identifier: AmHtTE5e72c8uDUusfjpCLiVi7HvgXlXiKtLSyNBy+Y=
Subject key identifier: 55:7A:B1:4A:C8:CA:C9:71:66:59:68:B2:DC:12:FE:F4:E8:96:18:C1
Authority key identifier: 3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E
Certificate issuer: /CN=A9194CBE/serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E
Certificate serial: 074A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
Manifest number: 073E
Signing time: Fri 28 Mar 2025 22:00:31 +0000
Manifest this update: Fri 28 Mar 2025 22:00:30 +0000
Manifest next update: Fri 04 Apr 2025 22:00:30 +0000
Files and hashes: 1: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl (hash: vzAfzsEeev5aVGRk8GRD0Vy+bnySf87N7pSEwJ6IRuU=)
2: C329F1CE2AB611EDB5BBD62BC4F9AE02.roa (hash: KbjbjWfa/W/SeFQrbonVtHmtNH6PFYaGP9XG75HjJGE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1866 (0x74a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194CBE
Validity
Not Before: Mar 28 22:00:30 2025 GMT
Not After : Apr 4 22:00:30 2025 GMT
Subject: CN=67e71bfe-5ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:4f:db:b6:50:a0:e5:81:1d:85:1c:1d:10:
10:01:44:aa:97:2b:a4:d6:f1:19:c5:96:7a:57:5b:
78:c3:76:57:67:18:03:72:85:b1:e7:f9:6b:f7:fa:
43:d8:0b:8d:96:68:88:5b:8f:b3:b0:9d:a0:5b:0c:
73:ba:6b:48:38:b9:03:8c:ef:64:0b:ca:f6:4e:a8:
14:3b:ec:77:79:83:8a:d7:0e:db:a0:11:3f:1a:c8:
b0:d8:6d:8f:5c:ed:69:9f:9d:c6:92:9f:ed:18:43:
fb:df:01:8e:84:73:3b:db:fb:71:f3:70:01:cd:1b:
4a:c7:5b:84:f1:8b:e8:3a:58:ee:a5:85:8a:29:16:
7f:14:65:60:4a:61:99:8b:d4:5c:65:6d:22:c5:14:
3c:c9:41:56:a5:f7:8d:c0:cc:47:ac:ee:8f:8b:33:
b7:67:74:e0:da:99:1a:d7:80:0d:fc:5d:0b:7b:56:
c9:e6:f7:23:78:6d:92:81:76:fd:25:c5:da:62:20:
ca:22:3a:2a:69:60:dc:11:a7:af:bf:29:b0:4a:2e:
6b:47:7d:ee:a8:93:c4:27:12:93:7a:b8:25:1a:49:
4b:26:9a:c7:23:0c:79:ac:46:d6:80:44:eb:9a:50:
80:d3:96:bf:36:2b:9d:97:4a:f7:22:ed:e4:91:7a:
d3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7A:B1:4A:C8:CA:C9:71:66:59:68:B2:DC:12:FE:F4:E8:96:18:C1
X509v3 Authority Key Identifier:
keyid:3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:44:f7:ca:44:6e:20:3a:09:4f:87:90:77:70:0f:5d:5e:74:
9e:47:38:3a:f3:39:29:3d:5c:81:e0:d9:d9:de:5d:c2:8f:7e:
33:f8:8b:79:65:06:de:c9:8f:cd:7f:2c:ac:f1:3a:93:60:af:
44:b8:e2:9f:f1:cf:a4:ef:6b:dd:db:62:83:5b:97:a5:ae:fd:
2b:d0:ae:15:6c:69:1f:7f:da:d6:5f:6b:21:4d:ae:21:2e:d5:
7c:87:0e:ee:5d:ae:df:eb:cc:08:16:67:f8:f0:3d:11:a2:87:
ec:3b:c9:87:a0:8f:2c:0d:14:7c:17:6f:86:5e:ef:cf:32:cc:
3a:ef:2d:c0:40:b6:9e:30:7d:c2:d2:c7:bc:db:5d:6c:3f:8b:
05:b9:f5:7a:87:29:82:21:f8:23:b4:7f:b1:f6:dd:88:4d:bb:
52:9d:25:53:69:35:f0:ee:7e:02:80:41:d7:f2:6e:d1:96:71:
0e:5f:db:5b:21:fe:ba:c8:e7:7b:30:ff:8b:9a:74:c3:eb:94:
e0:1a:3e:8c:3f:b3:be:10:62:4c:da:01:89:36:d9:e5:b5:fa:
74:41:a4:1e:c9:ad:8b:eb:48:d7:62:6e:46:2c:d0:96:4a:7f:
a3:f5:0c:72:ae:28:70:bc:f3:6c:76:6c:73:64:31:17:f8:a1:
e3:70:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:10:11 2025 by rpki-client