Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
File: apjAwIy9NBmpCCuGDSm_qXL98qc.mft (raw, json)
Hash identifier: gdTwzJhjodyFbebra3/ctbf9VGOiAs+w8LQ6z4KntcE=
Subject key identifier: B1:D6:32:61:53:EB:1B:EA:92:15:60:40:2B:94:02:9C:71:05:F6:1B
Authority key identifier: 6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7
Certificate issuer: /CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7
Certificate serial: 040F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
Manifest number: 040B
Signing time: Sat 29 Mar 2025 00:43:24 +0000
Manifest this update: Sat 29 Mar 2025 00:43:23 +0000
Manifest next update: Sat 05 Apr 2025 00:43:23 +0000
Files and hashes: 1: apjAwIy9NBmpCCuGDSm_qXL98qc.crl (hash: ysPaeTpJ/wMO2xkVrY4zuJsSnwKuEmkE7a3MgUgFBkY=)
2: 61B3CBDC631911ECAE6AA33DC4F9AE02.roa (hash: /+PqdcGfeQGq1JSsbPZ7utBGw8SAzSRzzxhLFAim1J0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1039 (0x40f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2BD6
Validity
Not Before: Mar 29 00:43:23 2025 GMT
Not After : Apr 5 00:43:23 2025 GMT
Subject: CN=67e7422b-54b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:92:29:b5:17:13:e7:60:58:25:9e:0d:8a:05:
81:78:29:d1:6d:b5:ec:ea:9c:50:aa:ed:0a:37:08:
13:7d:44:91:95:13:28:b6:af:be:50:1d:eb:21:07:
1d:c0:72:38:74:bf:eb:5e:32:3f:9d:4a:72:43:a5:
0a:c3:08:cd:eb:be:96:ac:f2:d9:4b:57:4f:a3:6a:
d7:b1:1d:70:a5:14:c4:5a:ca:6b:1f:2e:e8:cb:b6:
31:7a:0c:1d:fb:fb:32:69:ed:b3:dd:7a:fa:ad:55:
de:a4:e7:df:20:9b:2f:53:fb:ee:23:55:70:6c:26:
0d:9a:0e:da:3a:da:81:a6:aa:a3:6c:97:6f:13:92:
9f:7e:9f:78:b6:f6:90:12:32:e7:08:b9:2c:18:04:
c1:d3:de:63:9e:ba:5d:81:a2:c7:7d:df:1d:27:0e:
75:ef:e5:aa:db:ec:c9:cc:f4:53:9d:a3:63:2e:1d:
68:3f:51:c8:08:31:24:18:21:cc:0a:2f:09:19:f7:
f0:4e:65:f4:99:c9:95:c0:b1:bf:ae:7c:2f:b6:21:
b1:06:17:a9:a9:17:08:63:ef:14:39:37:64:eb:53:
7a:24:5b:8f:f8:ea:7d:c8:5a:25:6c:1f:a5:01:62:
12:92:86:eb:c4:a1:06:ce:e5:b9:69:ee:fd:97:34:
df:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D6:32:61:53:EB:1B:EA:92:15:60:40:2B:94:02:9C:71:05:F6:1B
X509v3 Authority Key Identifier:
keyid:6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:3a:f7:76:c0:d3:95:86:b2:82:2b:31:4b:55:96:a6:e9:73:
c1:79:03:d4:92:5d:97:3f:fb:27:d0:61:3c:f2:a5:19:f8:08:
5a:4e:cf:17:0e:d4:6b:bc:6f:b3:5c:c9:3d:eb:4a:66:b6:c3:
75:31:3d:6d:24:80:0f:f6:5c:5b:dd:b3:19:93:59:a2:43:75:
eb:cb:c7:e7:a3:bc:fa:b1:a1:28:6a:a2:2f:cd:49:55:7f:48:
11:fc:ca:85:f7:db:74:af:a2:73:93:30:b5:42:0a:ab:54:45:
44:d8:da:a4:f7:2f:2c:47:15:29:68:73:eb:0c:fb:60:dd:92:
f2:9d:75:86:47:be:5f:48:99:64:7e:a4:35:9b:fd:70:91:b2:
1a:45:eb:64:31:71:5c:41:df:e5:2a:96:60:71:56:3d:c6:23:
08:38:93:cd:e3:6f:bf:fe:0d:94:df:b5:62:5e:69:9a:cf:f8:
1a:b6:15:f8:da:ca:90:9c:4d:44:22:5c:2f:8e:7a:f8:28:65:
08:62:14:b7:fd:74:e7:a4:41:47:b0:59:ec:9b:1c:52:8f:df:
d7:a1:46:2a:81:54:7b:f2:53:e0:21:5b:c2:fa:e9:5a:7b:ff:
65:32:cf:0f:43:a2:b0:0b:ec:54:1b:9f:6f:cf:56:a9:0d:f9:
16:8b:64:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:34 2025 by rpki-client